diff options
| author | Jiyong Park <jiyong@google.com> | 2017-09-21 10:27:36 +0900 |
|---|---|---|
| committer | Jiyong Park <jiyong@google.com> | 2017-09-22 11:34:43 +0900 |
| commit | 0f33f23a76f4bec557459fc91efded6e9f196e67 (patch) | |
| tree | 38d8dc6fa8a1218c2bbce729012766bb5a44af03 /libc/malloc_debug/malloc_debug.cpp | |
| parent | 6e6e1abb89913463778ae7559dd6b70049c52216 (diff) | |
Don't resolve permitted.paths
Linker resolves the paths in /system/etc/ld.config.txt to canonicalize
the paths and to ensure they exist. However, as permitted paths for the
default namespace contain directories such as /vendor/app, /mnt/expand,
and etc., the resolving causes selinux denial on some processes which do
not have access to some of the permitted paths.
In order to silence the bogus selinux denial, resolution is skipped for
permitted paths.
Note that the resolution is not strictly required especially for
Treble-ized devices where permitted paths are already canonicalized (i.e
/vendor isn't a symlink to /system/vendor).
Bug: 65843095
Test: no selinux denial on /vendor/app, /vendor/framework, etc. while
booting.
Merged-In: I1a9921e45f4c15b08cdf8f1caee64c4cb0761e1f
Change-Id: I1a9921e45f4c15b08cdf8f1caee64c4cb0761e1f
(cherry picked from commit 527757e16b450849865461fd0f8e7086c1efa89e)
Diffstat (limited to 'libc/malloc_debug/malloc_debug.cpp')
0 files changed, 0 insertions, 0 deletions