diff options
| author | Jeff Vander Stoep <jeffv@google.com> | 2017-03-14 17:35:31 -0700 |
|---|---|---|
| committer | Jeff Vander Stoep <jeffv@google.com> | 2017-03-14 21:56:24 -0700 |
| commit | 082807f3b4b55c83afe48219e8745945279c96a8 (patch) | |
| tree | 363cb83eb9dc4823d1360d79a8241e90916b47d0 /libcutils/socket_local_server_unix.cpp | |
| parent | e3aef3dd9942d6199db3ddfcbdf4b20e199fa788 (diff) | |
init-debug.rc: don't mount debugfs
Motivation:
1. Reduce skew between userdebug and user builds.
2. Make the decision to mount debugfs on debug builds on a
per-device basis.
3. Prepare to not mount it at all to reduce the attack surface
of the kernel, reduce boot time, and free up memory.
4. Remove the selinux denial on devices that mount twice, i.e.
unconditionally in the device specific .rc file and in the
init-debug.rc file.
avc: denied { mounton } for path="/sys/kernel/debug" dev="debugfs"
ino=1 scontext=u:r:init:s0 tcontext=u:object_r:debugfs:s0
tclass=dir permissive=0
If desired, debugfs may be mounted in device specific rc files
instead.
Bug: 31856701
Bug: 35197529
Test: Build and boot Marlin. Selinux denial no longer observed.
Change-Id: Ie0d954f77f7cf70ed2b94f67a57a6c9eba45ba8e
Diffstat (limited to 'libcutils/socket_local_server_unix.cpp')
0 files changed, 0 insertions, 0 deletions