diff options
| author | Alex Light <allight@google.com> | 2021-03-12 09:05:55 -0800 |
|---|---|---|
| committer | Treehugger Robot <treehugger-gerrit@google.com> | 2021-03-30 18:01:33 +0000 |
| commit | 331e3bd90c3532c1c97b720f671e5f2c0786645e (patch) | |
| tree | c5146cae0640ae1bf367479116df6cc49673b20c /scripts/update_device.py | |
| parent | 4f28a6c15288b7b4a8691e0efc0ca9d420bccb46 (diff) | |
Allow /postinstall files to have custom contexts
We were mounting /postinstall with a 'context=...' option. This forces
all files within /postinstall to have a single selinux context,
limiting the possible granularity of our policies. Here we change it
to simply default to the 'postinstall_file' context for the 'system'
partition but allow individual files to have their own custom contexts
defined by /system/sepolicy. Other partitions retain the single
'postinstall_file' context.
The sample_images were updated to manually add a selinux label for
testing FS contexts.
Test: Manual OTA of blueline
Test: atest update_engine_unittests
Bug: 181182967
Change-Id: I0b8c2b2228fa08afecb64da9c276737eb9ae3631
Merged-In: I0b8c2b2228fa08afecb64da9c276737eb9ae3631
Diffstat (limited to 'scripts/update_device.py')
0 files changed, 0 insertions, 0 deletions