diff options
| author | Alex Light <allight@google.com> | 2021-03-12 09:05:55 -0800 |
|---|---|---|
| committer | Alex Light <allight@google.com> | 2021-03-25 11:28:34 -0700 |
| commit | 7361d27fdeb45f3ea24ab41b1a1a130ab1f17233 (patch) | |
| tree | ac5c475f656df412df063aac5922a6dd64fa82df /scripts/update_device.py | |
| parent | 327dce7f109937e2ad036521fbf68fb8e3e504de (diff) | |
Allow /postinstall files to have custom contexts
We were mounting /postinstall with a 'context=...' option. This forces
all files within /postinstall to have a single selinux context,
limiting the possible granularity of our policies. Here we change it
to simply default to the 'postinstall_file' context for the 'system'
partition but allow individual files to have their own custom contexts
defined by /system/sepolicy. Other partitions retain the single
'postinstall_file' context.
The sample_images were updated to manually add a selinux label for
testing FS contexts.
Test: Manual OTA of blueline
Test: atest update_engine_unittests
Bug: 181182967
Change-Id: I0b8c2b2228fa08afecb64da9c276737eb9ae3631
Diffstat (limited to 'scripts/update_device.py')
0 files changed, 0 insertions, 0 deletions