Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 8c91b8db authored by Bowgo Tsai's avatar Bowgo Tsai
Browse files

Add /system_ext sepolicy support to SELinuxMMAC.java 

Bug: 137712473
Test: enable system_ext sepolicy, then boot crosshatch
Test: the following log entry is in `adb logcat -s SELinuxMMAC`
      SELinuxMMAC: Using policy file /system_ext/etc/selinux/system_ext_mac_permissions.xml

Change-Id: I684c920f8ecf2b5f29f2ad8901e187b7eae1bc89
parent 6265eea8

services/core/java/com/android/server/pm/SELinuxMMAC.java

+7 −0
Original line number Diff line number Diff line
@@ -78,6 +78,13 @@ public final class SELinuxMMAC { 
        sMacPermissions.add(new File(

            Environment.getRootDirectory(), "/etc/selinux/plat_mac_permissions.xml"));



        // SystemExt mac permissions (optional).

        final File systemExtMacPermission = new File(

                Environment.getSystemExtDirectory(), "/etc/selinux/system_ext_mac_permissions.xml");

        if (systemExtMacPermission.exists()) {

            sMacPermissions.add(systemExtMacPermission);

        }



        // Product mac permissions (optional).

        final File productMacPermission = new File(

                Environment.getProductDirectory(), "/etc/selinux/product_mac_permissions.xml");