Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1b8700f7 authored by Andreas Gampe's avatar Andreas Gampe
Browse files

Installd: Add selinux check 

Add a check whether the device is enforcing selinux.

Bug: 118818285
Test: atest installd_dexopt_test
Change-Id: Icefbe04e45af8abad984ad6796f5c84c22f4c95e
parent 776e1727

cmds/installd/tests/installd_dexopt_test.cpp

+14 −0
Original line number Diff line number Diff line
@@ -143,6 +143,20 @@ static const char kDexFile[] = 
    "AAAACADojmFLPcugSwoBAAAUAgAACwAYAAAAAAAAAAAAoIEAAAAAY2xhc3Nlcy5kZXhVVAUAA/Ns"

    "+ll1eAsAAQQj5QIABIgTAABQSwUGAAAAAAEAAQBRAAAATwEAAAAA";



class DexoptTestEnvTest : public testing::Test {

};



TEST_F(DexoptTestEnvTest, CheckSelinux) {

    ASSERT_EQ(1, is_selinux_enabled());



    // Crude cutout for virtual devices.

#if !defined(__i386__) && !defined(__x86_64__)

    constexpr bool kIsX86 = false;

#else

    constexpr bool kIsX86 = true;

#endif

    ASSERT_TRUE(1 == security_getenforce() || kIsX86);

}



class DexoptTest : public testing::Test {

protected: