Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 054e6a38 authored by David Anderson's avatar David Anderson
Browse files

init: Fix restorecon for /metadata.

Since new files can be introduced to /metadata after the initial
restorecon, we need to skip hashing.

Bug: 150907679
Test: rollback, ls -lZ /metadata/ota
Change-Id: I1f928f519ae2c75aeedb74b70d513743e86bcf2b
Merged-In: I1f928f519ae2c75aeedb74b70d513743e86bcf2b
parent adc2a7c5
Loading
Loading
Loading
Loading
+2 −2
Original line number Diff line number Diff line
@@ -539,9 +539,9 @@ void SelinuxRestoreContext() {

    // adb remount, snapshot-based updates, and DSUs all create files during
    // first-stage init.
    selinux_android_restorecon("/metadata", SELINUX_ANDROID_RESTORECON_RECURSE);

    selinux_android_restorecon(SnapshotManager::GetGlobalRollbackIndicatorPath().c_str(), 0);
    selinux_android_restorecon("/metadata/gsi", SELINUX_ANDROID_RESTORECON_RECURSE |
                                                        SELINUX_ANDROID_RESTORECON_SKIP_SEHASH);
}

int SelinuxKlogCallback(int type, const char* fmt, ...) {