Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 436464ab authored by Mark Salyzyn's avatar Mark Salyzyn
Browse files

fs_mgr: overlayfs: test w/o sepolicy in enforced mode 

Skip sepolicy test if device is not in enforcing mode.

Test: adb-remount-test.sh
Change-Id: I1558674819bda0c9f575d5202f693fec55c9d84f
parent f7572ec8

fs_mgr/tests/adb-remount-test.sh

+10 −3
Original line number Diff line number Diff line
@@ -290,6 +290,11 @@ if ! inAdb; then 
fi

inAdb || die "specified device not in adb mode"

isDebuggable || die "device not a debug build"

enforcing=true

if ! adb_su getenforce </dev/null | grep 'Enforcing' >/dev/null; then

  echo "${ORANGE}[  WARNING ]${NORMAL} device does not have sepolicy in enforcing mode"

  enforcing=false

fi



# Do something
@@ -535,9 +540,11 @@ B="`adb_cat /system/hello`" || 
  die "re-read system hello after reboot"

check_eq "${A}" "${B}" system after reboot

# Only root can read vendor if sepolicy permissions are as expected

if ${enforcing}; then

  B="`adb_cat /vendor/hello`" &&

    die "re-read vendor hello after reboot w/o root"

  check_eq "cat: /vendor/hello: Permission denied" "${B}" vendor after reboot w/o root

fi

adb_root &&

  B="`adb_cat /vendor/hello`" ||

  die "re-read vendor hello after reboot"