On 04/06/2015 09:54 AM, Tai Nguyen (tainguye) wrote: > We use AOSP branch 4.4.2. > We see the problem on upgrade from JB to KK. > If we do reset then all new /data/data/<app> are created with the KK label > as expected. > > Based on previous commit, I have to change the seinfo for the rule to > work. > -user=_app seinfo=platform name=com.cisco.vvm domain=vvm_app > type=platform_app_data_file > +user=_app seinfo=vvm_app name=com.cisco.vvm domain=vvm_app > type=platform_app_data_file > > > In this case, the mac_permissions.xml does have the seinfo set to vvm_app > for that app. > I¹m not sure that cause the confusion or not. I was confused why the > seinfo=platform doesn¹t work.
Still not clear on what your code base is, as vanilla AOSP 4.4.2 wouldn't have the /data/data relabeling support at all. It would only include that support if you are including our changes from our seandroid-4.4.2 branch, including the changes to frameworks/native, frameworks/base, and external/libselinux at least. I also don't see why you would need to change the seinfo value; seems like that would be a bug in libselinux or elsewhere. Hard to assess since we don't know how your code diverges from AOSP or our seandroid-* branches. And we aren't maintaining our 4.4 branches anymore since 5.x is available... _______________________________________________ Seandroid-list mailing list [email protected] To unsubscribe, send email to [email protected]. To get help, send an email containing "help" to [email protected].
