Are you using the initramfs contents as your rootfs, or pivoting to an
ext4 root filesystem image that you built?

On Tue, Oct 20, 2015 at 10:59 AM, YongQin Liu <yongqin....@linaro.org> wrote:
> Hi, All
>
> When I tried the Marshmallow version on our platforms, I got following
> warnings:
> avc: denied { mounton } for pid=1 comm="init" path="/cache" dev="rootfs"
> ino=73 scontext=u:r:init:s0 tcontext=u:object_r:cache_file:s0 tclass=dir
> permissive=1
> avc: denied { mounton } for pid=1 comm="init" path="/storage" dev="rootfs"
> ino=73 scontext=u:r:init:s0 tcontext=u:object_r:storage_file:s0 tclass=dir
> permissive=1
>
> To remove this warnings, I need to add following rules into the init.te
> file:
> allow init cache_file:dir mounton;
> allow init storage_file:dir mounton;
>
> but I did not see similar rules added into the init.te file for Nexus9
> build(device/htc/flounder/sepolicy/),
> and there is no such warnings on the Nexus9 build too.
>
> I am confused on why Nexus9 does not need the mounton rules for init domain,
> and does not have the warnings.
>
> Anyone here can help to explain for me or point me where I should check?
>
> Thanks in advance!
> --
> Best Regards,
> Yongqin Liu
> ---------------------------------------------------------------
> #mailing list
> linaro-andr...@lists.linaro.org
> http://lists.linaro.org/mailman/listinfo/linaro-android
>
> _______________________________________________
> Seandroid-list mailing list
> Seandroid-list@tycho.nsa.gov
> To unsubscribe, send email to seandroid-list-le...@tycho.nsa.gov.
> To get help, send an email containing "help" to
> seandroid-list-requ...@tycho.nsa.gov.
_______________________________________________
Seandroid-list mailing list
Seandroid-list@tycho.nsa.gov
To unsubscribe, send email to seandroid-list-le...@tycho.nsa.gov.
To get help, send an email containing "help" to 
seandroid-list-requ...@tycho.nsa.gov.

Reply via email to