From 11309e912dbd960ed30c26735bac02a7dd70a022 Mon Sep 17 00:00:00 2001
From: Ethan Yonker <dees_troy@teamw.in>
Date: Wed, 1 Jul 2015 07:58:56 -0500
Subject: Union sepolicy within TWRP to make SELinux permissive

This patch set should make it easier to build TWRP in non-Omni
trees as it allows TWRP to modify the sepolicy instead of having
to merge a patch in external/sepolicy to meet TWRP's needs.

Change-Id: I73205343556abb0852ff4c5f8cbf293d840b95d9
---
 Android.mk       | 5 +++++
 sepolicy/twrp.te | 1 +
 2 files changed, 6 insertions(+)
 create mode 100644 sepolicy/twrp.te

diff --git a/Android.mk b/Android.mk
index ed32528d5..dab1b1705 100644
--- a/Android.mk
+++ b/Android.mk
@@ -17,15 +17,20 @@ LOCAL_PATH := $(call my-dir)
 ifdef project-path-for
     ifeq ($(LOCAL_PATH),$(call project-path-for,recovery))
         PROJECT_PATH_AGREES := true
+        BOARD_SEPOLICY_DIRS += bootable/recovery-twrp/sepolicy
     endif
 else
     ifeq ($(LOCAL_PATH),bootable/recovery)
         PROJECT_PATH_AGREES := true
+        BOARD_SEPOLICY_DIRS += bootable/recovery/sepolicy
     endif
 endif
 
 ifeq ($(PROJECT_PATH_AGREES),true)
 
+# Make recovery domain permissive for TWRP
+BOARD_SEPOLICY_UNION += twrp.te
+
 include $(CLEAR_VARS)
 
 TWRES_PATH := "/twres/"
diff --git a/sepolicy/twrp.te b/sepolicy/twrp.te
new file mode 100644
index 000000000..3ebdc4b3b
--- /dev/null
+++ b/sepolicy/twrp.te
@@ -0,0 +1 @@
+permissive recovery;
-- 
cgit v1.2.3