From 58b09f1a36b7e83ab7471ba9fac81f94af5d9c83 Mon Sep 17 00:00:00 2001
From: Ethan Yonker <dees_troy@teamw.in>
Date: Mon, 26 Oct 2015 12:42:15 -0500
Subject: Fix SELinux issues for some devices

Reinstate some SELinux stuff in the default init.rc (noticed by
Kra1o5)

Add permissive.sh script to dependencies list for CM trees.

Change-Id: I36ade54378c413081d202002488309af35486d5f
---
 etc/init.rc | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'etc')

diff --git a/etc/init.rc b/etc/init.rc
index 3cf5d4c1d..f0af6be78 100644
--- a/etc/init.rc
+++ b/etc/init.rc
@@ -2,6 +2,13 @@ import /init.recovery.usb.rc
 import /init.recovery.${ro.hardware}.rc
 
 on early-init
+    # Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls.
+    write /sys/fs/selinux/checkreqprot 0
+
+    # Set the security context for the init process.
+    # This should occur before anything else (e.g. ueventd) is started.
+    setcon u:r:init:s0
+
     start ueventd
     start healthd
 
-- 
cgit v1.2.3