summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNick Kralevich <nnk@google.com>2015-04-24 18:59:11 +0200
committerGerrit Code Review <noreply-gerritcodereview@google.com>2015-04-24 18:59:11 +0200
commitc690332c5e4008d0f58d7a356311a821ef07d0cf (patch)
treebd2094bf767a24c8795b5ec20d29c59aa7125f8d
parentMerge "init re-execs to set its security context now." (diff)
parentRevert "init re-execs to set its security context now." (diff)
downloadandroid_bootable_recovery-c690332c5e4008d0f58d7a356311a821ef07d0cf.tar
android_bootable_recovery-c690332c5e4008d0f58d7a356311a821ef07d0cf.tar.gz
android_bootable_recovery-c690332c5e4008d0f58d7a356311a821ef07d0cf.tar.bz2
android_bootable_recovery-c690332c5e4008d0f58d7a356311a821ef07d0cf.tar.lz
android_bootable_recovery-c690332c5e4008d0f58d7a356311a821ef07d0cf.tar.xz
android_bootable_recovery-c690332c5e4008d0f58d7a356311a821ef07d0cf.tar.zst
android_bootable_recovery-c690332c5e4008d0f58d7a356311a821ef07d0cf.zip
-rw-r--r--etc/init.rc7
1 files changed, 7 insertions, 0 deletions
diff --git a/etc/init.rc b/etc/init.rc
index 6c07c6027..c78a44a2a 100644
--- a/etc/init.rc
+++ b/etc/init.rc
@@ -1,6 +1,13 @@
import /init.recovery.${ro.hardware}.rc
on early-init
+ # Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls.
+ write /sys/fs/selinux/checkreqprot 0
+
+ # Set the security context for the init process.
+ # This should occur before anything else (e.g. ueventd) is started.
+ setcon u:r:init:s0
+
start ueventd
start healthd