device_xiaomi_sm6150-common/sepolicy/vendor/vendor_init.te

set_prop(vendor_init, vendor_fp_prop)

# Allow vendor_init to relabel unlabeled files and directories
allow vendor_init unlabeled:{ dir file } { getattr relabelfrom };
sm6150-common: Transform davinci into common tree * The following things are left in devices, because they're device specific - voip compress properties - HVDCP properties - audio configs - power profile - rounded corner configuration - partition configuration - FOD - camera motor - NFC - board-info - fstab - ipa and graphics firmware - shipping and manifest target level Co-authored-by: Adithya R <gh0strider.2k18.reborn@gmail.com> Co-authored-by: Arian <arian.kulmer@web.de> Change-Id: I8bef29041f8f239361b999fc8ab1a43cc2ebb86b 2021-01-12 12:52:43 -05:00			`set_prop(vendor_init, vendor_fp_prop)`
sm6150-common: Force restorecon for /mnt/vendor/persist The restorecon_recursive directive in init is only applied if the file_contexts file changed between builds, but not necessarily if any file or folder inside /mnt/vendor/persist/ has changed. The restorecon code checks whether an xattr named "security.sehash" contains a string that matches the current combined hashes of the SELinux context files and skips restoring labels if there is a match, see https://android.googlesource.com/platform/external/selinux/+/refs/tags/android-9.0.0_r35/libselinux/src/android/android_platform.c#1546 Force wiping that xattr so that restorecon always runs since it's not very expensive (there are currently only about 50 files on /persist). The restorecon is needed to fix issues such as wrong stock labels on /mnt/vendor/persist/sensors/: sensors_persist_file -> persist_sensors_file Change-Id: Ic0cd848836ee550499d9236f56ed6e939e35f01e 2019-04-26 12:02:06 -04:00
			`# Allow vendor_init to relabel unlabeled files and directories`
			`allow vendor_init unlabeled:{ dir file } { getattr relabelfrom };`