From 25775e8e638d9d323c2dbac6d770092b920a5360 Mon Sep 17 00:00:00 2001 From: Jeff Sharkey Date: Tue, 31 Mar 2015 15:03:29 -0700 Subject: [PATCH] Different blkid and fsck execution domains. Tell vold about which SELinux domains to use for different classes of devices. Also create a directory for vold to store private files. Bug: 19993667 Change-Id: Ib7bc80234f2b13a89b143bf90f147140109570cd --- rootdir/init.rc | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/rootdir/init.rc b/rootdir/init.rc index 9fad0ed30..219a3531e 100644 --- a/rootdir/init.rc +++ b/rootdir/init.rc @@ -268,6 +268,7 @@ on post-fs-data chmod 0660 /data/misc/wifi/wpa_supplicant.conf mkdir /data/local 0751 root root mkdir /data/misc/media 0700 media media + mkdir /data/misc/vold 0700 root root # For security reasons, /data/local/tmp should always be empty. # Do not place files or directories in /data/local/tmp @@ -524,7 +525,9 @@ service servicemanager /system/bin/servicemanager onrestart restart surfaceflinger onrestart restart drm -service vold /system/bin/vold +service vold /system/bin/vold \ + --blkid_context=u:r:blkid:s0 --blkid_untrusted_context=u:r:blkid_untrusted:s0 \ + --fsck_context=u:r:fsck:s0 --fsck_untrusted_context=u:r:fsck_untrusted:s0 class core socket vold stream 0660 root mount ioprio be 2