Merge "fs_mgr: overlayfs: test w/o sepolicy in enforced mode" am: 010a85afe5
am: 77a2f60a84
Change-Id: I80cccd2e9b7c3333da92c36bd6f4e3a9940ed331
This commit is contained in:
commit
313c9cdd21
1 changed files with 10 additions and 3 deletions
|
|
@ -290,6 +290,11 @@ if ! inAdb; then
|
|||
fi
|
||||
inAdb || die "specified device not in adb mode"
|
||||
isDebuggable || die "device not a debug build"
|
||||
enforcing=true
|
||||
if ! adb_su getenforce </dev/null | grep 'Enforcing' >/dev/null; then
|
||||
echo "${ORANGE}[ WARNING ]${NORMAL} device does not have sepolicy in enforcing mode"
|
||||
enforcing=false
|
||||
fi
|
||||
|
||||
# Do something
|
||||
|
||||
|
|
@ -535,9 +540,11 @@ B="`adb_cat /system/hello`" ||
|
|||
die "re-read system hello after reboot"
|
||||
check_eq "${A}" "${B}" system after reboot
|
||||
# Only root can read vendor if sepolicy permissions are as expected
|
||||
B="`adb_cat /vendor/hello`" &&
|
||||
die "re-read vendor hello after reboot w/o root"
|
||||
check_eq "cat: /vendor/hello: Permission denied" "${B}" vendor after reboot w/o root
|
||||
if ${enforcing}; then
|
||||
B="`adb_cat /vendor/hello`" &&
|
||||
die "re-read vendor hello after reboot w/o root"
|
||||
check_eq "cat: /vendor/hello: Permission denied" "${B}" vendor after reboot w/o root
|
||||
fi
|
||||
adb_root &&
|
||||
B="`adb_cat /vendor/hello`" ||
|
||||
die "re-read vendor hello after reboot"
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue