From 5822a4af8406fb6e9ecc675297af19852b378ca0 Mon Sep 17 00:00:00 2001
From: dcashman <dcashman@google.com>
Date: Tue, 25 Mar 2014 16:31:07 -0700
Subject: [PATCH] Enable world-readable selinuxfs policy binary.

Change-Id: I1eefb457cea1164a8aa9eeb7683b3d99ee56ca99
---
 rootdir/init.rc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/rootdir/init.rc b/rootdir/init.rc
index a07790a35..dfb98f0ab 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -177,6 +177,9 @@ on post-fs
     chown system log /proc/last_kmsg
     chmod 0440 /proc/last_kmsg
 
+    # make the selinux kernel policy world-readable
+    chmod 0444 /sys/fs/selinux/policy
+
     # create the lost+found directories, so as to enforce our permissions
     mkdir /cache/lost+found 0770 root root