ACPR/android_system_core
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge "fs_mgr: overlayfs: test w/o sepolicy in enforced mode"

Browse source 
am: 010a85afe5

Change-Id: Icf2d430c876d7ff055abf7b7eaa08075bd86fc37
This commit is contained in:
Mark Salyzyn 2018-12-14 14:41:35 -08:00 • committed by android-build-merger
commit 77a2f60a84
1 changed files with 10 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
fs_mgr/tests/adb-remount-test.sh
View file

@ -290,6 +290,11 @@ if ! inAdb; then
fi fi
inAdb || die "specified device not in adb mode" inAdb || die "specified device not in adb mode"
isDebuggable || die "device not a debug build" isDebuggable || die "device not a debug build"
enforcing=true
if ! adb_su getenforce </dev/null | grep 'Enforcing' >/dev/null; then
echo "${ORANGE}[ WARNING ]${NORMAL} device does not have sepolicy in enforcing mode"
enforcing=false
fi
# Do something # Do something
@ -535,9 +540,11 @@ B="`adb_cat /system/hello`" ||
die "re-read system hello after reboot" die "re-read system hello after reboot"
check_eq "${A}" "${B}" system after reboot check_eq "${A}" "${B}" system after reboot
# Only root can read vendor if sepolicy permissions are as expected # Only root can read vendor if sepolicy permissions are as expected
B="`adb_cat /vendor/hello`" && if ${enforcing}; then
die "re-read vendor hello after reboot w/o root" B="`adb_cat /vendor/hello`" &&
check_eq "cat: /vendor/hello: Permission denied" "${B}" vendor after reboot w/o root die "re-read vendor hello after reboot w/o root"
check_eq "cat: /vendor/hello: Permission denied" "${B}" vendor after reboot w/o root
fi
adb_root && adb_root &&
B="`adb_cat /vendor/hello`" || B="`adb_cat /vendor/hello`" ||
die "re-read vendor hello after reboot" die "re-read vendor hello after reboot"