Skip to content
Snippets Groups Projects
Select Git revision
  • 2de02877a30e73bdf30fb2bf9cc4957f9ddbf996
  • master default protected
  • android-7.1.2_r28_klist
  • pie-cts-release
  • pie-vts-release
  • pie-cts-dev
  • oreo-mr1-iot-release
  • sdk-release
  • oreo-m6-s4-release
  • oreo-m4-s12-release
  • pie-release
  • pie-r2-release
  • pie-r2-s1-release
  • oreo-vts-release
  • oreo-cts-release
  • oreo-dev
  • oreo-mr1-dev
  • pie-gsi
  • pie-platform-release
  • pie-dev
  • oreo-cts-dev
  • android-o-mr1-iot-release-1.0.4
  • android-9.0.0_r8
  • android-9.0.0_r7
  • android-9.0.0_r6
  • android-9.0.0_r5
  • android-8.1.0_r46
  • android-8.1.0_r45
  • android-n-iot-release-smart-display-r2
  • android-vts-8.1_r5
  • android-cts-8.1_r8
  • android-cts-8.0_r12
  • android-cts-7.1_r20
  • android-cts-7.0_r24
  • android-o-mr1-iot-release-1.0.3
  • android-cts-9.0_r1
  • android-8.1.0_r43
  • android-8.1.0_r42
  • android-n-iot-release-smart-display
  • android-p-preview-5
  • android-9.0.0_r3
41 results

genfs_contexts

  • Nick Kralevich's avatar
    2de02877
    zygote: allow replacing /proc/cpuinfo · 2de02877
    Nick Kralevich authored
    Android's native bridge functionality allows an Android native
    app written on one CPU architecture to run on a different architecture.
    For example, Android ARM apps may run on an x86 CPU.
    
    To support this, the native bridge functionality needs to replace
    /proc/cpuinfo with the version from /system/lib/<ISA>/cpuinfo
    using a bind mount. See commit ab0da5a9a6860046619629b8e6b83692d35dff86
    in system/core.
    
    This change:
    
    1) Creates a new label proc_cpuinfo, and assigns /proc/cpuinfo
    that label.
    2) Grants read-only access to all SELinux domains, to avoid
    breaking pre-existing apps.
    3) Grants zygote mounton capabilities for that file, so zygote
    can replace the file as necessary.
    
    Addresses the following denial:
    
      avc: denied { mounton } for path="/proc/cpuinfo" dev="proc" ino=4026532012 scontext=u:r:zygote:s0 tcontext=u:object_r:proc:s0 tclass=file
    
    Bug: 17671501
    Change-Id: Ib70624fba2baeccafbc0a41369833f76b976ee20
    2de02877
    History
    zygote: allow replacing /proc/cpuinfo
    Nick Kralevich authored
    Android's native bridge functionality allows an Android native
    app written on one CPU architecture to run on a different architecture.
    For example, Android ARM apps may run on an x86 CPU.
    
    To support this, the native bridge functionality needs to replace
    /proc/cpuinfo with the version from /system/lib/<ISA>/cpuinfo
    using a bind mount. See commit ab0da5a9a6860046619629b8e6b83692d35dff86
    in system/core.
    
    This change:
    
    1) Creates a new label proc_cpuinfo, and assigns /proc/cpuinfo
    that label.
    2) Grants read-only access to all SELinux domains, to avoid
    breaking pre-existing apps.
    3) Grants zygote mounton capabilities for that file, so zygote
    can replace the file as necessary.
    
    Addresses the following denial:
    
      avc: denied { mounton } for path="/proc/cpuinfo" dev="proc" ino=4026532012 scontext=u:r:zygote:s0 tcontext=u:object_r:proc:s0 tclass=file
    
    Bug: 17671501
    Change-Id: Ib70624fba2baeccafbc0a41369833f76b976ee20