Skip to content
Snippets Groups Projects
  • Mihai Serban's avatar
    87c11478
    Allow ueventd to relabel block devices · 87c11478
    Mihai Serban authored
    
    There is a race in ueventd's coldboot procedure that permits creation
    of device block nodes before platform devices are registered. In this case
    the device node links used to compute the SELinux context are not known
    and the node is created under the generic context: u:object_r:block_device:s0.
    
    Ueventd has been patched to relabel the nodes on subsequent add events but
    it needs permissions to be allowed to do it.
    
    BUG=28388946
    
    Signed-off-by: default avatarMihai Serban <mihai.serban@intel.com>
    
    (cherry picked from commit d41ad551)
    
    Change-Id: I26838a3a9bc19b341e7176e5dc614827232014bf
    87c11478
    History
    Allow ueventd to relabel block devices
    Mihai Serban authored
    
    There is a race in ueventd's coldboot procedure that permits creation
    of device block nodes before platform devices are registered. In this case
    the device node links used to compute the SELinux context are not known
    and the node is created under the generic context: u:object_r:block_device:s0.
    
    Ueventd has been patched to relabel the nodes on subsequent add events but
    it needs permissions to be allowed to do it.
    
    BUG=28388946
    
    Signed-off-by: default avatarMihai Serban <mihai.serban@intel.com>
    
    (cherry picked from commit d41ad551)
    
    Change-Id: I26838a3a9bc19b341e7176e5dc614827232014bf