From 08711d34e483c00cb091d6adf2bd60ba461adbaf Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Tue, 16 Jul 2013 11:33:14 -0700
Subject: [PATCH] Move isolated_app.te / untrusted_app.te into permissive

OTAs aren't properly labeling /system, which is causing SELinux
breakage. Temporarily put isolated_app.te and untrusted_app.te
into permissive.

Bug: 9878561
Change-Id: Icaf674ad6b3d59cbca3ae796c930c98ab67cae9c
---
 isolated_app.te  | 1 +
 untrusted_app.te | 1 +
 2 files changed, 2 insertions(+)

diff --git a/isolated_app.te b/isolated_app.te
index 13d6e9c0f..77f14d323 100644
--- a/isolated_app.te
+++ b/isolated_app.te
@@ -10,6 +10,7 @@
 ###
 
 type isolated_app, domain;
+permissive isolated_app;
 app_domain(isolated_app)
 
 # Appdomain interaction with isolated apps
diff --git a/untrusted_app.te b/untrusted_app.te
index 5b03280f2..2ddf0b597 100644
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -10,6 +10,7 @@
 ###
 
 type untrusted_app, domain;
+permissive untrusted_app;
 app_domain(untrusted_app)
 net_domain(untrusted_app)
 bluetooth_domain(untrusted_app)
-- 
GitLab