am f6c03a80: am c690332c: Merge "Revert "init re-execs to set its security context now.""

* commit 'f6c03a80f08542afc82780f3b7cafe994d7a41e4': Revert "init re-execs to set its security context now."
2015-04-24 17:41:57 +00:00
parent 352f9b60e5 f6c03a80f0
commit daa9391ede
1 changed files with 7 additions and 0 deletions
@@ -1,6 +1,13 @@
 import /init.recovery.${ro.hardware}.rc

 on early-init
+    # Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls.
+    write /sys/fs/selinux/checkreqprot 0
+
+    # Set the security context for the init process.
+    # This should occur before anything else (e.g. ueventd) is started.
+    setcon u:r:init:s0
+
    start ueventd
    start healthd