diff options
| author | Nick Kralevich <nnk@google.com> | 2014-01-02 20:58:34 +0000 |
|---|---|---|
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | 2014-01-02 20:58:35 +0000 |
| commit | 5b8abdf6278a4142736d918d1371d10c54c91db3 (patch) | |
| tree | 33f16348c3cd76824a56679268268b691f94e41a /rootdir | |
| parent | 268cc54089cbdeb0c2ea955448bb16a0858c4538 (diff) | |
| parent | 5e1461dc906f68f6590df1c79f2f4d69e0af18c5 (diff) | |
| download | system_core-5b8abdf6278a4142736d918d1371d10c54c91db3.zip system_core-5b8abdf6278a4142736d918d1371d10c54c91db3.tar.gz system_core-5b8abdf6278a4142736d918d1371d10c54c91db3.tar.bz2 | |
Merge "Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls."
Diffstat (limited to 'rootdir')
| -rw-r--r-- | rootdir/init.rc | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/rootdir/init.rc b/rootdir/init.rc index 56e0d92..1129206 100644 --- a/rootdir/init.rc +++ b/rootdir/init.rc @@ -13,6 +13,9 @@ on early-init # Set init and its forked children's oom_adj. write /proc/1/oom_adj -16 + # Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls. + write /sys/fs/selinux/checkreqprot 0 + # Set the security context for the init process. # This should occur before anything else (e.g. ueventd) is started. setcon u:r:init:s0 |