summaryrefslogtreecommitdiffstats
path: root/rootdir
diff options
context:
space:
mode:
authorStephen Smalley <sds@tycho.nsa.gov>2013-08-26 10:45:05 -0400
committerStephen Smalley <sds@tycho.nsa.gov>2013-08-26 10:45:05 -0400
commit6552f6885fc2a94501ca064bffc4c18ad40caad8 (patch)
treeec67b2bb3cca3fbbccaf132f3d0ec9a44b846e16 /rootdir
parenta8ba1f2f0b67063978819cc7d04276060450f364 (diff)
downloadsystem_core-6552f6885fc2a94501ca064bffc4c18ad40caad8.zip
system_core-6552f6885fc2a94501ca064bffc4c18ad40caad8.tar.gz
system_core-6552f6885fc2a94501ca064bffc4c18ad40caad8.tar.bz2
Trigger a policy reload from post-fs-data.
Once userdata is available and decrypted, trigger a policy reload to pick up any policy update files stored under /data/security. Change-Id: Ic2b3121c3395429b108c40d1d7f5a3124a5896c5 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'rootdir')
-rw-r--r--rootdir/init.rc3
1 files changed, 3 insertions, 0 deletions
diff --git a/rootdir/init.rc b/rootdir/init.rc
index 5e3c991..50c695b 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -245,6 +245,9 @@ on post-fs-data
# Separate location for storing security policy files on data
mkdir /data/security 0711 system system
+ # Reload policy from /data/security if present.
+ setprop selinux.reload_policy 1
+
# If there is no fs-post-data action in the init.<device>.rc file, you
# must uncomment this line, otherwise encrypted filesystems
# won't work.