* Issue with setting booleans in SEManager app
@ 2012-07-27 11:15 Michal Mašek
2012-07-27 13:39 ` Stephen Smalley
0 siblings, 1 reply; 2+ messages in thread
From: Michal Mašek @ 2012-07-27 11:15 UTC (permalink / raw)
To: selinux
Hi,
I am unable to set or unset 'app_ndk' boolean using the SEManager app in
seandroid-4.1.1 branch (in the master branch everything works fine).
However I can still set it from command line:
adb shell su 0 setsebool app_ndk=1
The same applies for 'in_qemu' boolean. All other booleans can be set
just fine. I am running SEAndroid on Galaxy Nexus. Does anyone else have
this issue?
--
Michal Mašek
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Issue with setting booleans in SEManager app
2012-07-27 11:15 Issue with setting booleans in SEManager app Michal Mašek
@ 2012-07-27 13:39 ` Stephen Smalley
0 siblings, 0 replies; 2+ messages in thread
From: Stephen Smalley @ 2012-07-27 13:39 UTC (permalink / raw)
To: Michal Mašek; +Cc: selinux
On Fri, 2012-07-27 at 13:15 +0200, Michal Mašek wrote:
> Hi,
>
> I am unable to set or unset 'app_ndk' boolean using the SEManager app in
> seandroid-4.1.1 branch (in the master branch everything works fine).
> However I can still set it from command line:
> adb shell su 0 setsebool app_ndk=1
>
> The same applies for 'in_qemu' boolean. All other booleans can be set
> just fine. I am running SEAndroid on Galaxy Nexus. Does anyone else have
> this issue?
If you re-sync, this should be fixed now. I originally didn't bring
over the chown -R support from seandroid to seandroid-4.1.1 because we
thought it was rejected by AOSP, so I had manually added chown
statements for the current set of booleans to init.rc but missed app_ndk
(in_qemu was intentional as it should only normally be set by
init.goldfish.rc when running on the emulator and shouldn't really be
changed by users, which we could enforce by adding a genfscon statement
to label it differently). However, as the chown -R patch has been
revived, I put the latest version on seandroid-4.1.1 and switched back
to using it. Note however that it appears that the syntax will be
changing for it based on AOSP comments.
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2012-07-27 13:39 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2012-07-27 11:15 Issue with setting booleans in SEManager app Michal Mašek
2012-07-27 13:39 ` Stephen Smalley
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.