On Fri, Jun 29, 2012 at 4:38 PM, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote:
I extracted old file from the phone before building and now it is working.
I tried to install application from the google play website directly from the phone but it is not working.
So I installed directly from the apk... some of them are working, others are not... but how to find legitimate apk?
> How to define the policies?
I am not using the MAC support.
How to get the formal meaning of the files? I tried to look for it...
Yes, you are right, but I can't see any deny now... I only have to understand how to go on...
Thank you,On Fri, 2012-06-29 at 15:59 +0200, Alexandra Test wrote:
> Hi,
> sorry for all the mails!That's not SE Android related - it is a general AOSP issue; see
> I installed SeAndroid but I have some problems.
> - the camera is not working (is it normal?)
discussions on android-building. The extract-files.sh script from the
per-device directory may help you.
I extracted old file from the phone before building and now it is working.
> i would like to install other applications but I really didn't get howYes, although you shouldn't need a new policy for each app; policy is
> to do that.
> should I install the application and then define new policies?
written in terms of types (equivalence classes).
I tried to install application from the google play website directly from the phone but it is not working.
So I installed directly from the apk... some of them are working, others are not... but how to find legitimate apk?
> How to define the policies?
If using the middleware MAC support, you would amend the
external/mac-policy/mac_permissions.xml configuration.
For the SELinux
policy, you would possibly amend external/sepolicy/seapp_contexts if you
want to label the app differently and you might amend the rules in
external/sepolicy/app.te.
How to get the formal meaning of the files? I tried to look for it...
> then I notice that I have some residual denials to address in my
> policy.
> I hope I will find a way and I am really sorry but I am a beginner!
Best thing to do is to post the denials and let people help you
understand what they mean and how to start addressing them. Once you've
done it for a few denials, you'll pick it up.
Yes, you are right, but I can't see any deny now... I only have to understand how to go on...
--
Stephen Smalley
National Security Agency
Alexandra
