This patch will allow non-matched apps in seapp_contexts to still be spawned via the zygote. An error message will be sent to logcat. Change-Id: I9fb5dcfeb384a26e6a01d69bffd2ef14af74c51c --- src/android.c | 12 +++++++++--- 1 files changed, 9 insertions(+), 3 deletions(-) diff --git a/src/android.c b/src/android.c index ef27991..953a213 100644 --- a/src/android.c +++ b/src/android.c @@ -526,8 +526,7 @@ int selinux_android_setcontext(uid_t uid, selinux_log(SELINUX_ERROR, "%s: No match for app with uid %d, seinfo %s, name %s\n", __FUNCTION__, uid, seinfo, pkgname); - rc = -1; - goto out; + goto err; } ctx_str = context_str(ctx); @@ -559,7 +558,14 @@ err: "%s: Error setting context for app with uid %d, seinfo %s: %s\n", __FUNCTION__, uid, seinfo, strerror(errno)); - rc = -1; + rc = security_getenforce(); + if(rc == -1) + selinux_log(SELINUX_ERROR, + "%s: Error getting enforcing level: %s\n", + __FUNCTION__, strerror(errno)); + else + rc = -rc; + goto out; oom: selinux_log(SELINUX_ERROR, "%s: Out of memory\n", __FUNCTION__); -- 1.7.0.4 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
