RE: reload seandroid policy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



You can run the command on the host:

$ adb shell dmesg | grep 'Loaded policy from'

This will give you the answers to both your questions.  When SE Android loads policy, it
shows the path of the policy file that it loads.  The output on one of my running systems
just a moment ago was:

<4>[152862.099407] SELinux: Loaded policy from /data/system/sepolicy.24



________________________________________
From: owner-selinux@xxxxxxxxxxxxx [owner-selinux@xxxxxxxxxxxxx] on behalf of Shuiqing Wang [s.wang@xxxxxxxxxxxxxxx]
Sent: Friday, November 09, 2012 1:26 PM
To: selinux@xxxxxxxxxxxxx
Subject: reload seandroid policy

I am new to SEAndroid and I have a couple of questions about reloading
policy, on Android 4.0.4.

1. I read from the SEAndroid wiki that I can copy a new policy file
to /data/system, and issue a "setprop selinux.reload_policy 1" command
in adb shell to trigger a reload of policy. I did this but nothing
happened. How do I know the reload is successful or not? I checked dmesg
but saw nothing useful.

2. How to I know which policy file is pointed to by the kernel currently
if multiple policies exist on my device? Is there a adb shell command or
log file that can help?

Thanks,
Shuiqing


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.


[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux