On 01/15/2013 04:52 AM, 董钰 wrote: > LOL,Too early to end the problem. > My goal is to "attached every file and dir in android with a security > label". > The files under /data can be setxattr and the change can last after the > reboot of the emulator now, but the change of setxattr to the files > under /system still can't last after the reboot of the emulator. That's > really weird. According to init.rc, both the /data and /system were > mounted in yaffs type. I can't figure out any difference between them to > cause this. > ps: > I modified init.rc to make /system mounted rw. http://developer.android.com/tools/devices/emulator.html#diskimages "The emulator does not permit renaming the temporary system image or persisting it at device power-off." This is presumably because system images aren't normally modified at runtime, unlike the user data images. To create a system image with security labels for SE Android, we modified mkyaffs2image to create the image with the extended attributes already set based on our external/sepolicy/file_contexts configuration, which specifies a mapping from pathname regexes to security contexts. It shouldn't be hard to generalize our code to support other xattrs. Our changes to external/yaffs2 have been merged into AOSP. We also did the same thing for make_ext4fs (system/extras/ext4_utils), as ext4 is used on modern devices. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
