commit 431826fcf80e22b01aa7801cf28b8aafa987b3a9
author Stephen Smalley <sds@tycho.nsa.gov> Thu Jun 12 09:41:50 2014 -0400
committer Stephen Smalley <sds@tycho.nsa.gov> Thu Jun 12 09:41:50 2014 -0400
tree ea6054e28aa5e7f2db079c78b0dc6bb8634b1f81
parent b5fdee631de90c6931c10f5e9a8694ecf49a74ff

Run the charger in the healthd domain.

The current policy assumes that the charger will run in the healthd domain.
Add a seclabel entry for the charger service to ensure that it runs in the
healthd domain even when the charger is a separate binary.

Change-Id: Ib79e60425fa2244a5716327f45e63d2c216ad2cc
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

init.deb.rc

diff --git a/init.deb.rc b/init.deb.rc
index 0ec7247..cb59bae 100644
--- a/init.deb.rc
+++ b/init.deb.rc
@@ -413,6 +413,7 @@
 
 service charger /charger
     class charger
+    seclabel u:r:healthd:s0
 
 # virtual sdcard daemon running as media_rw (1023)
 service sdcard /system/bin/sdcard -u 1023 -g 1023 -l /data/media /mnt/shell/emulated