Run the charger in the healthd domain.
The current policy assumes that the charger will run in the healthd domain.
Add a seclabel entry for the charger service to ensure that it runs in the
healthd domain even when the charger is a separate binary.
Change-Id: Ib79e60425fa2244a5716327f45e63d2c216ad2cc
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
diff --git a/init.deb.rc b/init.deb.rc
index 0ec7247..cb59bae 100644
--- a/init.deb.rc
+++ b/init.deb.rc
@@ -413,6 +413,7 @@
service charger /charger
class charger
+ seclabel u:r:healthd:s0
# virtual sdcard daemon running as media_rw (1023)
service sdcard /system/bin/sdcard -u 1023 -g 1023 -l /data/media /mnt/shell/emulated