Temporarily move kickstart into permissive.

User builds of deb are currently hanging on boot, due to various
kickstart denials. https://android-review.googlesource.com/81942
partially fixes this but not entirely.

Root cause is https://android-review.googlesource.com/81990

Works around the following denials:
<5>[    6.355163] type=1400 audit(1392852942.902:4): avc:  denied  { getattr } for  pid=202 comm="sh" path="/dev/block/mmcblk0p5" dev="tmpfs" ino=7595 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
<5>[    6.362487] type=1400 audit(1392852942.912:5): avc:  denied  { setattr } for  pid=208 comm="chown" name="mmcblk0p5" dev="tmpfs" ino=7595 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
<5>[    8.621612] type=1400 audit(1392852945.174:12): avc:  denied  { read } for  pid=259 comm="qcks" name="mmcblk0p5" dev="tmpfs" ino=7595 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
<5>[   20.165863] type=1400 audit(1392852956.715:14): avc:  denied  { getattr } for  pid=670 comm="ks" path="/dev/block/mmcblk0p5" dev="tmpfs" ino=7595 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
<5>[   20.166076] type=1400 audit(1392852956.715:15): avc:  denied  { write } for  pid=670 comm="ks" name="mmcblk0p5" dev="tmpfs" ino=7595 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
<5>[   20.166290] type=1400 audit(1392852956.715:16): avc:  denied  { open } for  pid=670 comm="ks" name="mmcblk0p5" dev="tmpfs" ino=7595 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
[    6.678436] type=1400 audit(1392852716.202:5): avc:  denied  { getattr } for  pid=206 comm="sh" path="/dev/block/mmcblk0p5" dev="tmpfs" ino=7563 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
[    6.686309] type=1400 audit(1392852716.212:6): avc:  denied  { getattr } for  pid=222 comm="sh" path="/dev/block/mmcblk0p5" dev="tmpfs" ino=7563 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
[    6.691833] type=1400 audit(1392852716.222:7): avc:  denied  { getattr } for  pid=224 comm="sh" path="/dev/block/mmcblk0p6" dev="tmpfs" ino=7567 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
[    6.699279] type=1400 audit(1392852716.232:8): avc:  denied  { getattr } for  pid=226 comm="sh" path="/dev/block/mmcblk0p6" dev="tmpfs" ino=7567 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
[    6.705566] type=1400 audit(1392852716.232:9): avc:  denied  { getattr } for  pid=228 comm="sh" path="/dev/block/mmcblk0p7" dev="tmpfs" ino=7571 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
[    6.711700] type=1400 audit(1392852716.242:10): avc:  denied  { getattr } for  pid=230 comm="sh" path="/dev/block/mmcblk0p7" dev="tmpfs" ino=7571 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
[    6.718475] type=1400 audit(1392852716.242:11): avc:  denied  { getattr } for  pid=233 comm="sh" path="/dev/block/mmcblk0p28" dev="tmpfs" ino=7655 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file
[    6.723510] type=1400 audit(1392852716.252:12): avc:  denied  { getattr } for  pid=235 comm="sh" path="/dev/block/mmcblk0p28" dev="tmpfs" ino=7655 scontext=u:r:kickstart:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file

Bug: 13100319
Change-Id: If29e9ca63b4df946c2e3b29ec707a27a8ab79aa4
1 file changed