commit a8c2c07bb56515ec4e43538395346410b73b69b0
author Stephen Smalley <sds@tycho.nsa.gov> Thu Jun 12 09:27:35 2014 -0400
committer Stephen Smalley <sds@tycho.nsa.gov> Thu Jun 12 09:40:32 2014 -0400
tree 016514e45f7d340f9d81c065a16ee7daa0c80dd9
parent fb1a6cf6c6276f10c174e8af1286fc5b0386c694

Run the charger in the healthd domain.

Current policy assumes that the charger will run in the healthd domain.
Add a seclabel entry for the charger service to ensure that it runs
in the healthd domain even when the charger is a separate binary.

Change-Id: Ic49a707aeb73132e290d218f28ed5c45b4e0e861
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

init.manta.rc

diff --git a/init.manta.rc b/init.manta.rc
index f8e9f71..83963d4 100644
--- a/init.manta.rc
+++ b/init.manta.rc
@@ -176,6 +176,7 @@
 
 service battery_charger /charger
     class charger
+    seclabel u:r:healthd:s0
 
 # Set watchdog timer to 30 seconds and pet it every 10 seconds to get a 20 second margin
 service watchdogd /sbin/watchdogd 10 20