diff options
| author | Michael Bestas <mkbestas@lineageos.org> | 2020-01-12 04:09:19 +0200 |
|---|---|---|
| committer | Michael Bestas <mkbestas@lineageos.org> | 2020-01-12 05:01:24 +0200 |
| commit | d3d5d5e20999992029a55620ea8a96fd493af6fb (patch) | |
| tree | 88d4ff0ff96e8036904e38cea7a8e3bdc2839975 /rootdir | |
| parent | d686176a931e3ef28c820109bd2cedad7c504d14 (diff) | |
| download | system_core-d3d5d5e20999992029a55620ea8a96fd493af6fb.tar.gz system_core-d3d5d5e20999992029a55620ea8a96fd493af6fb.tar.bz2 system_core-d3d5d5e20999992029a55620ea8a96fd493af6fb.zip | |
Change search order for system processes in vndk_lite.
Originally, vndk_lite does not include product/lib and product_services/lib
directories first but searches for the required files in vendor/lib and odm/lib.
However, if a vendor/odm library with the same name exists, that causes the
vendor/odm library to be set as dependency to the system process that is searching
for the library, hitting neverallow SELinux denials.
To avoid this problem, allow the system processes in vndk_lite devices
to search product/lib and product_services/lib prior to vendor/lib and odm/lib.
Test: Check boot for vndk_lite devices.
Change-Id: I4113938d0803480f682c3521765e1d5f3c19ab79
Diffstat (limited to 'rootdir')
| -rw-r--r-- | rootdir/etc/ld.config.vndk_lite.txt | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/rootdir/etc/ld.config.vndk_lite.txt b/rootdir/etc/ld.config.vndk_lite.txt index 564255926..3e97e2d9a 100644 --- a/rootdir/etc/ld.config.vndk_lite.txt +++ b/rootdir/etc/ld.config.vndk_lite.txt @@ -45,21 +45,21 @@ additional.namespaces = runtime,conscrypt,media,resolv,sphal,vndk,rs namespace.default.isolated = false namespace.default.search.paths = /system/${LIB} -namespace.default.search.paths += /odm/${LIB} -namespace.default.search.paths += /vendor/${LIB} namespace.default.search.paths += /%PRODUCT%/${LIB} namespace.default.search.paths += /%PRODUCT_SERVICES%/${LIB} +namespace.default.search.paths += /odm/${LIB} +namespace.default.search.paths += /vendor/${LIB} namespace.default.asan.search.paths = /data/asan/system/${LIB} namespace.default.asan.search.paths += /system/${LIB} -namespace.default.asan.search.paths += /data/asan/odm/${LIB} -namespace.default.asan.search.paths += /odm/${LIB} -namespace.default.asan.search.paths += /data/asan/vendor/${LIB} -namespace.default.asan.search.paths += /vendor/${LIB} namespace.default.asan.search.paths += /data/asan/%PRODUCT%/${LIB} namespace.default.asan.search.paths += /%PRODUCT%/${LIB} namespace.default.asan.search.paths += /data/asan/%PRODUCT_SERVICES%/${LIB} namespace.default.asan.search.paths += /%PRODUCT_SERVICES%/${LIB} +namespace.default.asan.search.paths += /data/asan/odm/${LIB} +namespace.default.asan.search.paths += /odm/${LIB} +namespace.default.asan.search.paths += /data/asan/vendor/${LIB} +namespace.default.asan.search.paths += /vendor/${LIB} # Keep in sync with the platform namespace in the com.android.runtime APEX # ld.config.txt. |