Commit: fb9270766f83901b76e1037a3f4c702eb102da00 - system-core (git)

system/core

Commit MetaInfo

• Revision: fb9270766f83901b76e1037a3f4c702eb102da00 (tree)
• Time: 2019-11-16 06:04:30
• Author: William Bellavance <flintman@flin...>
• Commiter: Nolen Johnson

Log Message

init: don't skip starting a service with no domain if permissive

Requires external/libselinux change as well

Change-Id: I3f2887930e15d09014c2594141ba4acbbc8d6d9d

Change Summary

• modified: init/service.cpp

Incremental Difference

--- a/init/service.cpp
+++ b/init/service.cpp
@@ -373,9 +373,11 @@ bool Service::Start() {
         }
         if (rc == 0 && scon == mycon) {
             ERROR("Service %s does not have a SELinux domain defined.\n", name_.c_str());
-            free(mycon);
-            free(fcon);
-            return false;
+            if (selinux_status_getenforce() > 0) {
+                free(mycon);
+                free(fcon);
+                return false;
+            }
         }
         free(mycon);
         free(fcon);