commit 8b4ea5a49dda2767af87604713053e1bc418e96f
author dcashman <dcashman@google.com> Wed Apr 09 16:37:05 2014 +0000
committer Android Git Automerger <android-git-automerger@android.com> Wed Apr 09 16:37:05 2014 +0000
tree 6f7b816f142b34bee0b2f215e38518d67882968c
parent 7b6a8cbae956de544f01c43ec0814130aea1f846
parent 39a5b812904ec13390d6261bafccf823729ae21d

am 39a5b812: am 2baf2886: Merge "Enable world-readable selinuxfs policy binary."

* commit '39a5b812904ec13390d6261bafccf823729ae21d':
  Enable world-readable selinuxfs policy binary.

rootdir/init.rc

diff --git a/rootdir/init.rc b/rootdir/init.rc
index 63d7e9b..53b380b 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -186,6 +186,9 @@
     chown system log /proc/last_kmsg
     chmod 0440 /proc/last_kmsg
 
+    # make the selinux kernel policy world-readable
+    chmod 0444 /sys/fs/selinux/policy
+
     # create the lost+found directories, so as to enforce our permissions
     mkdir /cache/lost+found 0770 root root