commit 949396f16b6ac85bc485386fb736043911dcfb4f
author Colin Cross <ccross@android.com> Tue Mar 05 21:08:09 2013 +0000
committer Android Git Automerger <android-git-automerger@android.com> Tue Mar 05 21:08:09 2013 +0000
tree 629316d0cf42af02def8bfd08f991df8d2dcf8ef
parent 1a3b024d2608a11260f49943cfde262396d6ddc1
parent bf6982cec4b258f3e87d70d1767d69ab30e72ad2

am bf6982ce: am 7c646cd3: am af4ececc: am 515bed0e: Merge "run-as:  set the SELinux security context."

* commit 'bf6982cec4b258f3e87d70d1767d69ab30e72ad2':
  run-as:  set the SELinux security context.

run-as/Android.mk

diff --git a/run-as/Android.mk b/run-as/Android.mk
index 043cc3a..a8f2885 100644
--- a/run-as/Android.mk
+++ b/run-as/Android.mk
@@ -3,6 +3,8 @@
 
 LOCAL_SRC_FILES:= run-as.c package.c
 
+LOCAL_SHARED_LIBRARIES := libselinux
+
 LOCAL_MODULE:= run-as
 
 include $(BUILD_EXECUTABLE)

run-as/run-as.c

diff --git a/run-as/run-as.c b/run-as/run-as.c
index 20e1530..9eb09ae 100644
--- a/run-as/run-as.c
+++ b/run-as/run-as.c
@@ -29,6 +29,7 @@
 #include <time.h>
 #include <stdarg.h>
 
+#include <selinux/android.h>
 #include <private/android_filesystem_config.h>
 #include "package.h"
 
@@ -162,6 +163,11 @@
         return 1;
     }
 
+    if (selinux_android_setcontext(uid, 0, NULL, pkgname) < 0) {
+        panic("Could not set SELinux security context:  %s\n", strerror(errno));
+        return 1;
+    }
+
     /* User specified command for exec. */
     if (argc >= 3 ) {
         if (execvp(argv[2], argv+2) < 0) {