commit 318591509f8c58617534cb08d7aecedac51f1ae3
author Yabin Cui <yabinc@google.com> Thu Nov 08 17:55:30 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Nov 08 17:55:30 2018 +0000
tree 9958c3b8229f88fc2df0927ded2d3bd03dab704f
parent 71c29a9ce0df115860f2167ec2f2fa1dbbaa4202
parent 97e3bb3a948e407a1ec364401719121ec379ff6e

Merge "run-as: add ":fromRunAs" selector in seinfo."

run-as/run-as.cpp

diff --git a/run-as/run-as.cpp b/run-as/run-as.cpp
index 971b9f4..f49bdf7 100644
--- a/run-as/run-as.cpp
+++ b/run-as/run-as.cpp
@@ -25,6 +25,8 @@
 #include <sys/types.h>
 #include <unistd.h>
 
+#include <string>
+
 #include <libminijail.h>
 #include <scoped_minijail.h>
 
@@ -214,7 +216,8 @@
   minijail_keep_supplementary_gids(j.get());
   minijail_enter(j.get());
 
-  if (selinux_android_setcontext(uid, 0, info.seinfo, pkgname) < 0) {
+  std::string seinfo = std::string(info.seinfo) + ":fromRunAs";
+  if (selinux_android_setcontext(uid, 0, seinfo.c_str(), pkgname) < 0) {
     error(1, errno, "couldn't set SELinux security context");
   }