tree e92531839f2c42a6ec344138f51efbabade7d1be
parent 8dca85f0c81e18e73aad914c0c22c111ecfd32bc
author Jiyong Park <jiyong@google.com> 1521475951 +0900
committer Jiyong Park <jiyong@google.com> 1521563155 +0900

/postinstall/* does not search for a lib in /vendor or /odm

There has been no section in the linker config file for the binaries
under /postinstall. As a result, the binaries were run with the legacy
default config where /vendor/lib and /odm/lib are added to the search
paths. This is causing selinux denials as the binaries for OTA are not
allowed to access /vendor/lib or /odm/lib, but the dynamic linker calls
realpath(3) on the paths to canonicalize them.

Fixing the issue by letting /postinstall/* binaries to run with a
dedicated linker namespace config, where /vendor/lib and /odm/lib are
not added to the search paths. Not having the paths is okay because
he OTA binaries should not have dependency to the libs there.

Bug: 75287236
Test: do the OTA, selinux denials on postinstall_file is not shown
Test: above test should pass on  wahoo, marlin and pre-treble devices
Merged-In: I49c11a0929002adfef667890c0a375c2b41054f4
Change-Id: I49c11a0929002adfef667890c0a375c2b41054f4
(cherry picked from commit d7e6cb27b6758fe96b200dde33b75dbe5ba5bf6b)