commit 5b8abdf6278a4142736d918d1371d10c54c91db3
author Nick Kralevich <nnk@google.com> Thu Jan 02 20:58:34 2014 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Jan 02 20:58:35 2014 +0000
tree 33f16348c3cd76824a56679268268b691f94e41a
parent 268cc54089cbdeb0c2ea955448bb16a0858c4538
parent 5e1461dc906f68f6590df1c79f2f4d69e0af18c5

Merge "Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls."

rootdir/init.rc

diff --git a/rootdir/init.rc b/rootdir/init.rc
index 56e0d92..1129206 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -13,6 +13,9 @@
     # Set init and its forked children's oom_adj.
     write /proc/1/oom_adj -16
 
+    # Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls.
+    write /sys/fs/selinux/checkreqprot 0
+
     # Set the security context for the init process.
     # This should occur before anything else (e.g. ueventd) is started.
     setcon u:r:init:s0