commit 88d040a32feac727a7e11658198c32d9cc563d8e
author Nick Kralevich <nnk@google.com> Thu Jan 02 21:06:32 2014 +0000
committer Android Git Automerger <android-git-automerger@android.com> Thu Jan 02 21:06:32 2014 +0000
tree 922190e1101d1bb787c7aaeeda845d245184a592
parent 764daa33c06b5fd699bf0c8162b18dd39b00795a
parent 3df76c0c738e0205cf287dbdf6ebe3b75d765b87

am 3df76c0c: am 6bec36ec: am 5b8abdf6: Merge "Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls."

* commit '3df76c0c738e0205cf287dbdf6ebe3b75d765b87':
  Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls.

rootdir/init.rc

diff --git a/rootdir/init.rc b/rootdir/init.rc
index cb254c3..5c0e8b4 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -13,6 +13,9 @@
     # Set init and its forked children's oom_adj.
     write /proc/1/oom_adj -16
 
+    # Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls.
+    write /sys/fs/selinux/checkreqprot 0
+
     # Set the security context for the init process.
     # This should occur before anything else (e.g. ueventd) is started.
     setcon u:r:init:s0