On 03/19/2013 05:52 AM, dywisdom...@gmail.com wrote:
Hi
I was trying to use "smack" MAC in Android kernel. And I wanted to use
SMACK64EXEC extended attribute which allows switching to another
security context when executing a file.
My problem is that only the linux kernel higher than 2.6.38.8 support
SMACK64EXEC extended attribute, but, As we all know, the Goldfish
emulator currently runs only on 2.6.29 kernel, and the 3.4 version that
currently in Google's git repository is not working, and i don't have a
real device.
AOSP kernel/goldfish android-goldfish-3.4 is working for me now (they
have recently merged many changes that made it functional). On top of
that you need some further changes if you want file security labeling to
fully work on yaffs2 (it already has xattr support but won't label new
files automatically otherwise). That change is here:
https://android-review.googlesource.com/#/c/53721/
Have you considered using SELinux instead? See
http://selinuxproject.org/page/SEAndroid
--
--
unsubscribe: android-kernel+unsubscr...@googlegroups.com
website: http://groups.google.com/group/android-kernel
---
You received this message because you are subscribed to the Google Groups "Android Linux Kernel Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to android-kernel+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
