(returning discussion to the list, as you dropped the cc line from your
last reply)

On Thu, 2012-10-11 at 15:22 +0200, Alexandra Test wrote:
> I am doing adb shell setprop selinux.reload_policy 1 after pushing the
> file.
> 
> If I reboot the phone, do I lose the changes?

On a reboot, it loads policy from /sepolicy (or /sepolicy.24, depending
on what snapshot of libselinux you used).  If you want it to reload
from /data/system/sepolicy automatically on every boot, you need to put
the setprop command into your init.rc file within the post-fs-data
section, as I've said before (maybe we should just make that change in
our seandroid branches?).  Best thing to do is to just rebuild and
reflash your boot image so that it gets loaded at boot every time.  

> <4>[   21.035675] avc:  received policyload notice (seqno=2)

You should see output with a SELinux prefix in dmesg output upon a
policy reload, followed by a message telling you which policy file was
loaded, e.g.:
<7>[64374.939331] SELinux: 512 avtab hash slots, 1265 rules.
<7>[64374.939605] SELinux:  1 users, 2 roles, 240 types, 10 bools, 1
sens, 1024 cats
<7>[64374.939880] SELinux:  84 classes, 1265 rules
<5>[64375.237121] type=1403 audit(952212134.659:54): policy loaded
auid=4294967295 ses=4294967295
<4>[64375.237457] SELinux: Loaded policy from /data/system/sepolicy


-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the seandroid-list mailing list.
If you no longer wish to subscribe, send mail to [email protected] with
the words "unsubscribe seandroid-list" without quotes as the message.

Reply via email to