Thanks - The fix works but I had to use "make clean" to get rid of the out directory and then "make" to finally get it to work.
--- On Tue, 12/3/13, Stephen Smalley <[email protected]> wrote: > From: Stephen Smalley <[email protected]> > Subject: Re: Query regarding setool --policy > To: "Richard Haines" <[email protected]> > Cc: [email protected] > Date: Tuesday, 12 March, 2013, 14:38 > On 03/12/2013 10:36 AM, Richard > Haines wrote: > > Tried rebuilding + using the generated > mac_permissions.xml file but > > still failed. However if I remove the package name it > does work: > > > > setool --policy external/sepolicy/mac_permissions.xml > SEAndroidDemo.apk > > Policy passed for com.example.seandroiddemo > (./SEAndroidDemo.apk). > > > > <signer signature="-Removed key info-"> > > <!-- <package > name="com.example.seandroiddemo"> --> > > <allow-permission > name="android.permission.READ_EXTERNAL_STORAGE" /> > > <allow-permission > name="android.permission.SEND_SMS" /> > > <allow-permission > name="android.permission.WRITE_EXTERNAL_STORAGE" /> > > <allow-permission > name="com.example.seandroiddemo.permission.DEADLY_ACTIVITY" > /> > > <seinfo value="demo" /> > > <!-- </package> --> > > </signer> > > The package issue should be fixed by the update. But > you have to > rebuild setool and mac_permissions.xml, e.g. > make clean-mac_permissions.xml clean-setool > make > > > > -- > This message was distributed to subscribers of the > seandroid-list mailing list. > If you no longer wish to subscribe, send mail to [email protected] > with > the words "unsubscribe seandroid-list" without quotes as the > message. > -- This message was distributed to subscribers of the seandroid-list mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe seandroid-list" without quotes as the message.
