{"push_id":622048957,"size":1,"distinct_size":1,"ref":"refs/heads/lollipop-5.1.0","head":"132cb8245fb43f425c5258728f13f3ee3a015fef","before":"d99fb6447e1fcc292072dd84ac6578745f27b0cd","commits":[{"sha":"132cb8245fb43f425c5258728f13f3ee3a015fef","author":{"email":"e7ef2d30577bd192d036a7f424ec6dd692d415f2@google.com","name":"Nick Kralevich"},"message":"restore shared_relro functionality\n\nCommit 92dfa31f7800ff9184e8525dfd471211c90b9d31 added \"seinfo=platform\"\nto all fixed UID domains. However, that caused problems for shared_relro.\nshared_relro runs like an isolated app, and doesn't have an seinfo field\nassociated with it.\n\nThis causes a crash when system_server attempts to start shared_relro.\n\n  W art     : PreZygoteFork called when we already have a zygote space.\n  E SELinux : seapp_context_lookup:  No match for app with uid 1037, seinfo (null), name WebViewLoader-armeabi-v7a\n  E SELinux : selinux_android_setcontext:  Error setting context for app with uid 1037, seinfo (null): Success\n  E Zygote  : selinux_android_setcontext(1037, 0, \"(null)\", \"WebViewLoader-armeabi-v7a\") failed\n  F art     : art/runtime/jni_internal.cc:508] JNI FatalError called: RuntimeAbort\n  I ActivityManager: Start proc WebViewLoader-armeabi-v7a [android.webkit.WebViewFactory$RelroFileCreator] for : pid=2717 uid=1037 gids={} abi=armeabi-v7a\n  W libbacktrace: virtual bool BacktraceThread::Unwind(size_t, ucontext_t*): tgkill 1176 failed: No such process\n  W libbacktrace: virtual bool BacktraceThread::Unwind(size_t, ucontext_t*): tgkill 1176 failed: No such process\n  F art     : art/runtime/runtime.cc:331] Runtime aborting...\n  F art     : art/runtime/runtime.cc:331] Aborting thread:\n  F art     : art/runtime/runtime.cc:331] \"main\" prio=5 tid=1 Native\n  F art     : art/runtime/runtime.cc:331]   | group=\"\" sCount=0 dsCount=0 obj=0x7298f000 self=0xb4827800\n  F art     : art/runtime/runtime.cc:331]   | sysTid=1176 nice=0 cgrp=default sched=0/0 handle=0xb6f22d80\n  F art     : art/runtime/runtime.cc:331]   | state=? schedstat=( 0 0 0 ) utm=0 stm=0 core=0 HZ=100\n  F art     : art/runtime/runtime.cc:331]   | stack=0xbe39d000-0xbe39f000 stackSize=8MB\n  F art     : art/runtime/runtime.cc:331]   | held mutexes= \"abort lock\" \"mutator lock\"(shared held)\n  F art     : art/runtime/runtime.cc:331]   kernel: (couldn't read /proc/self/task/1176/stack)\n  F art     : art/runtime/runtime.cc:331]   native: (backtrace::Unwind failed for thread 1176)\n  F art     : art/runtime/runtime.cc:331]   at com.android.internal.os.Zygote.nativeForkAndSpecialize(Native method)\n  F art     : art/runtime/runtime.cc:331]   at com.android.internal.os.Zygote.forkAndSpecialize(Zygote.java:91)\n  F art     : art/runtime/runtime.cc:331]   at com.android.internal.os.ZygoteConnection.runOnce(ZygoteConnection.java:227)\n\nremoving seinfo=platform from shared_relro fixed this bug, but then\nrevealed two new SELinux denials:\n\n  E SELinux : avc:  denied  { find } for service=webviewupdate scontext=u:r:shared_relro:s0 tcontext=u:object_r:system_server_service:s0 tclass=service_manager\n  E SELinux : avc:  denied  { find } for service=activity scontext=u:r:shared_relro:s0 tcontext=u:object_r:system_server_service:s0 tclass=service_manager\n\nAdd the needed SELinux rule.\n\nChange-Id: I4372ccfe2e9f3d982796d2c0dc79259aa8a31810\n\nConflicts:\n\tseapp_contexts","distinct":true,"url":"https://api.github.com/repos/zephiK/android_external_sepolicy/commits/132cb8245fb43f425c5258728f13f3ee3a015fef"}]}