diff options
| author | Qijiang Fan <fqj@chromium.org> | 2019-05-28 13:53:56 +0900 |
|---|---|---|
| committer | chrome-bot <chrome-bot@chromium.org> | 2019-06-06 17:59:23 -0700 |
| commit | 220ce07026ca4c62f2e1bdc2e533fc75e7b1596d (patch) | |
| tree | 6d86344e5e281aec598763e883b6e8105bce5153 | |
| parent | ca8f76c86aeb6bfb915fdd98319857f4406281e5 (diff) | |
| download | vboot-220ce07026ca4c62f2e1bdc2e533fc75e7b1596d.tar.gz | |
set_lsb_release.sh: make sure selinux context for lsb-release file
After every invocation to set_lsb_release.sh, make sure /etc/lsb-release
in $rootfs has the expected SELinux security context stored at
security.selinux extended attribute.
BRANCH=none
BUG=chromium:954670
TEST=set-lsb_release.sh chromium_test_image.bin a b
Change-Id: I541493d8ad3c94b16840337d807629691b1b00bb
Reviewed-on: https://chromium-review.googlesource.com/1630426
Commit-Ready: ChromeOS CL Exonerator Bot <chromiumos-cl-exonerator@appspot.gserviceaccount.com>
Tested-by: Qijiang Fan <fqj@google.com>
Legacy-Commit-Queue: Commit Bot <commit-bot@chromium.org>
Reviewed-by: LaMont Jones <lamontjones@chromium.org>
| -rwxr-xr-x | scripts/image_signing/set_lsb_release.sh | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/scripts/image_signing/set_lsb_release.sh b/scripts/image_signing/set_lsb_release.sh index 1e37624f..4e5ebd93 100755 --- a/scripts/image_signing/set_lsb_release.sh +++ b/scripts/image_signing/set_lsb_release.sh @@ -65,6 +65,9 @@ EOF set_lsb_release_keyval "${rootfs}" "${key}" "${value}" done + # Make sure security.selinux xattr + restore_lsb_selinux "$rootfs/etc/lsb-release" + # Dump the final state. cat "${rootfs}/etc/lsb-release" } |