rockchip: quiet module_request personality-8
authorHuang, Tao <huangtao@rock-chips.com>
Tue, 27 Oct 2015 11:25:27 +0000 (19:25 +0800)
committerHuang, Tao <huangtao@rock-chips.com>
Tue, 27 Oct 2015 11:30:46 +0000 (19:30 +0800)
commit24220c2bb4c935d2a9e7f62ad2d23a4614deeb97
tree28ac03df15dd18be09bfdc9bc074cdd39035dcbe
parent8312c2733ca2b9e1added218ae6f883ee3500963
rockchip: quiet module_request personality-8

In Android-M, below change in bionic was introduced
https://android-review.googlesource.com/122131

Which caused lot of SELinux denials to be logged regarding
module_request (similar to below one) for 32bit systems,
There is quite a lot of module_request denials when any 32bit
executable is executed.

type=1400 audit(946685139.719:12): avc: denied { module_request }
for pid=1970 comm="tzdatacheck" kmod="personality-8"
scontext=u:r:tzdatacheck:s0 tcontext=u:r:kernel:s0 tclass=system
permissive=1

So we patch the kernel to not attempt module loading for alternate
execution environments.

Change-Id: I7bd2c5fc08fd00fa7ff53d3ced401564b474fad4
Signed-off-by: Huang, Tao <huangtao@rock-chips.com>
kernel/exec_domain.c