Android 4.4.4 Release 2.0.1
DO NOT MERGE: Fix a bug in the userspace AVC that broke per-domain permissive mode.
Failure to copy the entire av_decision structure, including the
flags field, would prevent preservation of the SELINUX_AVD_FLAGS_PERMISSIVE
flag and thus cause per-domain permissive to not be honored for userspace
permission checks.
Also ensure that we clear the entire structure.
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
(cherry picked from commit 0dbac4eafd82ba0d9d9fa4ecf9bfdd34b6db2b52)
Bug: 13450413
Change-Id: I36c7445dc385e647e4f0f4a2dee04723d1b7c9bc
1 file changed