blob: 2a0d85cf28858c2e5e62e4ed1d5fa7dbb6aaddcc [file] [log] [blame]
# Copyright 2018 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
restore_fs_contexts() {
local board_root="$1"
local rootfs="$2"
local stateful="$3"
# Restore the extended attributes of necessary files.
local selinux_config="${board_root}/etc/selinux/config"
if [[ ! -e "${selinux_config}" ]]; then
info "Restoring SELinux file context."
local selinux_type="$(source "${selinux_config}" && echo "${SELINUXTYPE}")"
local file_contexts="${board_root}/etc/selinux/${selinux_type}/contexts/files/file_contexts"
# If the selinux_config file exists, file_contexts must also.
if [[ ! -e "${file_contexts}" ]]; then
local err_msg="The SELinux config file exists at ${selinux_config}, "
err_msg+="but an SELinux context file not found at ${file_contexts}."
die_notrace "${err_msg}"
# Umount var so setfiles can write xattr for real var under rootfs instead
# of skipping it.
sudo umount "${rootfs}/var"
sudo /sbin/setfiles -m -r "${rootfs}" "${file_contexts}" "${rootfs}"
sudo mount --bind "${stateful}/var_overlay" "${rootfs}/var"