Add missing SMACK labelling cmd in change_permission.

This does not affect any operation, but need to reset SMACK label
for any mismatch in SMACK label.

Change-Id: I0d6053c341d4070d25b7a0839ef439a4972ed424

diff --git a/config/change_permission b/config/change_permission
index b111fde64db6b7b4ac611008c0ae9e3d73e5c961..c3e3569f6ad455e010e311153952c971456df502 100644 (file)
--- a/config/change_permission
+++ b/config/change_permission
@@ -29,8 +29,14 @@ done
 
 # change permission to /opt/var/lib/misc
 # This is needed to retrieve CAP_DAC_OVERRIDE from mobileap-agent & dnsmasq.
-if [ -e /opt/var/lib/misc ]
+if [ -e "/opt/var/lib/misc" ]
 then
        chown root:system_share /opt/var/lib/misc
        chmod 0775 /opt/var/lib/misc
 fi
+
+# Set SMACK label as "System::Privileged" in /opt/var/security-manager/rules
+if [ -e "/opt/var/security-manager/rules" ]
+then
+       chsmack -r -a "System::Privileged" /opt/var/security-manager/rules
+fi