MarcoBuster/Magisk
1
1
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add xperm rules for Android O

Browse Source
This commit is contained in:
topjohnwu 2017-04-20 04:28:56 +08:00
parent 670397a73e
commit 45cff2b51b
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
rules.c
View File

@ -1,4 +1,5 @@
#include "magiskpolicy.h"
#include "sepolicy.h"
void samsung() {
sepol_deny("init", "kernel", "security", "load_policy");
@ -73,7 +74,7 @@ void allowSuClient(char *target) {
sepol_allow(target, "su_device", "dir", "read");
sepol_allow(target, "su_device", "sock_file", "read");
sepol_allow(target, "su_device", "sock_file", "write");
sepol_allow(target, "devpts", "chr_file", ALL);
sepol_allow(target, "devpts", "chr_file", "ioctl");
sepol_allow("su", target, "fd", "use");
sepol_allow("su", target, "fifo_file", ALL);
}
@ -220,6 +221,9 @@ void sepol_min_rules() {
// Xposed
sepol_allow("untrusted_app", "untrusted_app", "capability", "setgid");
sepol_allow("system_server", "dex2oat_exec", "file", ALL);
// xperms
sepol_allowxperm("domain", "devpts", "chr_file", "0x5400-0x54FF");
}
void sepol_med_rules() {