From 9a14931175dfabe4008679343b358cc16c02cbd4 Mon Sep 17 00:00:00 2001 From: topjohnwu Date: Wed, 1 Feb 2017 06:00:55 +0800 Subject: [PATCH] Update rules --- rules.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/rules.c b/rules.c index b22246114..6de8b2c52 100644 --- a/rules.c +++ b/rules.c @@ -265,6 +265,9 @@ void su_rules() { enforce("su_device"); enforce("su_daemon"); + // Patch su to everything + allow("su", ALL, ALL, ALL); + // Autotransition su's socket to su_device add_transition("su_daemon", "device", "su_device", "file"); add_transition("su_daemon", "device", "su_device", "dir");