MarcoBuster/Magisk
1
1
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add pre-init rules

Browse Source
This commit is contained in:
topjohnwu 2017-11-04 04:04:00 +08:00
parent 3c6a170138
commit 9e96824161
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
rules.c
View File

@ -163,6 +163,14 @@ void sepol_min_rules() {
sepol_attradd("su", "mlstrustedsubject");
sepol_attradd("su_device", "mlstrustedobject");
// Let pre-init do stuffs
sepol_allow("kernel", "kernel", "security", "load_policy");
sepol_allow("kernel", "device", "dir", "write");
sepol_allow("kernel", "device", "dir", "add_name");
sepol_allow("kernel", "device", "file", "create");
sepol_allow("kernel", "device", "file", "open");
sepol_allow("kernel", "device", "file", "read");
// Let init run stuffs in su context
sepol_allow("kernel", "su", "fd", "use");
sepol_allow("init", "su", "process", ALL);