From 67103148320dbdf435fbba889eb2ccc1eb1383ca Mon Sep 17 00:00:00 2001 From: topjohnwu Date: Tue, 11 Sep 2018 11:04:46 -0400 Subject: [PATCH] Allow all context to SIGCLD magisk Fix #596 --- native/jni/magiskpolicy/rules.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/native/jni/magiskpolicy/rules.c b/native/jni/magiskpolicy/rules.c index dbdcbec49..959c43c49 100644 --- a/native/jni/magiskpolicy/rules.c +++ b/native/jni/magiskpolicy/rules.c @@ -8,7 +8,6 @@ void allowSuClient(char *target) { sepol_allow(target, SEPOL_PROC_DOMAIN, "unix_stream_socket", "getopt"); sepol_allow(SEPOL_PROC_DOMAIN, target, "fd", "use"); sepol_allow(SEPOL_PROC_DOMAIN, target, "fifo_file", ALL); - sepol_allow(target, SEPOL_PROC_DOMAIN, "process", "sigchld"); // Allow access to magisk files sepol_allow(target, SEPOL_FILE_DOMAIN, "sock_file", "read"); @@ -50,6 +49,8 @@ void otherToSU() { sepol_allow(SEPOL_PROC_DOMAIN, "system_server", "binder", "transfer"); sepol_allow(SEPOL_PROC_DOMAIN, "system_server", "binder", "call"); + sepol_allow(ALL, SEPOL_PROC_DOMAIN, "process", "sigchld"); + // allowLog sepol_allow("logd", SEPOL_PROC_DOMAIN, "dir", "search"); sepol_allow("logd", SEPOL_PROC_DOMAIN, "file", "read");