andreacavalli/Magisk
1
0
Fork 0
forked from MarcoBuster/Magisk
Code Issues Pull Requests Projects Releases Wiki Activity

Add rules for magiskinit daemon

Browse Source
This commit is contained in:
topjohnwu 2017-11-27 18:32:44 +08:00
parent e5b6121d17
commit 8ee9984e4e
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
rules.c
View File

@ -163,11 +163,12 @@ void sepol_min_rules() {
sepol_attradd("su", "mlstrustedsubject"); sepol_attradd("su", "mlstrustedsubject");
sepol_attradd("su_device", "mlstrustedobject"); sepol_attradd("su_device", "mlstrustedobject");
// Let pre-init do stuffs // Let magiskinit daemon monitor and transit to su
sepol_allow("kernel", "kernel", "security", "load_policy");
sepol_allow("kernel", "kernel", "capability", "dac_override");
sepol_allow("kernel", "device", "dir", ALL); sepol_allow("kernel", "device", "dir", ALL);
sepol_allow("kernel", "device", "file", ALL); sepol_allow("kernel", "device", "file", ALL);
sepol_allow("kernel", "su", "unix_stream_socket", "connectto");
sepol_allow("kernel", "kernel", "process", "setcurrent");
sepol_allow("kernel", "su", "process", "dyntransition");
// Let init run stuffs in su context // Let init run stuffs in su context
sepol_allow("kernel", "su", "fd", "use"); sepol_allow("kernel", "su", "fd", "use");