Magisk/native/jni
osm0sis cba0d04000 magiskpolicy: rules: standardize update_engine sepolicy when rooted
The state of ROM A/B OTA addon.d-v2 support is an inconsistent mess currently:
- LineageOS builds userdebug with permissive update_engine domain, OmniROM builds userdebug with a more restricted update_engine domain, and CarbonROM builds user with a hybrid closer to Omni's
- addon.d-v2 scripts cannot function to the full extent they should when there is a more restricted update_engine domain sepolicy in place, which is likely why Lineage made update_engine completely permissive

Evidence for the above:
- many addon.d-v2 scripts only work (or fully work) on Lineage, see below
- Magisk's addon.d-v2 script would work on Lineage without issue, but would work on Carbon and Omni only if further allow rules were added for basic things like "file read" and "dir search" suggesting these ROMs' addon.d-v2 is severely limited
- Omni includes a /system/addon.d/69-gapps.sh script with the ROM itself (despite shipping without GApps), and with Magisk's more permissive sepolicy and no GApps installed it will remove important ROM files during OTA, resulting in a bootloop; the issue with shipping this script was therefore masked by Omni's overly restrictive update_engine sepolicy not allowing the script to function as intended

The solution:
- guarantee a consistent addon.d-v2 experience for users across ROMs when rooted with Magisk by making update_engine permissive as Lineage has
- hopefully ROMs can work together to come up with something standard for unrooted addon.d-v2 function
2019-09-23 07:55:25 -04:00
..
core Create product mirror if /system/product exist 2019-09-23 06:52:24 -04:00
external Update busybox 2019-09-11 23:06:49 -04:00
include Allow ADB shell to remove modules and reboot 2019-09-13 03:14:21 -04:00
init Support patching fstab in ramdisk for A-only 2SI 2019-09-22 05:30:04 -04:00
magiskboot Update vars for 2SI 2019-09-22 06:45:23 -04:00
magiskhide Add ':' to allowed characters for magiskhide process name 2019-09-22 16:17:51 -04:00
magiskpolicy magiskpolicy: rules: standardize update_engine sepolicy when rooted 2019-09-23 07:55:25 -04:00
resetprop Minor code changes across all sources 2019-06-30 19:09:31 -07:00
su LD_LIBRARY_PATH patch for apex should not propagate 2019-09-13 15:22:49 -04:00
systemproperties Some code adjustments 2019-02-24 23:09:34 -05:00
utils Hardcode shell uid to 2000 2019-09-13 03:14:58 -04:00
.gitignore Add entrypoint to build test 2019-04-01 02:46:09 -04:00
Android.mk Update to support updated FrankeNDK 2019-07-07 17:38:57 -07:00
Application.mk Update to support updated FrankeNDK 2019-07-07 17:38:57 -07:00