TheArchive/Magisk
1
0
Fork 0
mirror of https://github.com/topjohnwu/Magisk.git synced 2024-12-24 20:07:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Mount sepolicy.rules for migration

Browse Source
This commit is contained in:
LoveSy 2023-03-12 03:44:59 +08:00 committed by John Wu
parent 84e1bd7bc3
commit 1c2fcd14b5
4 changed files with 21 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
native/src/core/bootstages.cpp
View File

@ -61,17 +61,8 @@ static void mount_mirrors() {
} }
// check and mount sepolicy.rules // check and mount sepolicy.rules
{ if (struct stat st{}; stat((MAGISKTMP + "/" BLOCKDIR "/rules").data(), &st) == 0 && (st.st_mode & S_IFBLK)) {
dev_t rules_dev; dev_t rules_dev = st.st_rdev;
auto rules = MAGISKTMP + "/" BLOCKDIR "/rules";
if (struct stat st{}; stat(rules.data(), &st) == 0 && (st.st_mode & S_IFBLK)) {
rules_dev = st.st_rdev;
} else {
// install from recovery, find now
// this helps Magisk app to copy sepolicy.rules when fixing environment
rules_dev = find_rules_device(self_mount_info);
}
for (const auto &info: self_mount_info) { for (const auto &info: self_mount_info) {
if (info.root == "/" && info.device == rules_dev) { if (info.root == "/" && info.device == rules_dev) {
auto flags = split_ro(info.fs_option, ","); auto flags = split_ro(info.fs_option, ",");
@ -113,7 +104,7 @@ static void mount_mirrors() {
} }
} }
dev_t find_rules_device(const std::vector<mount_info> &infos) { dev_t find_rules_device() {
const int UNKNOWN = 0; const int UNKNOWN = 0;
const int PERSIST = 1; const int PERSIST = 1;
const int METADATA = 2; const int METADATA = 2;
@ -122,8 +113,11 @@ dev_t find_rules_device(const std::vector<mount_info> &infos) {
int matched = UNKNOWN; int matched = UNKNOWN;
dev_t rules_dev = 0; dev_t rules_dev = 0;
bool encrypted = getprop("ro.crypto.state") == "encrypted"; bool encrypted = getprop("ro.crypto.state") == "encrypted";
string custom_rules_dir;
for (const auto &info: infos) { bool mount = getuid() == 0 && getenv("MAGISKTMP");
for (const auto &info: parse_mount_info("self")) {
if (info.target.ends_with(RULESDIR)) if (info.target.ends_with(RULESDIR))
return info.device; return info.device;
if (info.root != "/" || info.source.find("/dm-") != string::npos) if (info.root != "/" || info.source.find("/dm-") != string::npos)
@ -151,9 +145,20 @@ dev_t find_rules_device(const std::vector<mount_info> &infos) {
new_matched = PERSIST; new_matched = PERSIST;
} else continue; } else continue;
if (mount) {
custom_rules_dir = find_rules_dir(info.target.data());
}
rules_dev = info.device; rules_dev = info.device;
matched = new_matched; matched = new_matched;
} }
if (!custom_rules_dir.empty()) {
auto rules_dir = getenv("MAGISKTMP") + "/sepolicy.rules"s;
mkdirs(custom_rules_dir.data(), 0700);
mkdirs(rules_dir.data(), 0700);
xmount(custom_rules_dir.data(), rules_dir.data(), nullptr, MS_BIND, nullptr);
}
return rules_dev; return rules_dev;
} }

2
native/src/core/core.hpp
View File

@ -6,7 +6,7 @@
extern bool RECOVERY_MODE; extern bool RECOVERY_MODE;
extern std::atomic<ino_t> pkg_xml_ino; extern std::atomic<ino_t> pkg_xml_ino;
dev_t find_rules_device(const std::vector<mount_info> &infos); dev_t find_rules_device();
void unlock_blocks(); void unlock_blocks();
void reboot(); void reboot();
void start_log_daemon(); void start_log_daemon();

2
native/src/core/magisk.cpp
View File

@ -135,7 +135,7 @@ int magisk_main(int argc, char *argv[]) {
} else if (argc >= 3 && argv[1] == "--install-module"sv) { } else if (argc >= 3 && argv[1] == "--install-module"sv) {
install_module(argv[2]); install_module(argv[2]);
} else if (argv[1] == "--rules-device"sv) { } else if (argv[1] == "--rules-device"sv) {
auto dev = find_rules_device(parse_mount_info("self")); auto dev = find_rules_device();
if (dev) printf("%u:%u\n", major(dev), minor(dev)); if (dev) printf("%u:%u\n", major(dev), minor(dev));
return dev ? 0 : 1; return dev ? 0 : 1;
} }

1
scripts/boot_patch.sh
View File

@ -77,6 +77,7 @@ fi
export KEEPVERITY export KEEPVERITY
export KEEPFORCEENCRYPT export KEEPFORCEENCRYPT
export PATCHVBMETAFLAG export PATCHVBMETAFLAG
export MAGISKTMP
chmod -R 755 . chmod -R 755 .