TheArchive/Magisk
1
0
Fork 0
mirror of https://github.com/topjohnwu/Magisk.git synced 2025-08-21 17:10:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add Android O rules

Browse Source
This commit is contained in:
topjohnwu
2017-04-16 04:11:02 +08:00
parent a65c7ee2fc
commit 5c662f1230
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
rules.c
View File

@@ -73,6 +73,7 @@ void allowSuClient(char *target) {
sepol_allow(target, "su_device", "dir", "read"); sepol_allow(target, "su_device", "dir", "read");
sepol_allow(target, "su_device", "sock_file", "read"); sepol_allow(target, "su_device", "sock_file", "read");
sepol_allow(target, "su_device", "sock_file", "write"); sepol_allow(target, "su_device", "sock_file", "write");
sepol_allow(target, "devpts", "chr_file", "ioctl");
sepol_allow("su", target, "fd", "use"); sepol_allow("su", target, "fd", "use");
sepol_allow("su", target, "fifo_file", ALL); sepol_allow("su", target, "fifo_file", ALL);
} }
@@ -85,6 +86,7 @@ void suRights() {
sepol_allow("servicemanager", "su", "process", "getattr"); sepol_allow("servicemanager", "su", "process", "getattr");
sepol_allow("servicemanager", "su", "binder", "transfer"); sepol_allow("servicemanager", "su", "binder", "transfer");
sepol_allow("system_server", "su", "binder", "call"); sepol_allow("system_server", "su", "binder", "call");
sepol_allow("system_server", "su", "fd", "use");
sepol_allow("su", "servicemanager", "dir", "search"); sepol_allow("su", "servicemanager", "dir", "search");
sepol_allow("su", "servicemanager", "dir", "read"); sepol_allow("su", "servicemanager", "dir", "read");
@@ -229,6 +231,8 @@ void sepol_med_rules() {
allowSuClient("priv_app"); allowSuClient("priv_app");
if (sepol_exists("ssd_tool")) if (sepol_exists("ssd_tool"))
allowSuClient("ssd_tool"); allowSuClient("ssd_tool");
if (sepol_exists("untrusted_app_25"))
allowSuClient("untrusted_app_25");
suRights(); suRights();
otherToSU(); otherToSU();