TheArchive/Magisk
1
0
Fork 0
mirror of https://github.com/topjohnwu/Magisk.git synced 2024-12-22 16:07:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix wrong sepolicy rule

Browse Source
This commit is contained in:
LoveSy 2024-07-06 22:39:31 +08:00 committed by John Wu
parent b11b81122a
commit 69181a6b72
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
native/src/sepolicy/rules.rs
View File

@ -52,7 +52,8 @@ impl SepolicyMagisk for sepolicy {
set_log_level_state(LogLevel::Warn, false); set_log_level_state(LogLevel::Warn, false);
rules! { rules! {
use self; use self;
allow(all, ["kernel"], ["security"], ["load_policy"]); // Prevent anything to change sepolicy except ourselves
deny(all, ["kernel"], ["security"], ["load_policy"]);
type_(proc, ["domain"]); type_(proc, ["domain"]);
typeattribute([proc], ["mlstrustedsubject", "netdomain", "appdomain"]); typeattribute([proc], ["mlstrustedsubject", "netdomain", "appdomain"]);
type_(file, ["file_type"]); type_(file, ["file_type"]);