Update rules

This commit is contained in:
topjohnwu 2017-02-01 06:00:55 +08:00
parent 6900c197cd
commit 9a14931175

View File

@ -265,6 +265,9 @@ void su_rules() {
enforce("su_device"); enforce("su_device");
enforce("su_daemon"); enforce("su_daemon");
// Patch su to everything
allow("su", ALL, ALL, ALL);
// Autotransition su's socket to su_device // Autotransition su's socket to su_device
add_transition("su_daemon", "device", "su_device", "file"); add_transition("su_daemon", "device", "su_device", "file");
add_transition("su_daemon", "device", "su_device", "dir"); add_transition("su_daemon", "device", "su_device", "dir");