Allow kernel to relabel

This commit is contained in:
LoveSy 2024-12-15 20:41:50 +08:00 committed by John Wu
parent aae5b466fb
commit a6c2ba7c1e

View File

@ -111,6 +111,8 @@ impl SepolicyMagisk for sepolicy {
// For relabelling files // For relabelling files
allow(["rootfs"], ["labeledfs", "tmpfs"], ["filesystem"], ["associate"]); allow(["rootfs"], ["labeledfs", "tmpfs"], ["filesystem"], ["associate"]);
allow([file], ["pipefs", "devpts"], ["filesystem"], ["associate"]); allow([file], ["pipefs", "devpts"], ["filesystem"], ["associate"]);
allow(["kernel"], all, ["file"], ["relabelto"]);
allow(["kernel"], ["tmpfs"], ["file"], ["relabelfrom"]);
// Let init transit to SEPOL_PROC_DOMAIN // Let init transit to SEPOL_PROC_DOMAIN
allow(["kernel"], ["kernel"], ["process"], ["setcurrent"]); allow(["kernel"], ["kernel"], ["process"], ["setcurrent"]);