7 Commits

Author	SHA1	Message	Date
topjohnwu	ae0dcabf43	Fix typo in sepolicy.cpp	2020-06-03 03:11:10 -07:00
topjohnwu	c071ac8973	Remove unused code	2020-05-29 10:41:52 -07:00
topjohnwu	4499cebcd9	Support new sepolicy rules ... Support declare new type with attribute and declare new attributes	2020-05-25 02:09:43 -07:00
topjohnwu	cd6eca1dc2	Optimize match-all-type rules ... For match-all-type rules (e.g. "allow magisk * * *" used in Magisk), we used to iterate and apply rules on all existing types. However, this is actually unnecessary as all selinux types should have at least 1 attributes assigned to it (process types "domain", file context types "file_type" etc.). This means in order to create rules that applies to all types, we actually only need to create rules for all attributes. This optimization SIGNIFICANTLY reduces the patched sepolicy that is loaded into the kernel when running Magisk. For example on Pixel 4 XL running Android R DP4, the sepolicy sizes are patched (before) : 3455948 patched (after) : 843176 stock : 630229 The active sepolicy size actually impacts the performance of every single operation in the operating system, because the larger the policies gets, the longer it takes for the kernel to lookup and match rules.	2020-05-24 05:41:19 -07:00
topjohnwu	951273f8ef	Cleanup some implementations	2020-05-24 04:16:40 -07:00
topjohnwu	0efa73d96c	Update selinux libs	2020-05-23 05:02:26 -07:00
topjohnwu	f392ade78d	Rewrite sepolicy.c in C++	2020-05-23 00:18:25 -07:00