Magisk/native/jni/magiskpolicy
topjohnwu 003e44fb84 Remove requirement to use early-init daemon
We used to construct /sbin tmpfs overlay in early-init stage after
SELinux is properly initialized. However the way it is implemented
(forking daemon from magiskinit with complicated file waiting triggers)
is extremely complicated and error prone.

This commit moves the construction of the sbin overlay to pre-init
stage. The catch is that since SELinux is not present at that point,
proper selabel has to be reconstructed afterwards. Some additional
SEPolicy rules are added to make sure init can access magisk binaries,
and the secontext relabeling task is assigned to the main Magisk daemon.
2019-04-24 00:13:48 -04:00
..
api.cpp Switch from deprecated AUDITDENY to DONTAUDIT 2018-11-29 06:42:04 -05:00
magiskpolicy.cpp Support Android Q new split sepolicy setup 2019-03-15 06:17:37 -04:00
magiskpolicy.h Support Android Q new split sepolicy setup 2019-03-15 06:17:37 -04:00
policydb.cpp Add logging in magiskinit 2019-04-04 00:26:16 -04:00
rules.cpp Remove requirement to use early-init daemon 2019-04-24 00:13:48 -04:00
sepolicy.c Support Android Q new split sepolicy setup 2019-03-15 06:17:37 -04:00
sepolicy.h Use magic macros 2018-12-01 03:53:58 -05:00