This app requires DAC_OVERRIDE, DAC_READ_SEARCH, SYS_PTRACE, SYS_ADMIN
(for /data/local r/w) and SYS_CHROOT, SETGID (to run chroot and run it's
processes)
Devices with NetHunter installed is already considered compromised due
to lack of security features(like SELinux), therefore users are advised
not to store private data
It's not really worth restricting more capabilities of the app.
Adaway only needs the following permissions to work properly:
DAC_OVERRIDE, SYS_PTRACE.
Note: [systemless hosts kernelsu
module](https://github.com/symbuzzer/systemless-hosts-KernelSU-module)
needs to be installed, to add support.
This PR only addresses the minimal permission requirements of Adaway to
let it modify hosts file.
- The use of CAP_SYS_ADMIN can be avoided in Kernel Manager, but cannot
be avoided in Root Explorer because it's needed for mounting RW/RO.
- Capabilities adjustment
- Fix template typo
---------
Signed-off-by: Rem01Gaming <Rem01_Gaming@proton.me>
cachiusa