b7ca73f431
Remove an additional unique_ptr indirection
2025-02-05 14:18:16 +08:00
c913f7ec74
Make sepolicy a shared type between rust and cxx
2025-02-04 00:36:11 +08:00
a6c2ba7c1e
Allow kernel to relabel
2024-12-27 12:35:29 -08:00
b6511a510d
Revert "Allow all domains to access tmpfs files"
...
This reverts commit da43ac89a0
2024-12-27 12:35:29 -08:00
da43ac89a0
Allow all domains to access tmpfs files
...
Fix #8457
2024-11-30 23:21:33 -08:00
69181a6b72
Fix wrong sepolicy rule
2024-07-08 12:09:45 -07:00
b11b81122a
Tighten rules for tmpfs file
...
Before magiskd is executed, all files in magisk tmpfs still shares
tmpfs label. This commit tightens the rule to only allow init, zygote
and shell to access magisk tmpfs files. Zygotes rules is needed
because lower Android versions don't have rule for zygote itself
using memfd even memfd is supported in kernel.
2024-07-08 12:06:49 -07:00
08dbf728a4
Allow platform_app to access MagiskSU
2024-03-22 16:53:44 -07:00
4670f762d3
Disable debug only features
2024-03-22 16:53:44 -07:00
865fca71a5
Optimize sepolicy rules
...
Close #7916
Co-authored-by: vvb2060 <vvb2060@gmail.com >
2024-03-21 01:51:35 -07:00
4d2921e742
Rewrite sepolicy statement parsing in Rust
2024-03-20 10:12:23 -07:00
topjohnwu