br0kenpixel/ReZygisk
1
0
Fork 0
mirror of https://github.com/PerformanC/ReZygisk.git synced 2025-09-06 06:37:01 +00:00
Code Issues Packages Projects Releases 1 Wiki Activity

fix: permission loophole

Browse Source 
This commit tights the permissions for `tmpfs`, removing the permission loophole.

Signed-off-by: Pedro.js <pedroolimpioguerra@gmail.com>
This commit is contained in:
Pedro.js
2024-08-05 12:40:50 -03:00
committed by GitHub
parent fedf7f1c40
commit 88f1b7fdb9
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
module/src/sepolicy.rule
View File

@@ -1,9 +1,9 @@
allow * tmpfs * * allow zygote tmpfs file *
allow zygote appdomain_tmpfs dir *
allow zygote appdomain_tmpfs file * allow zygote appdomain_tmpfs file *
type magisk_file file_type type magisk_file file_type
typeattribute magisk_file mlstrustedobject typeattribute magisk_file mlstrustedobject
allow * magisk_file file * allow * magisk_file file *
allow * magisk_file dir * allow * magisk_file dir *
allow * magisk_file fifo_file * allow * magisk_file fifo_file *
@@ -12,9 +12,10 @@ allow * magisk_file lnk_file *
allow * magisk_file sock_file * allow * magisk_file sock_file *
allow system_server system_server process execmem allow system_server system_server process execmem
allow zygote zygote process execmem
allow zygote adb_data_file dir search allow zygote adb_data_file dir search
allow zygote mnt_vendor_file dir search allow zygote mnt_vendor_file dir search
allow zygote system_file dir mounton allow zygote system_file dir mounton
allow zygote labeledfs filesystem mount allow zygote labeledfs filesystem mount
allow zygote fs_type filesystem unmount allow zygote fs_type filesystem unmount
allow zygote zygote process execmem