Allow dex2oat to access files received from sockets (#165)

On some devices `dex2oat` cannot access files (fd) received from sockets due to SELinux restrictions.
Hence, we add a new rule according to the avc logs, which showed that permissions `open` and `getattr` were needed.
This commit is contained in:
JingMatrix 2025-01-22 12:01:55 +01:00 committed by GitHub
parent c9e11c6770
commit 209a5417ec
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 0 deletions

View File

@ -6,6 +6,8 @@ type xposed_file file_type
typeattribute xposed_file mlstrustedobject
allow {dex2oat installd isolated_app shell} xposed_file {file dir} *
allow dex2oat unlabeled file *
type xposed_data file_type
typeattribute xposed_data mlstrustedobject
allow * xposed_data {file dir} *