WeiguangTWK
/
LSPosed
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Support Magisk 20.2 custom sepolicy.rule 

No need for custom Magisk builds anymore.
This commit is contained in:
m0viefreak 2020-01-04 01:00:46 +01:00 committed by Jim Wu
parent b928885f1f
commit fc18d49418
3 changed files with 13 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@ -29,7 +29,7 @@ and zip binaries can be downloaded from [here](http://gnuwin32.sourceforge.net/p
## Install
1. Install Magisk v19.0+ (for latest EdXposed or Huawei devices, use our custom Magisk: Change Magisk update channel to [this](http://edxp.meowcat.org/repo/version.json)).
1. Install Magisk v19.0+ (for latest EdXposed or Huawei devices, use at least official Magisk v20.2+ or use our custom Magisk: Change Magisk update channel to [this](http://edxp.meowcat.org/repo/version.json)).
2. Install [Riru-Core](https://github.com/RikkaApps/Riru/releases) v19+ from Magisk repo.
3. [Download](#download) and install EdXposed in Magisk Manager or recovery mode.
4. Install [companion application](#companion-applications).

14
edxp-core/template_override/post-fs-data.sh
View File

@ -6,20 +6,6 @@ MODDIR=${0%/*}
# This script will be executed in post-fs-data mode
# More info in the main Magisk thread
# necessary for using mmap in system_server process
#supolicy --live "allow system_server system_server process {execmem}"
# supolicy --live "allow system_server system_server memprotect {mmap_zero}"
# for built-in apps // TODO maybe narrow down the target classes
#supolicy --live "allow coredomain coredomain process {execmem}"
# read configs set in our app
#supolicy --live "allow coredomain app_data_file * *"
#supolicy --live "attradd {system_app platform_app} mlstrustedsubject"
# read module apk file in zygote
#supolicy --live "allow zygote apk_data_file * *"
. ${MODDIR}/util_functions.sh
start_log_catchers

12
edxp-core/template_override/sepolicy.rule Normal file
View File

@ -0,0 +1,12 @@
# necessary for using mmap in system_server process
allow system_server system_server process {execmem}
# for built-in apps // TODO maybe narrow down the target classes
allow coredomain coredomain process {execmem}
# read configs set in our app
allow coredomain app_data_file * *
attradd {system_app platform_app} mlstrustedsubject
# read module apk file in zygote
allow zygote apk_data_file * *