• topjohnwu's avatar
    Introduce /data mirror · 8032bd0b
    topjohnwu authored
    Since we switched to imageless Magisk, module files are directly
    stored in /data. However, /data is mounted with nosuid, which also
    prevents SELinux typetransition to work (auto transition from one
    domain to another when executing files with specific context).
    This could cause serious issues when we are replacing system critical
    components (e.g. app_process for Xposed), because most of them
    are daemons that run in special process domains.
    
    This commit introduced /data mirror. Using similar mirroring technique
    we used for system and vendor, we mount another mirror that mounts
    /data without nosuid flag. All module files are then mounted from this
    mirror mountpoint instead of directly from /data.
    
    Close #1080
    8032bd0b
selinux.cpp 4.19 KB