Commit f760a9d0 authored by topjohnwu's avatar topjohnwu

Add rules to allow chcon to rootfs

parent be1dcb72
...@@ -332,6 +332,9 @@ void phh_rules(policydb_t *policydb) { ...@@ -332,6 +332,9 @@ void phh_rules(policydb_t *policydb) {
add_type("su_device", "mlstrustedobject", policy); add_type("su_device", "mlstrustedobject", policy);
add_type("su_daemon", "mlstrustedsubject", policy); add_type("su_daemon", "mlstrustedsubject", policy);
add_type("su", "mlstrustedsubject", policy); add_type("su", "mlstrustedsubject", policy);
// Allow chcon to rootfs
allow("rootfs", "labeledfs", "filesystem", "associate");
} }
// Minimal to run Magisk script before live patching // Minimal to run Magisk script before live patching
...@@ -424,6 +427,4 @@ void magisk_rules(policydb_t *policydb) { ...@@ -424,6 +427,4 @@ void magisk_rules(policydb_t *policydb) {
allow("init", "su", "fd", "use"); allow("init", "su", "fd", "use");
allow("init", "kernel", "security", "read_policy"); allow("init", "kernel", "security", "read_policy");
allow("init", "kernel", "security", "load_policy"); allow("init", "kernel", "security", "load_policy");
} }
\ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment