• topjohnwu's avatar
    Add hijack sepolicy support for rootfs devices · e841aab9
    topjohnwu authored
    On older Android versions, pre-mounting selinuxfs will lead to errors,
    so we have to use a different method to block init's control flow.
    Since all devices that falls in this catagory must both:
    
    1. Be Android 8.0 - 9.0
    2. Have early mount fstab in its device tree
    
    We can actually use the same FIFO trick, but this time not on selinuxfs,
    but on the read-only device tree nodes in sysfs or procfs. By mocking
    the fstab/compatible node in the device tree, we can block init when
    it attempts to do early mount; at that point, we can then mock selinuxfs
    as we normally would, successfully hijack and inject patched sepolicy.
    e841aab9
Name
Last commit
Last update
..
core Loading commit data...
external Loading commit data...
include Loading commit data...
init Loading commit data...
magiskboot Loading commit data...
magiskpolicy Loading commit data...
resetprop Loading commit data...
su Loading commit data...
utils Loading commit data...
zygisk Loading commit data...
.gitignore Loading commit data...
Android.mk Loading commit data...
Application.mk Loading commit data...
lto_fix.lds Loading commit data...