diff --git a/module/src/sepolicy.rule b/module/src/sepolicy.rule index ca2a9474..859f87f9 100644 --- a/module/src/sepolicy.rule +++ b/module/src/sepolicy.rule @@ -1,19 +1,15 @@ -type magisk_file file_type -typeattribute magisk_file mlstrustedobject -allow zygote magisk_file sock_file {read write} +type zygisk_file file_type +typeattribute zygisk_file mlstrustedobject +allow zygote zygisk_file sock_file {read write} allow zygote magisk lnk_file read allow zygote unlabeled file {read open} allow zygote zygote capability sys_chroot allow zygote su dir search -allow zygote su lnk_file read -allow zygote su file read +allow zygote su {lnk_file file} read allow zygote adb_data_file dir search allow zygote zygote process execmem allow system_server system_server process execmem allow zygote tmpfs file * allow zygote appdomain_tmpfs file * - -allow zygote mnt_vendor_file dir search -allow zygote fs_type filesystem unmount \ No newline at end of file diff --git a/zygiskd/src/utils.c b/zygiskd/src/utils.c index 89515087..381b61b9 100644 --- a/zygiskd/src/utils.c +++ b/zygiskd/src/utils.c @@ -191,7 +191,7 @@ int unix_listener_from_path(char *restrict path) { return -1; } - if (chcon(path, "u:object_r:magisk_file:s0") == -1) { + if (chcon(path, "u:object_r:zygisk_file:s0") == -1) { LOGE("chcon: %s\n", strerror(errno)); return -1;