Allow dex2oat to access files received from sockets (#165)

On some devices `dex2oat` cannot access files (fd) received from sockets due to SELinux restrictions. Hence, we add a new rule according to the avc logs, which showed that permissions `open` and `getattr` were needed.
JingMatrix · Jan 22, 2025 · 209a541 · 209a541
1 parent c9e11c6
commit 209a541
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/magisk-loader/magisk_module/sepolicy.rule b/magisk-loader/magisk_module/sepolicy.rule
@@ -6,6 +6,8 @@ type xposed_file file_type
 typeattribute xposed_file mlstrustedobject
 allow {dex2oat installd isolated_app shell} xposed_file {file dir} *
 
+allow dex2oat unlabeled file *
+
 type xposed_data file_type
 typeattribute xposed_data mlstrustedobject
 allow * xposed_data {file dir} *