Skip to content

Commit 88f1b7f

Browse files
authored
fix: permission loophole
This commit tights the permissions for `tmpfs`, removing the permission loophole. Signed-off-by: Pedro.js <pedroolimpioguerra@gmail.com>
1 parent fedf7f1 commit 88f1b7f

1 file changed

Lines changed: 4 additions & 3 deletions

File tree

module/src/sepolicy.rule

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
1-
allow * tmpfs * *
2-
allow zygote appdomain_tmpfs dir *
1+
allow zygote tmpfs file *
32
allow zygote appdomain_tmpfs file *
43

54
type magisk_file file_type
65
typeattribute magisk_file mlstrustedobject
6+
77
allow * magisk_file file *
88
allow * magisk_file dir *
99
allow * magisk_file fifo_file *
@@ -12,9 +12,10 @@ allow * magisk_file lnk_file *
1212
allow * magisk_file sock_file *
1313

1414
allow system_server system_server process execmem
15+
allow zygote zygote process execmem
16+
1517
allow zygote adb_data_file dir search
1618
allow zygote mnt_vendor_file dir search
1719
allow zygote system_file dir mounton
1820
allow zygote labeledfs filesystem mount
1921
allow zygote fs_type filesystem unmount
20-
allow zygote zygote process execmem

0 commit comments

Comments
 (0)