From 10d673b606a7ec1cf93fee48c2f299e4c5cbcd3f Mon Sep 17 00:00:00 2001 From: JingMatrix Date: Thu, 29 Jan 2026 15:15:56 +0100 Subject: [PATCH] Add SELinux rules for libTEESimulator.so loading (#104) Allow `keystore` to access the `file` class for `adb_data_file` and `shell_data_file` contexts. The target contexts correspond to the following locations: - `adb_data_file`: The library path `/data/adb/modules/tricky_store/libTEESimulator.so`, used for FD transfer. - `shell_data_file`: The fallback mechanism for loading the library by staging it in `/data/local/tmp`. Note: The rule for the `dir` class (directory search) has been removed because the supporting audit logs were lost. The remaining file access logs were observed on a MEIZU 21 Note. --- module/sepolicy.rule | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/module/sepolicy.rule b/module/sepolicy.rule index 40e2d5b..21b522a 100644 --- a/module/sepolicy.rule +++ b/module/sepolicy.rule @@ -1,2 +1,2 @@ -allow keystore shell_data_file dir * +allow keystore {adb_data_file shell_data_file} file * allow crash_dump keystore process *