Add SELinux rules for libTEESimulator.so loading (#104)

Allow `keystore` to access the `file` class for `adb_data_file` and `shell_data_file` contexts.

The target contexts correspond to the following locations:
- `adb_data_file`: The library path `/data/adb/modules/tricky_store/libTEESimulator.so`, used for FD transfer.
- `shell_data_file`: The fallback mechanism for loading the library by staging it in `/data/local/tmp`.

Note: The rule for the `dir` class (directory search) has been removed because the supporting audit logs were lost. The remaining file access logs were observed on a MEIZU 21 Note.

This commit is contained in:

JingMatrix

2026-01-29 15:15:56 +01:00

committed by

GitHub

parent b5251c0418

commit 10d673b606

1 changed files with 1 additions and 1 deletions

module/sepolicy.rule

+1 -1

View File

@@ -1,2 +1,2 @@
 allow keystore shell_data_file dir *
 allow keystore {adb_data_file shell_data_file} file *
 allow crash_dump keystore process *