jzy/TEESimulator-RS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(spoof): allow UDP egress for DNS resolution

Browse Source 
HttpsURLConnection resolves bulletin.source via getaddrinfo, which
uses UDP/53 first. Without UDP socket rules the resolver fails
before TCP even attempts, killing BulletinPoller silently on
enforcing SELinux kernels. Mirror the existing TCP rules onto UDP
for ksu and magisk.
This commit is contained in:
Enginex0
2026-05-19 05:03:12 +01:00
parent 8cb8616068
commit a79d7e3637
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
module/sepolicy.rule
+7
View File
@@ -7,3 +7,10 @@ allow ksu port:tcp_socket name_connect
allow magisk self:tcp_socket { create connect read write getopt setopt } allow magisk self:tcp_socket { create connect read write getopt setopt }
allow magisk node:tcp_socket node_bind allow magisk node:tcp_socket node_bind
allow magisk port:tcp_socket name_connect allow magisk port:tcp_socket name_connect
allow ksu self:udp_socket { create connect read write getopt setopt }
allow ksu node:udp_socket node_bind
allow ksu port:udp_socket name_connect
allow magisk self:udp_socket { create connect read write getopt setopt }
allow magisk node:udp_socket node_bind
allow magisk port:udp_socket name_connect