Enginex0
a79d7e3637
HttpsURLConnection resolves bulletin.source via getaddrinfo, which uses UDP/53 first. Without UDP socket rules the resolver fails before TCP even attempts, killing BulletinPoller silently on enforcing SELinux kernels. Mirror the existing TCP rules onto UDP for ksu and magisk.
17 lines
690 B
Plaintext
17 lines
690 B
Plaintext
allow keystore {adb_data_file shell_data_file} file *
|
|
allow crash_dump keystore process *
|
|
|
|
allow ksu self:tcp_socket { create connect read write getopt setopt }
|
|
allow ksu node:tcp_socket node_bind
|
|
allow ksu port:tcp_socket name_connect
|
|
allow magisk self:tcp_socket { create connect read write getopt setopt }
|
|
allow magisk node:tcp_socket node_bind
|
|
allow magisk port:tcp_socket name_connect
|
|
|
|
allow ksu self:udp_socket { create connect read write getopt setopt }
|
|
allow ksu node:udp_socket node_bind
|
|
allow ksu port:udp_socket name_connect
|
|
allow magisk self:udp_socket { create connect read write getopt setopt }
|
|
allow magisk node:udp_socket node_bind
|
|
allow magisk port:udp_socket name_connect
|