kernel: Allow system_server to kill su process

2024-02-20 18:16:43 +08:00
parent cbd184421c
commit 01b685ce58
1 changed files with 4 additions and 0 deletions
--- a/kernel/selinux/rules.c
+++ b/kernel/selinux/rules.c
@@ -131,6 +131,10 @@ void apply_kernelsu_rules()
 	ksu_allow(db, "system_server", "untrusted_app_all_devpts", "chr_file",
 		  "write");

+    // Allow system server kill su process
+    ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "getpgid");
+    ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "sigkill");
+
 	rcu_read_unlock();
 }