Kernel: Enable processes with corresponding UIDs to utilise netlink, and optimise netlink functionality

2025-11-05 15:41:14 +08:00
parent 088ce97697
commit 247f7d4aee
3 changed files with 152 additions and 43 deletions
--- a/kernel/selinux/rules.c
+++ b/kernel/selinux/rules.c
@@ -127,6 +127,8 @@ void apply_kernelsu_rules()
    ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "getpgid");
    ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "sigkill");

+    ksu_allow(db, "shell", "shell", "netlink_connector_socket", ALL);
+
    // https://android-review.googlesource.com/c/platform/system/logging/+/3725346
    ksu_dontaudit(db, "untrusted_app", KERNEL_SU_DOMAIN, "dir", "getattr");