android/SukiSU-Ultra
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

kernel: don't apply rules for permissive/disabled selinux

Browse Source
This commit is contained in:
weishu
2022-12-23 08:59:57 +07:00
parent fa59434753
commit 87d1158313
2 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
kernel/selinux/rules.c
View File

@@ -1,4 +1,5 @@
#include "sepolicy.h" #include "sepolicy.h"
#include "selinux.h"
#define KERNEL_SU_DOMAIN "su" #define KERNEL_SU_DOMAIN "su"
#define ALL NULL #define ALL NULL
@@ -8,6 +9,11 @@ void apply_kernelsu_rules() {
struct selinux_policy *policy; struct selinux_policy *policy;
struct policydb *db; struct policydb *db;
if (!getenforce()) {
pr_info("SELinux permissive or disabled, don't apply rules.")
return;
}
rcu_read_lock(); rcu_read_lock();
policy = rcu_dereference(selinux_state.policy); policy = rcu_dereference(selinux_state.policy);
db = &policy->policydb; db = &policy->policydb;

6
kernel/selinux/selinux.c
View File

@@ -71,6 +71,12 @@ void setenforce(bool enforce) {
} }
bool getenforce() { bool getenforce() {
#ifdef CONFIG_SECURITY_SELINUX_DISABLE
if (selinux_state.disabled) {
return false;
}
#endif
#ifdef CONFIG_SECURITY_SELINUX_DEVELOP #ifdef CONFIG_SECURITY_SELINUX_DEVELOP
return selinux_state.enforcing; return selinux_state.enforcing;
#else #else