kernel: allow kernel to mount loop devices. close #514

2023-06-26 19:29:29 +08:00
parent b644c124e3
commit 980f1d09bc
1 changed files with 4 additions and 0 deletions
--- a/kernel/selinux/rules.c
+++ b/kernel/selinux/rules.c
@@ -114,6 +114,10 @@ void apply_kernelsu_rules()
 	ksu_allow(db, "hwservicemanager", KERNEL_SU_DOMAIN, "process",
 		  "getattr");

+	// For mounting loop devices, mirrors, tmpfs
+	ksu_allow(db, "kernel", ALL, "file", "read");
+	ksu_allow(db, "kernel", ALL, "file", "write");
+
 	// Allow all binder transactions
 	ksu_allow(db, ALL, KERNEL_SU_DOMAIN, "binder", ALL);