android/SukiSU-Ultra
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

kernel: reset avc cache for sepolicy

Browse Source 
Co-authored-by: sekaiacg <sekaiacg@gmail.com>
This commit is contained in:
weishu
2023-02-12 13:09:00 +07:00
parent 388d2b0b59
commit f6967d2cfb
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
kernel/selinux/rules.c
View File

@@ -166,6 +166,16 @@ static int get_object(char *buf, char __user *user_object, size_t buf_sz,
return 0; return 0;
} }
// reset avc cache table, otherwise the new rules will not take effect if already denied
static void reset_avc_cache() {
#if LINUX_VERSION_CODE < KERNEL_VERSION(4, 17, 0)
avc_ss_reset(0);
#else
struct selinux_avc *avc = selinux_state.avc;
avc_ss_reset(avc, 0);
#endif
}
int handle_sepolicy(unsigned long arg3, void __user *arg4) int handle_sepolicy(unsigned long arg3, void __user *arg4)
{ {
if (!arg4) { if (!arg4) {
@@ -440,5 +450,9 @@ int handle_sepolicy(unsigned long arg3, void __user *arg4)
exit: exit:
rcu_read_unlock(); rcu_read_unlock();
// only allow and xallow needs to reset avc cache, but we cannot do that because
// we are in atomic context. so we just reset it every time.
reset_avc_cache();
return ret; return ret;
} }