Kernel: Enable processes with corresponding UIDs to utilise netlink, and optimise netlink functionality

2025-11-05 16:02:40 +08:00
parent 766b6d2c76
commit f9f75d73d8
3 changed files with 161 additions and 43 deletions
--- a/kernel/selinux/rules.c
+++ b/kernel/selinux/rules.c
@@ -138,6 +138,10 @@ void apply_kernelsu_rules(void)
    // Allow system server kill su process
    ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "getpgid");
    ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "sigkill");
+    
+#ifdef CONFIG_KSU_MANUAL_SU
+    ksu_allow(db, "shell", "shell", "netlink_connector_socket", ALL);
+#endif

    // https://android-review.googlesource.com/c/platform/system/logging/+/3725346
    ksu_dontaudit(db, "untrusted_app", KERNEL_SU_DOMAIN, "dir", "getattr");