Enforce stricter selinux rules

canyie · Feb 5, 2024 · a23eb6f · a23eb6f
1 parent 7ba6eeb
commit a23eb6f
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 5 deletions.
diff --git a/template/post-fs-data.sh b/template/post-fs-data.sh
@@ -4,6 +4,4 @@ MODDIR=${0%/*}
 
 [ -f "${MODDIR}/sepolicy.rule" ] && exit 0
 
-magiskpolicy --live "allow system_server system_server process { execmem }" \
-    "allow system_server apk_data_file file *" \
-    "allow system_server app_data_file file *"
+magiskpolicy --live "allow system_server system_server process { execmem }"
diff --git a/template/sepolicy.rule b/template/sepolicy.rule
@@ -1,3 +1 @@
 allow system_server system_server process { execmem }
-allow system_server apk_data_file file *
-allow system_server app_data_file file *