I tried to add executables to /sbin (including at run time). However, even after setting allowing any user to read and execute them at the dac level and setting the correct Selinux context. Non su (because even other root programs can’t) programs can’t launch them. I’m getting this kind of line inside logcat:

941   941 E audit   : type=1400 audit(1585595556.371:836): avc:  denied  { execute } for  pid=27741 comm="sh" name="bash" dev="rootfs" ino=7282 scontext=u:r:shell:s0 tcontext=u:object_r:rootfs:s0 tclass=file permissive=0 SEPF_SM-T825_9_0012 audit_filtered

I also tried the toolbox context but it didn’t changed anything.

Since /selinux is still the one from oem how does Magisk works so I can add my own files too?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.