Questions tagged [selinux]
The selinux tag has no usage guidance.
58
questions
2
votes
1answer
66 views
SELinux always set to permissive, how to set enforcing permanently?
I flash a custom ROM to my HTC B2UL.
The ROM, by default, has the SELinux policy set to Permissive instead of Enforcing.
I can use adb shell setenforce 1 to make SElinux enforcing. But after reboot, ...
1
vote
1answer
125 views
How to unpack/repack system.img of android ROM?
I have OnePlus 6T device which has A/B partition system and has a ROM of user type i.e [ro.build.type]: [user]. This device is rooted with Magisk. I have a requirement(Want to place customized ...
2
votes
1answer
358 views
How to disable dm-verity on Android with “user” build type ROM?
I have One Plus 6T Android device which has a ROM of build type user. This device is rooted with Magisk and I want to disable dm-verity on this device. I have tried to run adb disable-verity but I got ...
0
votes
0answers
12 views
Can we modify the AOSP system directory neverallows for allowing process on seandroid?
Can we modify the system directory neverallows for allowing rules. Because I'm adding allow rules in the device sepolicy directory,but it gives never allow errors at build time for that I'm adding ...
2
votes
1answer
78 views
How to make SELinux injected rules persistent without unpacking-packing boot.img?
I am working on an application that needs root access and I have a device which is rooted but not with Magisk. This device has only adb shell root available. So, I need an alternative to call the ...
0
votes
1answer
134 views
SELinux temporary set to permissive
I am using a Galaxy s10+, rooted with magisk, no custom ROM, no custom kernel and no custom recovery. The rooting is heavily limited because of the SELinux enforce mode. Actually, no root command in ...
1
vote
1answer
296 views
How to set SELinux enforcing, config file not found?
I have Samsung Galaxy J7 Core (SM-J701F), I'm running Magisk on my device and I ran the SafteyNet test and it failed. While trying to solve this I tried to change selinux state to enforced by editing /...
0
votes
0answers
188 views
How to create Android sepolicy based on the denial “execute_no_trans”?
I am trying to execute my script /vendor/bin/init.inmod.sh using below method:
Script init.inmod.sh:
#!/shebang???
/vendor/bin/test_disp hdcp disable
In vendor specific .rc file:
on ???
start ...
0
votes
1answer
376 views
SELinux Policy from Permissive to Enforcing
Using Nexus 5 with AospExtended ROM (Android 9) 19/04/05
The ROM, by default, has the SELinux policy set to Permissive instead of Enforcing.
Is there any way, perhaps using TWRP Recovery, to change ...
1
vote
1answer
145 views
Adding custom bootup script to Android-x86 Nougat
I've been happy using Android-x86 Nougat on my system. Thanks to everyone who made that work.
I'm now trying to make one small change which is that I want to run a custom init script (a shell script) ...
0
votes
1answer
522 views
Why lsusb gets “permission denied” error in Termux?
When I run this command in Termux the output gets permission denied. I don't have root access, perhaps Android system allows me to get the specific access in root.
1
vote
1answer
364 views
What sepolicy context will allow any other context to access it?
I am on a bootloader locked Sprint Samsung Galaxy S7, eng boot.img flashed to phone with SELinux permissive, which gives root adb shell from where I can change system partitions, debloat, install ...
1
vote
0answers
63 views
Is it possible to see which process is calling the zygote socket?
I want to see a verbose from the zygote socket (located in /dev/socket/zygote ) I know i can list all of the services from adb but I wanna see who is calling zygote to fork an specific process. Do you ...
2
votes
1answer
826 views
What special privileges “/system/xbin/su” does have w.r.t. root access?
This answer says:
Because of the way directory/file permissions are configured on
Android, you need to have the su binary on your /system partition
in order for it to work. Putting elsewhere ...
2
votes
1answer
2k views
How to fix SELinux “avc: denied” errors when launching DNSCrypt as init.d script?
I've installed an unofficial lineage OS 14.1 ROM on my phone and i want to have dnscrypt used on boot by default.
There is what i have done:
Download arm binaries from: https://github.com/jedisct1/...
2
votes
1answer
298 views
Why reading permission to /proc/1/maps is denied and why doesn't the denial appear in logcat?
I'm developing a native app for Android, and I'm occasionally confronted with permission denied which doesn't trigger a log in the logcat logs.
For example, trying to run:
shell@kltevzw:/ $ cat /proc/...
1
vote
0answers
71 views
Create a private folder in Android: set the SELinux attribute of a folder in external storage
There are quite a few apps that require read and write access to the external storage, which gives them access to the whole /sdcard directory. But since that is also the only storage the user ...
0
votes
0answers
850 views
Graphics/vnc/ssh connect failed failed
Installed Kali Linux rolling through deploy on coolpad cool1. Debugging mode on. Rooted. Busbox checked. And terminal also fails to start. More info and config in the screenshots given below
1
vote
0answers
491 views
Write protection of loop device // Read-Only Filesystem
After spending days on that topic I am in need of additional ideas ;)
Facts: MTK6757 / Android 7 / Kernel 4.4.15 / FS EXT4 (No F2FS) / Working Root
I have a fresh and clean 64MB EXT4 .IMG File in /...
0
votes
1answer
570 views
Is 'SELinux enforcing' responsible?
My HTC android mobile is rooted after unlocking the bootloader, but it is with S-ON. When I write some files(I mean copy and paste) inside my '/system' partition for the purpose of applying a 'Mod', ...
1
vote
1answer
4k views
SELinux prevents my init.rc exec command to execute
I've added a exec command at the end of init.rc file.
on property:dev.bootcomplete=1
exec u:r:shell:s0 shell shell -- /system/bin/am start -n com.example.package/com.example.package.MainActivity
...
0
votes
1answer
1k views
Fix SELinux contexts for a SU binary
I am trying to root my android 6.0.1 phone using the following method:
I first booted into a TWRP image using fastboot boot, then using the TWRP terminal I copied the su binary from the SuperSU kit ...
1
vote
1answer
885 views
Checking SELinux permissions in Android?
Is there a tool that will allow me to check what permissions an application has in a file or folder?
0
votes
0answers
614 views
How to edit /sys/ files properly without root?
I have android device with version 5.1.1 . The device is not rooted, but root can be accessed on /system or /data partition files from the custom TWRP recovery using adb.
The device has SELINUX ...
0
votes
1answer
135 views
Which is less insecure - mounting /system rw or disabling SELinux
I recently upgraded my (rooted) Oneplus 3 to Nougat, and Adaway - which modifys the hosts file broke.
I have been unable to get symlinking the hosts file to work because SELinux gets in the way. ...
2
votes
0answers
540 views
Tried many ways to root my Telenor Infinity E
I have been trying to root my phone for two weeks using various exploits but till now all in vain. The devices isn't international so its not famous and I couldn't find any recovery, custom root or ...
1
vote
0answers
220 views
Why init domain failed to execute shell_exec type though there is “domain_auto_trans(init, shell_exec, init_shell)” in the sepolicy?
I'm trying an root exploit on android 5.1.1 and I have gotten root permission with u:r:init:s0 context now. But when I tried to execute system("sh"), it was denied:
type=1400 audit(62.480:16): avc: ...
0
votes
0answers
899 views
Removing Knox and SElinux
I am having problems setting the kernel to permissive (SElinux). I have already tried the setenforce 0 command with terminal but it immediately goes back to enforcing as soon as I set the setenforce 0 ...
0
votes
1answer
544 views
Verifying device integrity. Galaxy Tab S2 9.7"
I wanted to root my Galaxy Tab S2 9.7" LTE (SM-T815Y) and I have spent the better part of my night doing the following. (I have never rooted anything before)
Got a img of autoroot from some site and ...
3
votes
1answer
675 views
Cant remount /system as rw because “read only filesystem” (selinux problem)
Hello i tried to replace kingroot with Supersu, since in the newer versions of kingroot you cant block all of its connections, I had some problems, supersu always failed to install the newer binaries, ...
4
votes
1answer
6k views
What is SELinux and its purpose?
For those of you who don't know, SELinux is a collection of administrative tools on Linux OS'. However, what is it for on android, and what does it do on android? After all, Android is not Linux.
...
1
vote
0answers
720 views
selinux denies busybox although selinux is set to permissive?
Device-info:
Phone: Sony Xperia Z1
Model number: C6903
Android version: 5.1.1
Build Number: 14.6.A.1.236
Rooted, BusyBox and Terminal Emulator installed (Play Store Version!!!)
I have formatted an ...
0
votes
1answer
558 views
SELinux restricting my system app even while it was signed with the same key as the previously shipped one!
Well, I have something weird going on. I was thinking fiddling around with Dotcase.apk from CyanogenMod 13, so I was able to rebuild the apk. I even made sure to sign it with the Platform Android test ...
1
vote
1answer
1k views
How to troubleshoot SELinux issues?
On standard GNU/Linux computers, SELinux comes with a set of tools allowing the administrator to troubleshoot permission issues.
Such tools allow to:
Temporarily switch a single domain in permissive ...
12
votes
1answer
23k views
How dangerous is the fact that SELinux is in “Permissive” mode? What should I be wary of?
I have installed a certain ROM which comes with SELinux in "Permissive" mode. This is the only (good) ROM that properly fits my device and there is no way to change the state of SELinux.
Now I'm not ...
0
votes
0answers
91 views
SELinux policy loading and enforcement on Android
In the most recent versions of Android, SELinux enforcement is enabled in the kernel and is static, but how can this work before a policy has been loaded? Is the policy embedded in the kernel? If not, ...
1
vote
1answer
27k views
How to set SELinux to Permissive
Since installing XtreStoLite 3.1.1, SELinux is set to Enforcing (when I try to boot into TWRP recovery). I tried setting it to permissive (Enforcing = 0) using a terminal emulator (the phone is rooted)...
1
vote
1answer
1k views
What does exactly “Re-root System (SuperSU)” do to your phone in Philz Touch Recovery?
I tried to manually root my phone via pushing a proper su binary to /system/bin and /system/xbin. I was able to push them via adb in recovery, which is a root one (idk why). Once inside my phone, I ...
3
votes
1answer
3k views
Android 6 (cyanogenmod 13) external sd card write access
I always used "Samba server" application on all my android devices for uploading files, it worked great with CM12, but in CM13 even with root access Samba server can't write to external SD card, ...
1
vote
2answers
799 views
Remove a folder I created in /system/lib
I have root access and am able to remount. I created a folder in /system/lib/ named rfsa, but I don't know why I cannot see or open that folder.
When I type ls, it is there. But when I type ls -l, I ...
3
votes
0answers
1k views
How does SuperSu provide root privilege?
Has a write-up ever been released on exactly how SuperSu works? After searching around for a while I found mostly guides on who to use the app, no the implementation details.
I did, however, find ...
1
vote
0answers
137 views
Fix SELinux labels after restoring /data on CM 12.1
I restored an automatic backup on Cyanogenmod 12.1 created with rsync of my /data partition, but now SELinux is denying apps access to their data.
Disabling SELinux "fixes" this problem, but can I ...
12
votes
5answers
8k views
Examine android (v30) selinux policy
I'm trying to find what policy is actually enforced by my phone using selinux. You'd think this would be easy. After all, for security it is good to verify that your policy matches expectations. ...
20
votes
1answer
8k views
SELinux and chroot system call
TL; DR: This is a question about the final step, in a portable, developer-oriented rooting process, that works across all Android machines. It is not based on any exploit - it is something that we are ...
2
votes
1answer
1k views
How SElinux protects android from rooting
I know when rooting we execute a script and we use a thing that is already root and tell it to execute if it executes the script as root and then roots the phone so how does SElinux helps to protect ...
2
votes
0answers
1k views
SELinux context init_shell in boot.img permission denied with Android 5.0.2
I'am used to start a service in the android boot image with inherited context of the init.rc script (u:r:init:s0).
In Android 5.0.2 (Samsung), my service does not inherity the init context anymore, it ...
1
vote
2answers
7k views
Set SELinux mode to Permissive permanently
My Samsung Galaxy Note S2 (GT-N7102) running stock 4.3 JellyBean by default blocks all apps from Google (courtesy of the Chinese government). I followed a tutorial to gain access to gapps that relies ...
1
vote
1answer
2k views
How to completely disable SELinux in Android L in the init.rc file
I want to disable SELinux at boot time for Android L or 5. The reason is because my daemon is not begin executed on boot when it should due to SELinux problems. I have the following in my init.rc file:...
3
votes
0answers
143 views
unable to connect to my nexus 10 with android 4.4 and cyanogenmod with a remote desktop manager
Hello android users and developers.
I would like to give a developer temporary access to my tablet so he can help me solve a problem. On the tablet is running android 4.4 + cyanogen mod 11. I have ...
2
votes
1answer
2k views
Is it possible to find the full SELinux ruleset for OEM's stock ROMs?
I'm writing a root app following Chainfire's documentation, but I found I've to run some command in another SELinux context.
Using that context on my device (OnePlus One with CM12 nightly), I've no ...
