search

samsungexynos7420 / android_device_samsung_universal7420-common

Universal7420 devices. Based off the Exynos7420 organization source with improvements
0 stars 3 forks source link

SELinux permissive #2

Open fakemanoan opened 7 months ago

fakemanoan commented 7 months ago

SElinux is currently permissive due to a lack of working SELinux policies.

This is a problem, not only from a strict security standpoint, but from a usability one also. SafetyNet and Play Integrity API will not play nice with permissive kernels.

It is quite important to get this working in the near future. The ground work is there, just need working policies and a switch on in the kernel.

fakemanoan commented 4 months ago

Some rules for 19.1 have been made, and on a Note 5 device, and allow the device to at least boot and function on wifi, mobile networks and such.

There are some issues though, like missing access to sensors among other things. But this is a WIP

fakemanoan commented 1 month ago

Rules have been written and tested on an S6 for 18.1 and it works in my use case perfectly. Calls work, GPS, sensors, audio, cameras, etc. Need to rollout fixes to S6e, S6e+, N5 and any other bugs and I think it will be good to port forward to 19.1 and 20