Android 中怎样查找SELinux导致的权限受限有关问题



参考文档1:https://zhidao.baidu.com/question/1896836900618619580.html


>adb root

>adb remount

>adb shell setenforce 0(关掉权限)

运行程序,打log,查看avc,可以看到所有的avc,然后全部添加。


eg:


1.

type=1400 audit(0.0:666): avc: denied { open } for path="/data/data/wangpos.upgrade.system/ota.zip" dev="mmcblk0p30" ino=8287 scontext=u:r:uncrypt:s0 tcontext=u:object_r:system_app_data_file:s0 tclass=file permissive=0


allow uncrypt system_data_file:file { getattr open read };

2.
type=1400 audit(0.0:663): avc: denied { search } for name="wangpos.upgrade.system" dev="mmcblk0p30" ino=8246 scontext=u:r:uncrypt:s0 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0

allow uncrypt system_data_file:dir { search getattr };



猜你喜欢

转载自blog.csdn.net/yhyqf/article/details/77840831
今日推荐