Skip to content

Refine SELinux rules for sock connection#123

Closed
JingMatrix wants to merge 1 commit intomasterfrom
selinux
Closed

Refine SELinux rules for sock connection#123
JingMatrix wants to merge 1 commit intomasterfrom
selinux

Conversation

@JingMatrix
Copy link
Copy Markdown
Owner

It is reported on Samsung device [samsung/infinity_beyond1lte/beyond1lte:16/BP4A.251205.006/eng.androi.20260317.090127:userdebug/release-keys] that, the following SELinux rule is needed:

avc:  denied  { write } for  comm="app_process64" name="cp64.sock" dev="dm-41" ino=... scontext=u:r:zygote:s0 tcontext=u:object_r:unlabeled:s0 tclass=sock_file permissive=0

It is reported on Samsung device [samsung/infinity_beyond1lte/beyond1lte:16/BP4A.251205.006/eng.androi.20260317.090127:userdebug/release-keys] that, the following SELinux rule is needed:
```
avc:  denied  { write } for  comm="app_process64" name="cp64.sock" dev="dm-41" ino=... scontext=u:r:zygote:s0 tcontext=u:object_r:unlabeled:s0 tclass=sock_file permissive=0
```
@JingMatrix JingMatrix linked an issue Mar 30, 2026 that may be closed by this pull request
1 task
@JingMatrix JingMatrix closed this Mar 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug] zygote64 not injected due to SELinux issues

1 participant