avc: denied { read } for scontext=u:r:system_server:s0 tcontext=u:object_r:fuseblk:s0 tclass=file permissive=1

[roundaboutluke]

avc: denied { read } for scontext=u:r:system_server:s0 tcontext=u:object_r:fuseblk:s0 tclass=file permissive=1

This error happens at this part of the script on A9.

# download atlas /system/bin/rm -f /sdcard/Download/atlas.apk until $download /sdcard/Download/atlas.apk $url/apk/PokemodAtlas-Public-$aversions.apk || { echo "date +%Y-%m-%d_%T $download /sdcard/Download/atlas.apk $url/apk/PokemodAtlas-Public-$aversions.apk" >> $logfile ; logger "download atlas failed, exit script" ; exit 1; } ;do sleep 2 done

We know it's here because it appears in atlas-install.log in addition to aconf.log

cat atlas-install.log avc: denied { read } for scontext=u:r:system_server:s0 tcontext=u:object_r:fuseblk:s0 tclass=file permissive=1 Success [2023-10-07T19:13:27 GMT] Installed Atlas [2023-10-07T19:13:27 GMT] Magisk policy set so that Atlas can become root. [2023-10-07T19:13:27 GMT] Done.

This was not modified, so believe it's a9 related in some way, shape or form but I know nothing about selinux.

Doesn't appear to stop the script continuing and no idea if it has any actual impact, but it's an error none the less.

[roundaboutluke]

Some quick googling states “ A Permissive SELinux writes that Log BUT allow the access.

Fairly certain we couldn’t use enforcing SELinux for half of what we’re doing anyway, so I believe the error can be ignored but should be documented regardless.

[TechG3n]

Just notes From https://discord.com/channels/1157716541828243506/1157716648090947694/1161700546554626171

_Issue 2:
avc: denied { read } for scontext=u:r:system_server:s0 tcontext=u:object_r:sdcardfs:s0 tclass=file permissive=1

Workaround 2:
change location of APK from /sdcard/Download to /data/local/tmp__

Maybe we need to download to another location and move the script then..