Android 中怎样查找SELinux导致的权限受限有关问题



参考文档1:https://zhidao.baidu.com/question/1896836900618619580.html

>adb root

>adb remount

>adb shell setenforce 0（关掉权限）

运行程序，打log，查看avc，可以看到所有的avc，然后全部添加。

eg:

1.

type=1400 audit(0.0:666): avc: denied { open } for path="/data/data/wangpos.upgrade.system/ota.zip" dev="mmcblk0p30" ino=8287 scontext=u:r:uncrypt:s0 tcontext=u:object_r:system_app_data_file:s0 tclass=file permissive=0

allow uncrypt system_data_file:file { getattr open read };

2.

type=1400 audit(0.0:663): avc: denied { search } for name="wangpos.upgrade.system" dev="mmcblk0p30" ino=8246 scontext=u:r:uncrypt:s0 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0

allow uncrypt system_data_file:dir { search getattr };