I'm the developer on a root-app for Android.
Sadly now on some devices/ROMs there is SELinux in enforce-mode and prevents some actions of my app.
Because this is a root-app, the users are granting me root-access!
Now, SELinux is blocking some of my actions and I need to find a solution for this.
I tried to temporary disable SELinux by
setenforce permissive -> no failure, but getenforce still returns "Enforcing"
echo 0 > /sys/fs/selinux/enforce -> no failure, but getenforce still returns "Enforcing"
I play with the idea to edit the sepolicy-file at runtime to allow the blocked commands and trigger a reload of it, but I'm neither sure if & how this could work, nor isn't it a good idea.
Who has some more tips or resources for me?
avc: denied { execstack } for pid=10971
and maybe more things after that :/execstack
yourself? You do realize that whoever set up Enforcing mode might have locked down thesu
daemon/program till it's helpless in this case, right?execstack
(a fairly obscure piece of Linux history) and SELinux is stopping it. Post the full log, please. Does whatever you're running work from the shell?