Allow dex2oat to read files received from sockets

JingMatrix · JingMatrix · commit 63f2c0d6a923 · 2025-01-22T10:53:39.000+01:00
On some devices `dex2oat` cannot access files received from sockets due to SELinux restrictions.
Rules added according to the avc logs.
diff --git a/magisk-loader/magisk_module/sepolicy.rule b/magisk-loader/magisk_module/sepolicy.rule
@@ -6,6 +6,8 @@ type xposed_file file_type
 typeattribute xposed_file mlstrustedobject
 allow {dex2oat installd isolated_app shell} xposed_file {file dir} *
 
+allow dex2oat unlabeled file open
+
 type xposed_data file_type
 typeattribute xposed_data mlstrustedobject
 allow * xposed_data {file dir} *
