kernel: Allow system_server to kill su process

tiann · Feb 20, 2024 · 01b685c · 01b685c
1 parent cbd1844
commit 01b685c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/kernel/selinux/rules.c b/kernel/selinux/rules.c
@@ -131,6 +131,10 @@ void apply_kernelsu_rules()
 	ksu_allow(db, "system_server", "untrusted_app_all_devpts", "chr_file",
 		  "write");
 
+    // Allow system server kill su process
+    ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "getpgid");
+    ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "sigkill");
+
 	rcu_read_unlock();
 }