sesuperuser / aosp-su-patch Goto Github PK

AVC denials for some SELinux policies impair Titanium Backup's functionality. For example, Titanium Backup is unable to integrate system app updates (Integrate update into ROM) which involves moving the update from /data/app to /system/app. The AVC denials prevent Titanium Backup from moving the app properly Also, restoring multiple apps using the AUTO (direct/indirect) App processing modes does not work and simply hangs up. Based on the denials shown in the logcat while trying to use Titanium Backup, I have identified the following SELinux policy changes (diff from platform/external/sepolicy after integrating AOSP-SU-PATCH).

TitaniumBackupAVCChangeDiff.txt

With these SELinux policy changes, Titanium Backup now works fine. I am, however, not an expert in SELinux stuff and would like you to review and validate these changes, especially to make sure they are not too open and conform to some acceptable standard