Android selinux policy runtime 적용 방법

user-debug android board에서 sepolicy를 빌드하고 적용하는 방법

sepolicy 빌드

make sepolicy

Install: out/target/product/<device>/root/sepolicy
#### make completed successfully (02:45 (mm:ss)) ####

sepolicy push 및 적용방법 1

adb root
adb push out/target/product/<device>/root/sepolicy /data/security/current
adb shell setprop selinux.reload_policy 1

적용방법2

adb root
adb push out/target/product/<device>/root/sepolicy /data/security/current
adb shell load_policy data/security/current/sepolicy

selinux enforcing mode 변경 방법

adb shell setenforce 1 #enforcing mode로 변경
adb shell setenforce 0 #permissive mode로 변경

References:

BadSmell