eu.chainfire.libsuperuser

Class Policy

java.lang.Object

eu.chainfire.libsuperuser.Policy

public abstract class Policy
extends java.lang.Object

Helper class for modifying SELinux policies, reducing the number of calls to a minimum. Example usage:

 

 private class Policy extends eu.chainfire.libsuperuser.Policy {
      @Override protected String[] getPolicies() {
         return new String[] {
             "allow sdcardd unlabeled dir { append create execute write relabelfrom link unlink ioctl getattr setattr read rename lock mounton quotaon swapon rmdir audit_access remove_name add_name reparent execmod search open }",
             "allow sdcardd unlabeled file { append create write relabelfrom link unlink ioctl getattr setattr read rename lock mounton quotaon swapon audit_access open }",
             "allow unlabeled unlabeled filesystem associate"
         };
     }
 };
 private Policy policy = new Policy();

 public void someFunctionNotCalledOnMainThread() {
     policy.inject();
 }

 
 

Constructor Summary

Constructors

Constructor and Description
Policy()

Method Summary

Modifier and Type	Method and Description
static boolean	canInject() Detects availability of the supolicy tool.
protected java.util.List<java.lang.String>	getInjectCommands() Transform the policies defined by getPolicies() into a set of shell commands
protected java.util.List<java.lang.String>	getInjectCommands(boolean allowBlocking) Transform the policies defined by getPolicies() into a set of shell commands
protected abstract java.lang.String[]	getPolicies() Override this method to return a array of strings containing the policies you want to inject.
static boolean	haveInjected()
void	inject() Inject the policies defined by getPolicies().
void	inject(Shell.Interactive shell, boolean waitForIdle) Inject the policies defined by getPolicies().
static void	resetCanInject() Reset cached can-inject state and force redetection on nect canInject() call
static void	resetInjected() Reset policies-have-been-injected state, if you really need to inject them again.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Policy

public Policy()

Method Detail

haveInjected

public static boolean haveInjected()

Returns:

Have we injected our policies already?

resetInjected

public static void resetInjected()

Reset policies-have-been-injected state, if you really need to inject them again. Extremely rare, you will probably never need this.

getPolicies

protected abstract java.lang.String[] getPolicies()

Override this method to return a array of strings containing the policies you want to inject.

Returns:

Policies to inject

canInject

public static boolean canInject()

Detects availability of the supolicy tool. Only useful if Shell.SU.isSELinuxEnforcing() returns true.

Returns:

canInject?

resetCanInject

public static void resetCanInject()

Reset cached can-inject state and force redetection on nect canInject() call

getInjectCommands

protected java.util.List<java.lang.String> getInjectCommands()

Transform the policies defined by getPolicies() into a set of shell commands

Returns:

Possibly empty List of commands, or null

getInjectCommands

protected java.util.List<java.lang.String> getInjectCommands(boolean allowBlocking)

Transform the policies defined by getPolicies() into a set of shell commands

Parameters:

allowBlocking - allow method to perform blocking I/O for extra checks

Returns:

Possibly empty List of commands, or null

inject

public void inject()

Inject the policies defined by getPolicies(). Throws an exception if called from the main thread in debug mode.

inject

public void inject(Shell.Interactive shell,
                   boolean waitForIdle)

Inject the policies defined by getPolicies(). Throws an exception if called from the main thread in debug mode if waitForIdle is true. If waitForIdle is false however, it cannot be guaranteed the command was executed and the policies injected upon return.

Parameters:

shell - Interactive shell to execute commands on

waitForIdle - wait for the command to complete before returning ?