From c72c045743720d69e04006d89a333504bb309721 Mon Sep 17 00:00:00 2001 From: JingMatrix Date: Wed, 8 Apr 2026 13:50:49 +0200 Subject: [PATCH 1/2] Add SELinux for `serial` service discovery On Xiaomi Android 12 [Xiaomi/toco_ru/toco:12/RKQ1.210614.002/V13.0.4.0.SFNRUXM:user/release-keys], the following SELinux rule is stopping daemon from discovering the `serial` service for system_servce IPC initialization: ``` avc: denied { find } for pid=... uid=1000 name=... scontext=u:r:system_server:s0 tcontext=u:object_r:default_android_service:s0 tclass=service_manager permissive=0 ``` --- zygisk/module/sepolicy.rule | 2 ++ 1 file changed, 2 insertions(+) diff --git a/zygisk/module/sepolicy.rule b/zygisk/module/sepolicy.rule index e27ad3a05..e6094fb6d 100644 --- a/zygisk/module/sepolicy.rule +++ b/zygisk/module/sepolicy.rule @@ -1,3 +1,5 @@ +allow system_server default_android_hwservice hwservice_manager find + allow dex2oat dex2oat_exec file execute_no_trans allow dex2oat system_linker_exec file execute_no_trans From 36502e80c80764560ec95521594038f83b0d9478 Mon Sep 17 00:00:00 2001 From: JingMatrix Date: Wed, 8 Apr 2026 14:25:07 +0200 Subject: [PATCH 2/2] Fix typo --- zygisk/module/sepolicy.rule | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/zygisk/module/sepolicy.rule b/zygisk/module/sepolicy.rule index e6094fb6d..ed9ded970 100644 --- a/zygisk/module/sepolicy.rule +++ b/zygisk/module/sepolicy.rule @@ -1,4 +1,4 @@ -allow system_server default_android_hwservice hwservice_manager find +allow system_server default_android_service service_manager find allow dex2oat dex2oat_exec file execute_no_trans allow dex2oat system_linker_exec file execute_no_trans