Activity

1. Mygod commented on Aug 7, 2020

   

   Mygod

   on Aug 7, 2020

   Author

   More actions

   A proof of concept script to hijack linker to make appProcess relocation work: (tested on Android 11 beta 3)

   mkdir /apex/myfs
   mount -t tmpfs -o size=1M tmpfs /apex/myfs
   mkdir /apex/myfs/bin /apex/myfs/etc
   echo dir.system = /apex/myfs >/apex/myfs/etc/ld.config.txt
   # or /system/etc/ld.config.29.txt for API 29
   cat /linkerconfig/ld.config.txt >>/apex/myfs/etc/ld.config.txt
   cp /system/bin/app_process /apex/myfs/bin
   /apex/myfs/bin/app_process
2. Mygod

   added a commit that references this issue on Aug 7, 2020

   Run root server in unrestricted SELinux context on Android 10+

   4e9561f
3. happy-corporate-fox

   added a commit that references this issue on Feb 9, 2026

   Run root server in unrestricted SELinux context on Android 10+

   30e6431