From a79d7e363772028ce27ddaff3ec899c28ab46264 Mon Sep 17 00:00:00 2001 From: Enginex0 Date: Tue, 19 May 2026 05:03:12 +0100 Subject: [PATCH] fix(spoof): allow UDP egress for DNS resolution HttpsURLConnection resolves bulletin.source via getaddrinfo, which uses UDP/53 first. Without UDP socket rules the resolver fails before TCP even attempts, killing BulletinPoller silently on enforcing SELinux kernels. Mirror the existing TCP rules onto UDP for ksu and magisk. --- module/sepolicy.rule | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/module/sepolicy.rule b/module/sepolicy.rule index 8e0124e..fb5cbcd 100644 --- a/module/sepolicy.rule +++ b/module/sepolicy.rule @@ -7,3 +7,10 @@ allow ksu port:tcp_socket name_connect allow magisk self:tcp_socket { create connect read write getopt setopt } allow magisk node:tcp_socket node_bind allow magisk port:tcp_socket name_connect + +allow ksu self:udp_socket { create connect read write getopt setopt } +allow ksu node:udp_socket node_bind +allow ksu port:udp_socket name_connect +allow magisk self:udp_socket { create connect read write getopt setopt } +allow magisk node:udp_socket node_bind +allow magisk port:udp_socket name_connect