Enginex0
756aa2efb2
BulletinPoller fetches the Pixel security bulletin index page on its own HandlerThread with 5s/30s/2m/10m/30m bootstrap backoff, then 24h steady cadence. The first <td>YYYY-MM-DD</td> match is the latest published patch; newer-than-current dates flow through PatchLevelManager.updateTo for validation + atomic write + resetprop. Persists the last 10 attempts to last_bulletin_fetch.json (atomic rename) with status, http_code, parsed_date, applied, and error fields so operators can audit history without logcat. Sepolicy rule appends TCP-socket allow rules for both ksu and magisk source domains so HttpsURLConnection survives SELinux enforcement on either root provider. Uninstall.sh cleans the three new artifacts.
10 lines
390 B
Plaintext
10 lines
390 B
Plaintext
allow keystore {adb_data_file shell_data_file} file *
|
|
allow crash_dump keystore process *
|
|
|
|
allow ksu self:tcp_socket { create connect read write getopt setopt }
|
|
allow ksu node:tcp_socket node_bind
|
|
allow ksu port:tcp_socket name_connect
|
|
allow magisk self:tcp_socket { create connect read write getopt setopt }
|
|
allow magisk node:tcp_socket node_bind
|
|
allow magisk port:tcp_socket name_connect
|