It appears root access is irrelevant on my device as everything is managed by SeLinux (the root user basically can’t execute anything).
The problem is I can’t just create my new polices. I need to keep the existing ones in order to keep the fingerprint scanner and the lte module firmwares happy.
Almost every settings seem to be in
sepolicy. But this is a binary file:
% file sepolicy sepolicy: SE Linux policy v30 MLS 8 symbols 7 ocons
I just found
apol from setools to view it’s content but not to dump or edit it.
What’s the expected way to edit such file’s type?