android - avc : denied { connectto } when using uds on Android 10

Question

我在 Android 10 设备上运行 2 个应用程序，它们通过 uds 相互通信。一切正常，直到我将应用程序设置更改为针对 android 10。我在 logcat 中收到以下错误:

09-07 13:33:18.136 14573 14573 W <myapp_name>: type=1400 audit(0.0:1461891): avc: denied { connectto } for pid=14573 comm=474C546872656164203134353530 path=005368617265644D656D6F727953657276696365 scontext=u:r:untrusted_app_27:s0:c512,c768 tcontext=u:r:untrusted_app_25:s0:c512,c768 tclass=unix_stream_socket permissive=0

经过一番挖掘，我发现 neverallow SELinux 政策:

neverallow { all_untrusted_apps -mediaprovider } init:unix_stream_socket connectto;

有没有办法让它在面向 Android 10 的应用程序上运行？

Answer 1

由于以下更改，具有抽象路径的 UDS 不适用于 API>=28。

Per-app SELinux domainsApps that target Android 9 or higher cannot share data with other apps using world-accessible Unix permissions. This change improves the integrity of the Android Application Sandbox, particularly the requirement that an app's private data is accessible only by that app.

To share files with other apps, use a content provider.

https://developer.android.com/about/versions/pie/android-9.0-changes-28#framework-security-changes