neurodroid/cryptonite

Truecrypt and SELinux

Opened this issue · 0 comments

dennyh commented

Hello! I have some problems with Truecrypt on my devices.

Applications without root access can't access mounted tc volumes with SELinux in enforcing mode.
Also, when mounting a tc volume in SELinux Permissive mode I sometimes have to mount, dismount and mount it again. The first time mounting it doesn't allow any access to the files in the container from applications without root, kind of like when SELinux is in enforcing mode.

In encFS however, Applications without root can access mounted encFS volumes contents with SELinux in enforcing mode.

Since encFS can mount just fine without messing with SELinux I'm thinking that I should be able to somehow mount a Truecrypt volume the same way.

So, my questions would be:

  1. Is there a way to mount a Truecrypt volume without puting SELinux in permissive mode?
  2. What exactly are the downsides of runing android with SELinux in permissive mode?

To mount a truecrypt volume I use the following lines:

setenforce 0
truecrypt -t -v --fs-options="uid=1000,gid=1000,umask=0002" /extSdCard/container.tc /sdcard/csh.cryptonite/tcmntpoint

Android 5.1.1
CyanogenMod 12.1-201500529-UNOFFICIAL-lionheartk-chagallwifi
Device: Galaxy tab s 10.5 (SM-T800)