I got pretty frustrated over working on Xposed for L at the weekend. So I got the mmap-based "service" working quite well, but then I stepped into the next trap. Apparently, Zygote does't have execmod and execmem privileges. To my understanding these would be necessary to make any memory area writable and executable. That's really a problem, because it's a very central part of dynamic code change/generation. I have already spent many days to find even a single way to get Xposed working on KitKat's preview version of ART, and now SELinux is preventing it...I'll take a break from working on L for now. Once I got some motivation again, I will first try to get it running with permissive SELinux to see if the hacks themselves are working correctly. Maybe it's possible to refactor the resulting code to work with SELinux, otherwise Xposed would require SElinux to be disabled or permissive. Tungstwenty : IIRC, you found a per-domain field for "permissive". Is that a simple flag that could be changed? Or would it require handling compression/checksums/...? Any chance to add certain permissions to an existing policy files?