65bda4b5a8
fixup! Suggest non-gki kernel users to backport path_umount ( #1477 )
...
My bad.
as reported by @AzusaHana on tg
2024-03-19 15:39:54 +08:00
ae049019d6
kernel: support query working mode
2024-03-19 11:52:17 +08:00
cbb215ea81
Suggest non-gki kernel users to backport path_umount ( #1464 )
...
Most kernel builders have to touch their kernel source code anyway, why
not also tell them to backport path_umount so even non-gki users can
benefit from this?
I know this might be a bit controversial as this will raise the barrier
of entry, but the benefits are just so high.
Idea was from OnlyTomInSecond on KernelSU group chat way back, and it
has been on the discussions for some time
references:
https://t.me/KernelSU_group/27237/176515
https://t.me/KernelSU_group/3249/184908
https://github.com/tiann/KernelSU/discussions/955#discussioncomment-7617166
https://github.com/OnlyTomInSecond/android_kernel_xiaomi_sdm845/commit/03d233db8bbe9fe101509430bfa09d1899168aa7
https://github.com/tiann/KernelSU/pull/1060
https://elixir.bootlin.com/linux/v5.9.1/source/fs/namespace.c#L1728
https://elixir.bootlin.com/linux/v5.10.9/source/fs/namespace.c#L1730
https://elixir.bootlin.com/linux/v6.5/source/fs/namespace.c#L1887
https://github.com/tiann/KernelSU/pull/1464#issuecomment-2002492107
Kernel side change examples
5.4
https://github.com/natsumerinchan/kernel_oneplus_sm8350/commit/961d9788624e88c3c58918b3781b9fbdd19ecbeb
4.19
https://github.com/backslashxx/android_karnol_ximi_fog/commit/164917f56d0e75ab51bb9f1bdf489acac7a6d3db
4.14
https://github.com/crdroidandroid/android_kernel_xiaomi_sm6150/commit/c07c70a0c59fb46ac0c1c812c3e993022e375cd5
4.9
https://github.com/backslashxx/msm8953-los21/commit/195f07593ae9769a992f3945bcdc43ff7fc99827
4.4
https://github.com/riarumoda/android_kernel_samsung_a9y18qlte/commit/21ea33fe41ce079ec1d663c0bd2201bc00a8084a
https://github.com/tiann/KernelSU/pull/1464#issuecomment-2002424069
ofcourse having someone on 3.18 confirm this will be nice.
**PROS**: umount modules for everyone
**CONS**: barrier of entry +1
---------
Co-authored-by: Christoph Hellwig <hch@lst.de >
Co-authored-by: Fede2782 <78815152+Fede2782@users.noreply.github.com >
Co-authored-by: Tom <31297720+onlytominsecond@users.noreply.github.com >
2024-03-18 10:27:31 +08:00
3f5d6ca54a
Build KernelSU as LKM ( #1254 )
...
Co-authored-by: weishu <twsxtd@gmail.com >
2024-03-15 18:53:24 +08:00
9b254e8628
Guard a few logprint in prctl path with KSU_DEBUG ( #1402 )
2024-02-29 13:47:22 +08:00
8e06088f96
kernel: prevent become manager when failed. close #1328
2024-02-03 20:03:26 +08:00
802549d8cd
kernel: avoding umount when there isn't any module. close #556
2024-01-08 12:55:08 +08:00
cbf8f0aa2a
Try umount /sbin in kernel ( #1257 )
2024-01-06 08:59:30 +08:00
c07b7d38a0
Mount temp dir at /debug_ramdisk ( #1226 )
2023-12-23 21:05:26 +08:00
86dcb02f72
kernel: make compiler happy
2023-10-21 22:43:58 +08:00
5c495a7e83
kernel: make su without any capabilities possible
2023-10-21 20:32:28 +08:00
6dd1b266e9
kernel: don't umount for non zygote child process. fixes #1054,#1049,#1045
2023-10-19 17:29:10 +08:00
aefcb9c980
kernel: ignore path that's not mountpoint
2023-10-12 14:24:41 +08:00
aca3ecebd9
kernel: umount modules mnt when needed. fix #991
2023-10-08 14:17:33 +08:00
b14ea03dc4
kernel: Adapt to low version Android init process ( #973 )
...
1. Adapt to low version Android init process
2. Add stop hook output
3. Fix output with missing line breaks
2023-10-02 12:00:24 +08:00
a3b675c6f7
kernel: Fix manager recognize err
2023-08-09 16:28:22 +08:00
2f5b4d979c
kernel: don't trigger page fault when become manager. fix #836
2023-08-09 12:33:05 +08:00
cd19ce2e86
Distinguish different PT_REGS_PARM4 under x86 ( #711 )
...
1. `PT_REGS_CCALL_PARM4` 表示存放C调用约定的第4个参数的寄存器
2. `PT_REGS_SYSCALL_PARM4` 表示存放linux syscall调用约定的第4个参数的寄存器
3. 将原有 `PT_REGS_PARM4` 改为上述之一
4. 将原有 `ksu_handle_execveat_ksud` 和 `ksu_handle_execveat_sucompat` 可能被
kprobe 传递错误实参、且不使用的形参标记为 never_used 并传递 `NULL`
5. 为 `ksu_handle_execveat_ksud` 提供正确的 argv 参数用以在 x86 下也能正确识别 `init
second_stage`
---------
Co-authored-by: weishu <twsxtd@gmail.com >
2023-07-06 09:01:35 +08:00
f87d6eb97d
kernel: fix incorrect umount for apps
2023-06-22 15:17:32 +08:00
fc4f0b285a
kernel: don't alloc groups for default groups
2023-06-22 13:42:28 +08:00
22e3e1fc0e
Revert "kernel: getname might sleep in kprobe handler ( #670 )"
...
This reverts commit 7fa7b5b875
2023-06-22 12:54:30 +08:00
7fa7b5b875
kernel: getname might sleep in kprobe handler ( #670 )
2023-06-22 10:54:50 +08:00
3fffcde59d
Fix error build when using GCC 12.0.0 ( #609 )
...
Signed-off-by: Fiqri Ardyansyah <fiqri0927936@gmail.com >
2023-06-09 10:35:16 +08:00
19e00ac4eb
kernel: fix set groups for kernel 4.9-
2023-06-06 20:45:42 +08:00
bacd16a68c
kernel: support setting selinux context for profile
2023-06-06 16:35:25 +08:00
893aebca4f
kernel: support settings supplementary groups for profile
2023-06-06 13:19:11 +08:00
1a6e99bcc8
kernel: prevent root process to exec su, which makes app can escape root profile by exec it twice
2023-06-06 11:08:57 +08:00
fc96172655
kernel: make the profile uid, gid, capabilities really work
2023-06-04 17:29:12 +08:00
20a9c6ec0f
kernel: use uid instead of package to compare allowlist, fix #580
2023-06-04 09:18:39 +08:00
395711c942
kernel: dont prune uid used for app profile
2023-06-04 01:01:39 +08:00
bc9e3da5ce
kernel: respect the app profile's umount modules field for kernel umounting
2023-06-04 00:03:56 +08:00
14b1386879
kernel: support CMD_IS_UID_GRANTED_ROOT and CMD_IS_UID_SHOULD_UMOUNT
2023-06-03 22:44:01 +08:00
b4f6302262
kernel: don't copy profile when not found
2023-06-03 17:26:00 +08:00
e8d234ae66
kernel: baby version of profile
2023-06-03 00:01:00 +08:00
5b4655f827
Revert 052a3d3 ( #500 )
...
确实会导致卡住问题，一旦卡住，其他程序就无法正确卸载。
可能是，卸载目录那里一直在等待前面的空闲后再卸载，然后把后面的事件全部阻塞了？
2023-05-15 23:18:34 +08:00
002969e9a7
kernel: don't umount for process in global namespace
2023-05-12 12:32:35 +08:00
052a3d3a4f
kernel: umount by lazy
2023-05-02 00:12:01 +08:00
168f1f1ddd
kernel: fix snprintf
2023-04-18 19:38:58 +08:00
fa25a4fe18
kernel: allow manager to be installed in work profile
2023-04-18 18:32:33 +08:00
54e5e8fc07
kernel: check CONFIG_SECCOMP status ( #351 )
2023-04-05 19:09:47 +08:00
4933b045e4
kernel: fix incorrect dput
2023-04-03 19:22:05 +08:00
44444b2a56
kernel: basicly umount overlayfs in kernel
2023-04-03 19:16:24 +08:00
a8bd9f198e
kernel: Fix side channel attack
2023-03-28 12:07:18 +08:00
6ae2a73ad7
kernel: return early for prctl command
2023-02-22 14:26:53 +07:00
f946ef774b
kernel: allow root processes to get allow/deny list ( #256 )
2023-02-19 16:09:21 +08:00
20fcc971e1
kernel: press KEY_VOLUMEDOWN over 2 seconds will enter safemode and disable all modules
...
Co-authored-by: Ylarod <me@ylarod.cn >
2023-02-13 21:23:28 +07:00
9b8f8fac99
kernel: fix filp_open on older kernel's kworker ( #205 )
...
On older kernel, kworker missing keyring from init process , and this
keyring is related to FBE , which causes filp_open return ENOKEY or
other errors.To fix this,just install init's keyring to per
kworkers.This works on Kernel 4.4 and 4.9.
2023-02-05 07:14:59 +08:00
3603778a8c
kernel: support sepolicy
2023-01-31 18:54:31 +07:00
fa1b6f6d5b
kernel: minor fix ( #122 )
2023-01-26 14:55:41 +08:00
443c5867cd
kernel: precise trigger timing of post-fs-data ( #118 )
...
* kernel: add report_event cmd
* ksud: report event
* kernel: trigger on_post_fs_data
* ksud: comment unused code
* [skip ci] run clang-format
Signed-off-by: Ylarod <me@ylarod.cn >
* ci: use custom key to sign official bootimgs
* format ksud
* reject non root
* remove
Signed-off-by: Ylarod <me@ylarod.cn >
2023-01-26 11:29:02 +08:00
backslashxx