weishu
893aebca4f
kernel: support settings supplementary groups for profile
2023-06-06 13:19:11 +08:00
weishu
1c8bd90fdf
ci: respect the CONFIG_KSU options ( #599 )
...
close #596 , #597
2023-06-06 12:12:27 +08:00
weishu
1a6e99bcc8
kernel: prevent root process to exec su, which makes app can escape root profile by exec it twice
2023-06-06 11:08:57 +08:00
weishu
9dcc9225d7
kernel: fix incorrect prune uid for work profile app, close #587
2023-06-05 17:41:41 +08:00
weishu
fc96172655
kernel: make the profile uid, gid, capabilities really work
2023-06-04 17:29:12 +08:00
weishu
115e412cdc
kernel: add more capailities
2023-06-04 16:09:27 +08:00
weishu
9abe9687ab
kernel: fix set app profile may override other user's
2023-06-04 13:59:22 +08:00
weishu
27cca2a264
kernel: Fixing the issue of a delay in updating the default profile.
2023-06-04 09:47:31 +08:00
weishu
20a9c6ec0f
kernel: use uid instead of package to compare allowlist, fix #580
2023-06-04 09:18:39 +08:00
diphons
da45d90605
Fixup: build under linux 4.14 ( #581 )
...
Split compiler_types.h from compiler.h only available for linux 4.14
2023-06-04 09:15:03 +08:00
weishu
395711c942
kernel: dont prune uid used for app profile
2023-06-04 01:01:39 +08:00
weishu
bc9e3da5ce
kernel: respect the app profile's umount modules field for kernel umounting
2023-06-04 00:03:56 +08:00
weishu
3a9e29f1ee
kernel: Add version field for struct app_profile
2023-06-03 23:57:05 +08:00
weishu
0e539ccee1
kernel: support load/restore default profiles
2023-06-03 23:57:05 +08:00
weishu
14b1386879
kernel: support CMD_IS_UID_GRANTED_ROOT and CMD_IS_UID_SHOULD_UMOUNT
2023-06-03 22:44:01 +08:00
weishu
e030ca48db
kernel: fix CMD_GET_ALLOW_LIST error
2023-06-03 19:23:51 +08:00
weishu
b4f6302262
kernel: don't copy profile when not found
2023-06-03 17:26:00 +08:00
weishu
f8b18c06c8
kernel: minor fixes for profiles
2023-06-03 10:18:11 +08:00
weishu
cb5cd08098
kernel: don't fill default value for app profile
2023-06-03 00:06:58 +08:00
weishu
e8d234ae66
kernel: baby version of profile
2023-06-03 00:01:00 +08:00
dabao1955
9faa207646
Kconfig:Update text information ( #567 )
...


2023-06-02 10:41:40 +08:00
dabao1955
7428ee02d7
change warning about disable kprobes ( #549 )
...
#479
Co-authored-by: dabao1955 <195328750@qq.com >
2023-05-23 10:24:18 +08:00
weishu
a3fdcdd901
kernel: remove no-macro-redefined
2023-05-22 10:50:04 +08:00
weishu
976f2610cb
kernel: fix format warnning
2023-05-22 10:39:54 +08:00
weishu
a1daacaa97
kernel: fix incorrect prune uid in allowlist for work profile app. close #535
2023-05-22 10:32:20 +08:00
Aquarius223
2a73743527
kernel: Modify and adjust KernelSU Kconfig ( #538 )
...
1. List KSU as a "KernelSU" menu
2. Overlayfs[1] may be disabled for some early kernels(4.4.y), so
choosing depends on OVERLAY_FS here is useless.
3. KSU_DEBUG is a bool option, it is not a module, fixed from tristate
to bool.
4. Adjust the config order
[1]: github.com/LineageOS/android_kernel_xiaomi_msm8998/commit/dcc27641
Change-Id: I49c77ba30f0a8ed00efc44afef8a12f9ad039d7e
Co-authored-by: admin <paper@localhost>
2023-05-21 20:28:59 +08:00
tiann
dc8e63421d
Revert "Add option to enable global namespace ( #497 )"
...
This reverts commit 00a459a91b .
2023-05-16 22:27:01 +08:00
Vayruz Rafli
4d5592e5a4
Fix little typo in setup script. ( #505 )
2023-05-16 18:12:16 +08:00
Hikari-no-Tenshi
00a459a91b
Add option to enable global namespace ( #497 )
...
Disabled by default.
To enable/disable use terminal with root.
To enable:
echo 1 > /sys/module/ksu/parameters/global_namespace_enable
To disable:
echo 0 > /sys/module/ksu/parameters/global_namespace_enable
Value will be reset to 0 (disabled) on reboot.
2023-05-16 11:39:48 +08:00
浅秋枫影
5b4655f827
Revert 052a3d3 ( #500 )
...
确实会导致卡住问题,一旦卡住,其他程序就无法正确卸载。
可能是,卸载目录那里一直在等待前面的空闲后再卸载,然后把后面的事件全部阻塞了?
2023-05-15 23:18:34 +08:00
tiann
002969e9a7
kernel: don't umount for process in global namespace
2023-05-12 12:32:35 +08:00
tiann
9d24e59240
kernel: revert init stage for x86_64 temporarily
2023-05-11 17:20:55 +08:00
RyuujiX
940f42b579
kernel: Kconfig: Remove KPROBES dependancy ( #453 )
...
For those who want to Implement KernelSU Manually with KPROBES disabled.
When KPROBES Broken and Still enabled, this will causing Loop at splash
logo even Already Manually Imported because this
743ac9df1a/kernel/ksu.c (L57) .
And when KPROBES is disabled, KSU also will not compiled (I Know it'll
still build if obj-y is set for KSU, but it's better to remove, who
knows if someone set as obj-$(CONFIG_KSU)).
Signed-off-by: RyuujiX <saputradenny712@gmail.com >
2023-05-04 22:57:49 +08:00
Huy Minh
5b284d27ee
ksud.c : Include compat.h ( #450 )
...
Fix compiling on Android-x86
Signed-off-by: hmtheboy154 <buingoc67@gmail.com >
2023-05-04 11:49:21 +08:00
shygos
b1e98cc4b3
kernel: Use a better way to link submodule directory ( #449 )
...
Use ../ instead of absolute path
2023-05-03 22:05:36 +08:00
tiann
052a3d3a4f
kernel: umount by lazy
2023-05-02 00:12:01 +08:00
Abdelhay-Ali
ad395c2260
make huawei hi6250 4.9.319 kernel compile ( #431 )
2023-04-27 13:30:04 +08:00
tiann
70dac4b036
kernel: fix incorrect invalidate for manager in work profile
2023-04-21 14:45:47 +08:00
华
6b9cb3401f
selinux: use grep to check api supports ( #402 )
...
This checks `selinux_state` and `current_sid` supports in a raw way.
Feels more reliable than the version checks.
Supersedes #401 , fixes #280 , fixes #400 .
2023-04-20 15:22:03 +08:00
tiann
168f1f1ddd
kernel: fix snprintf
2023-04-18 19:38:58 +08:00
tiann
fa25a4fe18
kernel: allow manager to be installed in work profile
2023-04-18 18:32:33 +08:00
tiann
8167ab0d4c
kernel: always apply sepolicy rules even if selinux is permissive
2023-04-18 14:15:37 +08:00
tiann
6b8b02c475
Revert "kernel: don't save allowlist in worker"
...
This reverts commit 54461bc4c9 .
2023-04-18 13:19:49 +08:00
tiann
7965522922
kernel: don't show log when get allowlist
2023-04-18 13:19:49 +08:00
tiann
54461bc4c9
kernel: don't save allowlist in worker
2023-04-18 09:18:06 +08:00
tiann
8a5c94c368
kernel: Make sure logd has started before post-fs-data.
2023-04-15 00:17:28 +08:00
セリカ・シルフィル
4466f9f8a3
kernel: Fix pull when we are not currently on a branch ( #388 )
...
Before fix:
```
[celica@arch msm-5.4]$ curl -LSs "https://raw.githubusercontent.com/tiann/KernelSU/main/kernel/setup.sh " | bash -
++ pwd
+ GKI_ROOT=/home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4
+ echo '[+] GKI_ROOT: /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4'
[+] GKI_ROOT: /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4
+ test -d /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/common/drivers
+ test -d /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/drivers
+ DRIVER_DIR=/home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/drivers
+ test -d /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/KernelSU
+ cd /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/KernelSU
+ git stash
没有要保存的本地修改
+ git pull
您当前不在一个分支上。
请指定您要合并哪一个分支。
详见 git-pull(1)。
git pull <远程> <分支>
```
After fix:
```
[celica@arch msm-5.4]$ curl -LSs "https://raw.githubusercontent.com/natsumerinchan/KernelSU/main/kernel/setup.sh " | bash -s main
++ pwd
+ GKI_ROOT=/home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4
+ echo '[+] GKI_ROOT: /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4'
[+] GKI_ROOT: /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4
+ test -d /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/common/drivers
+ test -d /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/drivers
+ DRIVER_DIR=/home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/drivers
+ test -d /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/KernelSU
+ cd /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/KernelSU
+ git stash
没有要保存的本地修改
++ git status
++ grep -Po 'v\d+(\.\d+)*'
++ head -n1
+ '[' v0.5.2 ']'
+ git checkout main
之前的 HEAD 位置是 7bbb3bc ci: fix WSA upload path (#372 )
切换到分支 'main'
您的分支与上游分支 'origin/main' 一致。
+ git pull
已经是最新的。
+ '[' -z main ']'
+ git checkout main
已经位于 'main'
您的分支与上游分支 'origin/main' 一致。
+ cd /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4
+ echo '[+] GKI_ROOT: /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4'
[+] GKI_ROOT: /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4
+ echo '[+] Copy kernel su driver to /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/drivers'
[+] Copy kernel su driver to /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/drivers
+ test -e /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/drivers/kernelsu
+ echo '[+] Add kernel su driver to Makefile'
[+] Add kernel su driver to Makefile
+ DRIVER_MAKEFILE=/home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/drivers/Makefile
+ grep -q kernelsu /home/celica/workdir/mvaisakh-kernel/kernel/msm-5.4/drivers/Makefile
+ echo '[+] Done.'
[+] Done.
```
2023-04-14 15:31:30 +08:00
セリカ・シルフィル
d088d013ae
Kernel: Fix "bash: line 21: $1: unbound variable" ( #385 )
2023-04-13 22:15:17 +08:00
Coconut
524b83cfcd
Make Huawei 4.9 Kernel compiler Happy and Does not affect other kernels ( #374 )
...
Adapt to SELinux with Huawei 4.9.xxx kernel without affecting other
mainstream kernels
2023-04-13 17:08:05 +08:00
セリカ・シルフィル
bc532cf158
kernel: Support switch branch or tag ( #382 )
2023-04-13 14:40:56 +08:00