Commit Graph

389 Commits

Author SHA1 Message Date
weishu
d9a2356edc kernel: support xperms for sepolicy 2022-12-27 17:43:58 +07:00
weishu
f610e321d2 kernel: fix sepolicy db size incorrect 2022-12-27 15:55:54 +07:00
weishu
8f25280eef kernel: fix wrong args 2022-12-26 15:08:17 +07:00
Ylarod
ba1ae8d7ff 🚨 [kernel] remove warnings (#20) 2022-12-24 09:18:38 +08:00
tiann
ea9f71e262 kernel: fix path leak 2022-12-23 12:35:25 +07:00
weishu
64931d4ad1 kernel: improve manager validation 2022-12-23 11:47:27 +07:00
weishu
2bdd7c3868 kernel: fix compile err 2022-12-23 10:46:19 +07:00
weishu
6901464d3b kernel: version -> 5 2022-12-23 09:00:50 +07:00
weishu
e44b1c2a95 kernel: don't apply rules for permissive/disabled selinux 2022-12-23 08:59:57 +07:00
weishu
5f1d813635 kernel: add selinux rules for allowlist 2022-12-23 08:15:35 +07:00
weishu
dacf57f489 kernel: fix seccomp, this is actually a fix of previous commit 2022-12-22 22:20:12 +07:00
weishu
c17aed0d02 kernel: improve selinux for su context 2022-12-22 22:10:17 +07:00
weishu
24c2ddc206 kernel: fix seccomp. it may crash in https://elixir.bootlin.com/linux/v5.10.161/source/kernel/seccomp.c#L1079 2022-12-22 22:04:18 +07:00
Ylarod
b83d367388 💚 kernel: fix ci build (#16) 2022-12-22 09:53:45 +08:00
weishu
99ebc30c8f kernel: manager's parent must be zygote(uid=0) 2022-12-21 21:05:16 +07:00
weishu
fa4362ddd6 kernel: avoding other root process being kprobed 2022-12-21 20:50:55 +07:00
weishu
0563f6fa27 kernel: version -> 4 2022-12-21 19:19:07 +07:00
Huy Minh
7d5297c133 kernel: switch to syscall_work if CONFIG_GENERIC_ENTRY is enabled (#12)
From Kernel 5.11 it migrate to syscall_work instead of tif_*, so check for CONFIG_GENERIC_ENTRY and use syscall_work instead of TIF_SECCOMP

https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg2382193.html
2022-12-20 14:54:42 +08:00
SsageParuders
db153671c8 kernel: add ccflags (#11)
make `Mixing declarations and code is a C99 extension`  disappear
2022-12-20 14:04:14 +08:00
weishu
5ccaa58448 kernel: fix compile errors & warnings on android13-5.15 gki 2022-12-20 10:51:40 +07:00
SsageParuders
f15575cd57 need to import namespace (#7)
use some symbols, such as filp_open , from namespace VFS_internal_I_am_really_a_filesystem_and_am_NOT_a_driver, but does not import it
2022-12-20 10:21:57 +08:00
Huy Minh
fbfed68034 kernel: Include task_stack.h in sucompat.c (#6)
Fixed the following error when compiling

ld.lld: error: undefined symbol: task_stack_page
>>> referenced by ld-temp.o
>>>               vmlinux.o:(sh_user_path)
2022-12-19 20:38:20 +08:00
Nullptr
7194c7b3df Fix su file not found after su (#5) 2022-12-19 19:37:26 +08:00
Huy Minh
b1cad53f36 Kconfig : Make KSU depends on KPROBES (#4) 2022-12-19 18:19:58 +08:00
weishu
d69f760960 kernel: always disable seccomp 2022-12-19 17:14:38 +07:00
weishu
09f0b78c84 kernel: emit compile error when KPROBES disabled 2022-12-19 12:12:57 +07:00
weishu
bb91686c3c kernel: load_allow_list when /data prepared 2022-12-15 16:06:07 +07:00
Ylarod
fcafc23a01 Add ci for manager and userspace (#2)
* kernel: move EXPECTED_* macro to Makefile

* manager: add sign configs

* tools: add check_v2

* CI: build manager

* CI: build userspace
2022-12-15 12:22:43 +08:00
weishu
2ae0af7be6 kernel: fix free kmem err 2022-12-14 16:41:47 +07:00
weishu
ccf0675f8a kernel: fix memory leaks and x86_64 args 2022-12-14 16:26:53 +07:00
weishu
44af9c5d2b kernel: add su compat mode 2022-12-14 14:55:29 +07:00
weishu
84ebb6800a kernel: don't setenforce if kernel is already permissive 2022-12-12 22:19:17 +07:00
weishu
facd3d90f2 kernel: support x86_64 2022-12-12 13:51:09 +07:00
weishu
5fd16bd7cf kernel: fix selinux when load/save allowlist 2022-12-12 13:50:47 +07:00
weishu
b1a33f869b kernel: make allowlist available cross boot 2022-12-12 11:17:51 +07:00
weishu
c7af4720fc kernel: fmt 2022-12-11 22:00:44 +07:00
weishu
e1954ea5d5 misc: add kernel setup script 2022-12-10 22:43:21 +07:00
tiann
a860e208d6 kernel: use release sign 2022-12-10 22:13:38 +08:00
tiann
2f6031ad67 Init 2022-12-09 22:04:40 +08:00