Fede2782
072021c322
Docs: add backport notice in module umount docs ( #1476 )
...
This aims to uniform the documentation since the official introduction
of pre-GKI modules umount feature
2024-03-19 15:41:22 +08:00
dabao1955
051e7e23e8
kernel: Use CONFIG_KSU=m to compile lkm ( #1468 )
...
before:
CONFIG_KSU=y
CONFIG_KSU_MODULE=y
after:
CONFIG_KSU=m
---------
Signed-off-by: dabao1955 <dabao1955@163.com >
Co-authored-by: weishu <twsxtd@gmail.com >
2024-03-19 15:40:38 +08:00
backslashxx
65bda4b5a8
fixup! Suggest non-gki kernel users to backport path_umount ( #1477 )
...
My bad.
as reported by @AzusaHana on tg

2024-03-19 15:39:54 +08:00
weishu
ae049019d6
kernel: support query working mode
2024-03-19 11:52:17 +08:00
weishu
68bee049a7
kernel: don't remove from sysfs when debug is enabled
2024-03-18 19:12:56 +08:00
weishu
85e2cd49c8
kernel: remove it from sysfs
2024-03-18 18:50:53 +08:00
Soo-Hwan Na
8a36c36e3e
kernel: Make it compile on 3.18 (maybe older) kernels ( #1460 )
...
input-event-codes.h:
Input: add input-event-codes header file
(f902dd8934 )
This was in 4.4-rc, so 4.4.0 or above has it else no.
aio.h:
fs: move struct kiocb to fs.h
(e2e40f2c1e )
Below this version, we need to explicitly include aio.h for struct kiocb
This was in 4.1-rc, so 4.0 or below should do the include
uaccess.h, sched.h was present for long times, but 4.10 splited out to
include/sched/ but the current ifdef is not including uaccess.h for
lower versions than 4.4. Fix it.
2024-03-18 13:13:00 +08:00
backslashxx
cbb215ea81
Suggest non-gki kernel users to backport path_umount ( #1464 )
...
Most kernel builders have to touch their kernel source code anyway, why
not also tell them to backport path_umount so even non-gki users can
benefit from this?
I know this might be a bit controversial as this will raise the barrier
of entry, but the benefits are just so high.
Idea was from OnlyTomInSecond on KernelSU group chat way back, and it
has been on the discussions for some time
references:
https://t.me/KernelSU_group/27237/176515
https://t.me/KernelSU_group/3249/184908
https://github.com/tiann/KernelSU/discussions/955#discussioncomment-7617166
03d233db8b
https://github.com/tiann/KernelSU/pull/1060
https://elixir.bootlin.com/linux/v5.9.1/source/fs/namespace.c#L1728
https://elixir.bootlin.com/linux/v5.10.9/source/fs/namespace.c#L1730
https://elixir.bootlin.com/linux/v6.5/source/fs/namespace.c#L1887
https://github.com/tiann/KernelSU/pull/1464#issuecomment-2002492107
Kernel side change examples
5.4
961d978862
4.19
164917f56d
4.14
c07c70a0c5
4.9
195f07593a
4.4
21ea33fe41
https://github.com/tiann/KernelSU/pull/1464#issuecomment-2002424069
ofcourse having someone on 3.18 confirm this will be nice.
**PROS**: umount modules for everyone
**CONS**: barrier of entry +1
---------
Co-authored-by: Christoph Hellwig <hch@lst.de >
Co-authored-by: Fede2782 <78815152+Fede2782@users.noreply.github.com >
Co-authored-by: Tom <31297720+onlytominsecond@users.noreply.github.com >
2024-03-18 10:27:31 +08:00
weishu
bb94ad6d4b
ci: Fix avd build ( #1457 )
2024-03-17 09:07:52 +08:00
Ylarod
3f5d6ca54a
Build KernelSU as LKM ( #1254 )
...
Co-authored-by: weishu <twsxtd@gmail.com >
2024-03-15 18:53:24 +08:00
Coconut
d5db694168
kernel:Compatible with devices based on Huawei EMUI10 ( #1447 )
...
EMUI 10 kernel version is 4.14.xxx.
The SELinux of Huawei's modified EMUI10 kernel is still similar to the
EMUI 9 version. This commit not support HarmonyOS 2 based EMUI 10.
2024-03-14 15:18:59 +08:00
Wang Han
9b254e8628
Guard a few logprint in prctl path with KSU_DEBUG ( #1402 )
2024-02-29 13:47:22 +08:00
weishu
cfc3e73c45
kernel: fix bazel build
2024-02-26 16:54:14 +08:00
weishu
09b6c219e9
kernel: Unshallow the repo in Makefile. close #1365
2024-02-26 12:23:51 +08:00
那年雪落
e6613bed72
kernel: Add back Makefile new line with posix compatible ( #1372 )
2024-02-23 16:55:22 +08:00
weishu
9e9ac672ef
kernel: Allow system_server to kill su process
2024-02-20 18:16:43 +08:00
weishu
8e06088f96
kernel: prevent become manager when failed. close #1328
2024-02-03 20:03:26 +08:00
weishu
eb5d503488
kernel: Add init selinux rules.
2024-01-15 20:28:53 +08:00
Ylarod
85caf41e97
kernel: fix secctx mem leak ( #1283 )
...
Co-authored-by: weishu <twsxtd@gmail.com >
2024-01-14 11:15:52 +08:00
weishu
802549d8cd
kernel: avoding umount when there isn't any module. close #556
2024-01-08 12:55:08 +08:00
Ylarod
cbf8f0aa2a
Try umount /sbin in kernel ( #1257 )
2024-01-06 08:59:30 +08:00
Ylarod
bf040afa64
Correctly handle is_ksu_domain, close #972 ( #1246 )
...
fix #972
2024-01-04 14:14:31 +08:00
weishu
2f3862b1cc
kernel: truncate allowlist before save
2023-12-29 18:32:45 +08:00
weishu
8197ddb359
kernel: fix out of bound reading. close #1227
2023-12-27 20:19:21 +08:00
weishu
e3a8bdaced
kernel: optimize uid list reading
2023-12-27 19:33:25 +08:00
Nullptr
c07b7d38a0
Mount temp dir at /debug_ramdisk ( #1226 )
2023-12-23 21:05:26 +08:00
The_second_Tom
108d618f53
kernel: adapt to kernel above 6.4 ( #1196 )
...
Above kernel 6.4, there is no struct_avc member in selinux_state.
2023-12-11 00:13:06 +08:00
weishu
d86c9cc9b6
kernel: Add mitigation to avoid placing manager in lib to bypass check
2023-12-08 14:48:49 +08:00
weishu
62117c6017
kernel: fix su not working in shell for 6.1 kernel
2023-11-13 15:06:25 +08:00
4qwerty7
d5985f7450
kernel: fix null pointer dereference for some case ( #1075 )
...
在 #973 __never_use_envp 被改名为 envp 并使用。
这导致 GKI 版本一旦代码运行到
[213](86dcb02f72/kernel/ksud.c (L213) )
行(或许只有 WSA 等类似情况会跑到这?),就会触发一个空指针解引用。
此PR意在修复此问题,且已在WSA上测试。
2023-10-24 07:00:52 +08:00
weishu
518c8a21b0
kernel: fix incorrect strcmp
2023-10-23 22:22:47 +08:00
weishu
4a5cdf25f1
Merge pull request from GHSA-86cp-3prf-pwqq
...
* kernel: deny v2 signature blocks with incorrect number
* kernel: reject v1 signature
* kernel: enforce manager package name at compile time
* kernel: don't specific package name in source code, use it in ci
2023-10-23 12:59:30 +08:00
kevios12
a6a4dd025d
kernel: fix Modules install stuck on kernel 4.4 ( #1059 )
2023-10-22 23:40:53 +08:00
weishu
86dcb02f72
kernel: make compiler happy
2023-10-21 22:43:58 +08:00
weishu
5c495a7e83
kernel: make su without any capabilities possible
2023-10-21 20:32:28 +08:00
weishu
6dd1b266e9
kernel: don't umount for non zygote child process. fixes #1054,#1049,#1045
2023-10-19 17:29:10 +08:00
weishu
8d3a873eeb
kernel: use strncpy and strncmp
2023-10-12 15:52:10 +08:00
weishu
165e450f4e
kernel: prune allowlist with package name and uid
2023-10-12 15:44:43 +08:00
weishu
aefcb9c980
kernel: ignore path that's not mountpoint
2023-10-12 14:24:41 +08:00
weishu
582d4978ac
kernel: reject v3 and v3.1 signature scheme for manager verification
2023-10-11 17:06:14 +08:00
weishu
02def78124
kernel: harden the signature check ( #1027 )
2023-10-11 02:53:11 -05:00
weishu
dfec5d5059
kernel: Add selinux rules for module umount
2023-10-09 18:09:54 +08:00
weishu
aca3ecebd9
kernel: umount modules mnt when needed. fix #991
2023-10-08 14:17:33 +08:00
longhuan1999
b14ea03dc4
kernel: Adapt to low version Android init process ( #973 )
...
1. Adapt to low version Android init process
2. Add stop hook output
3. Fix output with missing line breaks
2023-10-02 12:00:24 +08:00
Levi Zim
c8d0f01ce4
Copy one extra byte from userspace filename ( #958 )
...
Otherwise we will rewrite paths for filenames that begins with
`/system/bin/su`.
This fix copies one extra byte from userspace filename so that when we
encounter filenames like `/system/bin/suasf`,
`/system/bin/su\0` gets compared with `/system/bin/sua`, which correctly
prevents the `su -> sh` path rewriting.
Close #957
2023-09-16 12:23:04 +08:00
weishu
222b747c86
kernel: avoding select OVERLAY_FS becuase it may break GKI checks. fix
2023-08-28 01:06:44 +08:00
rhjdvsgsgks
a9d1e84762
kernel: fix build for gcc ( #873 )
...
current_cred() need this
2023-08-16 17:55:23 +08:00
Aquarius223
d4a9869b03
kernel: Fix commit e666e8ed in Linux 4.9.y and Linux 4.4.y builds ( #841 )
...
* linux/uaccess.h is also required on 4.4 and 4.9
-- KernelSU version: 11184
-- KernelSU Manager signature size: 0x033b
-- KernelSU Manager signature hash: 0xb0b91415
CC drivers/kernelsu/kernel_compat.o
../drivers/kernelsu/kernel_compat.c:159:9: error: use of undeclared
identifier 'USER_DS'
set_fs(USER_DS);
^
1 error generated.
make[4]: ***
[../scripts/Makefile.build:314:drivers/kernelsu/kernel_compat.o] 错误 1
make[3]: *** [../scripts/Makefile.build:599:drivers/kernelsu] 错误 2
Change-Id: I19598c62a3ae901049ea99ef878fa5c1a15201fd
Co-authored-by: stic-server-open <1138705738@qq.com >
2023-08-09 22:17:56 +08:00
weishu
a568eb9ae1
kernel: Fix compile err
2023-08-09 18:51:03 +08:00
weishu
e666e8ed0d
kernel: fix probe_kernel_read failed to read user addr
2023-08-09 18:37:30 +08:00