Commit Graph

9 Commits

Author SHA1 Message Date
weishu
bacd16a68c kernel: support setting selinux context for profile 2023-06-06 16:35:25 +08:00
6b9cb3401f selinux: use grep to check api supports (#402)
This checks `selinux_state` and `current_sid` supports in a raw way.
Feels more reliable than the version checks.

Supersedes #401, fixes #280, fixes #400.
2023-04-20 15:22:03 +08:00
Ylarod
3d07b7285b kernel: refact (#113)
* refact

* sort inlude

* update

* unregister execve kprobe

* update log

* don't unregister if not in kprobe

* opt for no kprobe

* opt for no kprobe

* stop debug

* don't forget to call ksu_uid_observer_exit

* rename core to core_hook

* direct call do_persistent_allow_list

* add prefix

* use getter, add warn

* add wrapper

* run clang-format

clang-format --style="{BasedOnStyle: InheritParentConfig, SortIncludes: true}" -i kernel/**/*.[ch]

* try fix wsa x64 build
2023-01-25 21:53:19 +08:00
Ylarod
ba1ae8d7ff 🚨 [kernel] remove warnings (#20) 2022-12-24 09:18:38 +08:00
weishu
c17aed0d02 kernel: improve selinux for su context 2022-12-22 22:10:17 +07:00
weishu
fa4362ddd6 kernel: avoding other root process being kprobed 2022-12-21 20:50:55 +07:00
weishu
84ebb6800a kernel: don't setenforce if kernel is already permissive 2022-12-12 22:19:17 +07:00
weishu
b1a33f869b kernel: make allowlist available cross boot 2022-12-12 11:17:51 +07:00
tiann
2f6031ad67 Init 2022-12-09 22:04:40 +08:00