diff --git a/kernel/app_profile.c b/kernel/app_profile.c index 5876b456..81728225 100644 --- a/kernel/app_profile.c +++ b/kernel/app_profile.c @@ -62,7 +62,7 @@ static void setup_groups(struct root_profile *profile, struct cred *cred) put_group_info(group_info); } -static void disable_seccomp() +void disable_seccomp(void) { assert_spin_locked(¤t->sighand->siglock); // disable seccomp diff --git a/kernel/app_profile.h b/kernel/app_profile.h index 5390ecc4..871abb6f 100644 --- a/kernel/app_profile.h +++ b/kernel/app_profile.h @@ -65,4 +65,6 @@ void escape_with_root_profile(void); void escape_to_root_for_cmd_su(uid_t target_uid, pid_t target_pid); +void disable_seccomp(void); + #endif diff --git a/kernel/setuid_hook.c b/kernel/setuid_hook.c index 45dc68b0..874867df 100644 --- a/kernel/setuid_hook.c +++ b/kernel/setuid_hook.c @@ -41,6 +41,7 @@ #include "supercalls.h" #include "syscall_hook_manager.h" #include "kernel_umount.h" +#include "app_profile.h" #include "sulog.h" diff --git a/kernel/syscall_hook_manager.c b/kernel/syscall_hook_manager.c index 7c4bd9fd..79df3804 100644 --- a/kernel/syscall_hook_manager.c +++ b/kernel/syscall_hook_manager.c @@ -399,7 +399,7 @@ void ksu_syscall_hook_manager_init(void) #ifdef CONFIG_HAVE_SYSCALL_TRACEPOINTS ret = register_trace_sys_enter(ksu_sys_enter_handler, NULL); #ifndef CONFIG_KRETPROBES - unmark_all_process(); + ksu_unmark_all_process(); ksu_mark_running_process(); #endif if (ret) {