kernel: use library import

This commit is contained in:
weishu
2024-04-27 09:55:16 +08:00
parent 0be7846f9d
commit efbc07fde3
20 changed files with 171 additions and 148 deletions

View File

@@ -1,17 +1,17 @@
#include "ksu.h" #include <linux/compiler.h>
#include "linux/compiler.h" #include <linux/fs.h>
#include "linux/fs.h" #include <linux/gfp.h>
#include "linux/gfp.h" #include <linux/kernel.h>
#include "linux/kernel.h" #include <linux/list.h>
#include "linux/list.h" #include <linux/printk.h>
#include "linux/printk.h" #include <linux/slab.h>
#include "linux/slab.h" #include <linux/types.h>
#include "linux/types.h" #include <linux/version.h>
#include "linux/version.h"
#if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 14, 0) #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 14, 0)
#include "linux/compiler_types.h" #include <linux/compiler_types.h>
#endif #endif
#include "ksu.h"
#include "klog.h" // IWYU pragma: keep #include "klog.h" // IWYU pragma: keep
#include "selinux/selinux.h" #include "selinux/selinux.h"
#include "kernel_compat.h" #include "kernel_compat.h"

View File

@@ -1,7 +1,7 @@
#ifndef __KSU_H_ALLOWLIST #ifndef __KSU_H_ALLOWLIST
#define __KSU_H_ALLOWLIST #define __KSU_H_ALLOWLIST
#include "linux/types.h" #include <linux/types.h>
#include "ksu.h" #include "ksu.h"
void ksu_allowlist_init(void); void ksu_allowlist_init(void);

View File

@@ -1,21 +1,23 @@
#include "linux/err.h" #include <linux/err.h>
#include "linux/fs.h" #include <linux/fs.h>
#include "linux/gfp.h" #include <linux/gfp.h>
#include "linux/kernel.h" #include <linux/kernel.h>
#include "linux/moduleparam.h" #include <linux/slab.h>
#include <linux/version.h>
#ifdef CONFIG_KSU_DEBUG
#include <linux/moduleparam.h>
#endif
#include <crypto/hash.h>
#if LINUX_VERSION_CODE >= KERNEL_VERSION(5, 11, 0)
#include <crypto/sha2.h>
#else
#include <crypto/sha.h>
#endif
#include "apk_sign.h" #include "apk_sign.h"
#include "klog.h" // IWYU pragma: keep #include "klog.h" // IWYU pragma: keep
#include "kernel_compat.h" #include "kernel_compat.h"
#include "crypto/hash.h"
#include "linux/slab.h"
#include "linux/version.h"
#if LINUX_VERSION_CODE >= KERNEL_VERSION(5, 11, 0)
#include "crypto/sha2.h"
#else
#include "crypto/sha.h"
#endif
struct sdesc { struct sdesc {
struct shash_desc shash; struct shash_desc shash;
@@ -307,8 +309,8 @@ static struct kernel_param_ops expected_size_ops = {
.get = param_get_uint, .get = param_get_uint,
}; };
module_param_cb(ksu_debug_manager_uid, &expected_size_ops, &ksu_debug_manager_uid, module_param_cb(ksu_debug_manager_uid, &expected_size_ops,
S_IRUSR | S_IWUSR); &ksu_debug_manager_uid, S_IRUSR | S_IWUSR);
#endif #endif

View File

@@ -1,7 +1,7 @@
#ifndef __KSU_H_APK_V2_SIGN #ifndef __KSU_H_APK_V2_SIGN
#define __KSU_H_APK_V2_SIGN #define __KSU_H_APK_V2_SIGN
#include "linux/types.h" #include <linux/types.h>
bool is_manager_apk(char *path); bool is_manager_apk(char *path);

View File

@@ -1,7 +1,7 @@
#ifndef __KSU_H_ARCH #ifndef __KSU_H_ARCH
#define __KSU_H_ARCH #define __KSU_H_ARCH
#include "linux/version.h" #include <linux/version.h>
#if defined(__aarch64__) #if defined(__aarch64__)

View File

@@ -1,32 +1,36 @@
#include "linux/capability.h" #include <linux/capability.h>
#include "linux/cred.h" #include <linux/cred.h>
#include "linux/dcache.h" #include <linux/dcache.h>
#include "linux/err.h" #include <linux/err.h>
#include "linux/init.h" #include <linux/init.h>
#include "linux/init_task.h" #include <linux/init_task.h>
#include "linux/irqflags.h" #include <linux/kallsyms.h>
#include "linux/kallsyms.h" #include <linux/kernel.h>
#include "linux/kernel.h" #include <linux/kprobes.h>
#include "linux/kprobes.h" #include <linux/lsm_hooks.h>
#include "linux/list.h" #include <linux/mm.h>
#include "linux/lsm_hooks.h" #include <linux/nsproxy.h>
#include "linux/mm.h" #include <linux/path.h>
#include "linux/mm_types.h" #include <linux/printk.h>
#include "linux/nsproxy.h" #include <linux/sched.h>
#include "linux/path.h" #include <linux/security.h>
#include "linux/printk.h" #include <linux/stddef.h>
#include "linux/sched.h" #include <linux/types.h>
#include "linux/security.h" #include <linux/uaccess.h>
#include "linux/stddef.h" #include <linux/uidgid.h>
#include "linux/types.h" #include <linux/version.h>
#include "linux/uaccess.h" #include <linux/mount.h>
#include "linux/uidgid.h"
#include "linux/version.h"
#include "linux/mount.h"
#include "linux/fs.h" #include <linux/fs.h>
#include "linux/namei.h" #include <linux/namei.h>
#include "linux/rcupdate.h"
#ifdef MODULE
#include <linux/list.h>
#include <linux/irqflags.h>
#include <linux/mm_types.h>
#include <linux/rcupdate.h>
#include <linux/vmalloc.h>
#endif
#include "allowlist.h" #include "allowlist.h"
#include "arch.h" #include "arch.h"
@@ -34,7 +38,6 @@
#include "klog.h" // IWYU pragma: keep #include "klog.h" // IWYU pragma: keep
#include "ksu.h" #include "ksu.h"
#include "ksud.h" #include "ksud.h"
#include "linux/vmalloc.h"
#include "manager.h" #include "manager.h"
#include "selinux/selinux.h" #include "selinux/selinux.h"
#include "throne_tracker.h" #include "throne_tracker.h"

View File

@@ -1,7 +1,7 @@
#ifndef __KSU_H_KSU_CORE #ifndef __KSU_H_KSU_CORE
#define __KSU_H_KSU_CORE #define __KSU_H_KSU_CORE
#include "linux/init.h" #include <linux/init.h>
void __init ksu_core_init(void); void __init ksu_core_init(void);
void ksu_core_exit(void); void ksu_core_exit(void);

View File

@@ -1,8 +1,8 @@
#ifndef __KSU_H_KSHOOK #ifndef __KSU_H_KSHOOK
#define __KSU_H_KSHOOK #define __KSU_H_KSHOOK
#include "linux/fs.h" #include <linux/fs.h>
#include "linux/types.h" #include <linux/types.h>
// For sucompat // For sucompat

View File

@@ -1,19 +1,19 @@
#include "linux/version.h" #include <linux/version.h>
#include "linux/fs.h" #include <linux/fs.h>
#include "linux/nsproxy.h" #include <linux/nsproxy.h>
#if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 10, 0) #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 10, 0)
#include "linux/sched/task.h" #include <linux/sched/task.h>
#else #else
#include "linux/sched.h" #include <linux/sched.h>
#endif #endif
#include "linux/uaccess.h" #include <linux/uaccess.h>
#include "klog.h" // IWYU pragma: keep #include "klog.h" // IWYU pragma: keep
#include "kernel_compat.h" // Add check Huawei Device #include "kernel_compat.h" // Add check Huawei Device
#if LINUX_VERSION_CODE < KERNEL_VERSION(4, 10, 0) || defined(CONFIG_IS_HW_HISI) #if LINUX_VERSION_CODE < KERNEL_VERSION(4, 10, 0) || defined(CONFIG_IS_HW_HISI)
#include "linux/key.h" #include <linux/key.h>
#include "linux/errno.h" #include <linux/errno.h>
#include "linux/cred.h" #include <linux/cred.h>
struct key *init_session_keyring = NULL; struct key *init_session_keyring = NULL;
static inline int install_session_keyring(struct key *keyring) static inline int install_session_keyring(struct key *keyring)

View File

@@ -1,10 +1,10 @@
#ifndef __KSU_H_KERNEL_COMPAT #ifndef __KSU_H_KERNEL_COMPAT
#define __KSU_H_KERNEL_COMPAT #define __KSU_H_KERNEL_COMPAT
#include "linux/fs.h" #include <linux/fs.h>
#include "linux/key.h" #include <linux/version.h>
#include "linux/version.h"
#include "ss/policydb.h" #include "ss/policydb.h"
#include "linux/key.h"
/* /*
* Adapt to Huawei HISI kernel without affecting other kernels , * Adapt to Huawei HISI kernel without affecting other kernels ,

View File

@@ -1,8 +1,8 @@
#include "linux/export.h" #include <linux/export.h>
#include "linux/fs.h" #include <linux/fs.h>
#include "linux/kobject.h" #include <linux/kobject.h>
#include "linux/module.h" #include <linux/module.h>
#include "linux/workqueue.h" #include <linux/workqueue.h>
#include "allowlist.h" #include "allowlist.h"
#include "arch.h" #include "arch.h"

View File

@@ -1,8 +1,8 @@
#ifndef __KSU_H_KSU #ifndef __KSU_H_KSU
#define __KSU_H_KSU #define __KSU_H_KSU
#include "linux/types.h" #include <linux/types.h>
#include "linux/workqueue.h" #include <linux/workqueue.h>
#define KERNEL_SU_VERSION KSU_VERSION #define KERNEL_SU_VERSION KSU_VERSION
#define KERNEL_SU_OPTION 0xDEADBEEF #define KERNEL_SU_OPTION 0xDEADBEEF

View File

@@ -1,25 +1,24 @@
#include "asm/current.h" #include <asm/current.h>
#include "linux/compat.h" #include <linux/compat.h>
#include "linux/cred.h" #include <linux/cred.h>
#include "linux/dcache.h" #include <linux/dcache.h>
#include "linux/err.h" #include <linux/err.h>
#include "linux/file.h" #include <linux/file.h>
#include "linux/fs.h" #include <linux/fs.h>
#include "linux/version.h" #include <linux/version.h>
#if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 4, 0) #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 4, 0)
#include "linux/input-event-codes.h" #include <linux/input-event-codes.h>
#else #else
#include "uapi/linux/input.h" #include <uapi/linux/input.h>
#endif #endif
#if LINUX_VERSION_CODE < KERNEL_VERSION(4, 1, 0) #if LINUX_VERSION_CODE < KERNEL_VERSION(4, 1, 0)
#include "linux/aio.h" #include <linux/aio.h>
#endif #endif
#include "linux/kprobes.h" #include <linux/kprobes.h>
#include "linux/printk.h" #include <linux/printk.h>
#include "linux/types.h" #include <linux/types.h>
#include "linux/uaccess.h" #include <linux/uaccess.h>
#include "linux/version.h" #include <linux/workqueue.h>
#include "linux/workqueue.h"
#include "allowlist.h" #include "allowlist.h"
#include "arch.h" #include "arch.h"
@@ -150,7 +149,8 @@ static int __maybe_unused count(struct user_arg_ptr argv, int max)
// IMPORTANT NOTE: the call from execve_handler_pre WON'T provided correct value for envp and flags in GKI version // IMPORTANT NOTE: the call from execve_handler_pre WON'T provided correct value for envp and flags in GKI version
int ksu_handle_execveat_ksud(int *fd, struct filename **filename_ptr, int ksu_handle_execveat_ksud(int *fd, struct filename **filename_ptr,
struct user_arg_ptr *argv, struct user_arg_ptr *envp, int *flags) struct user_arg_ptr *argv,
struct user_arg_ptr *envp, int *flags)
{ {
#ifndef CONFIG_KPROBES #ifndef CONFIG_KPROBES
if (!ksu_execveat_hook) { if (!ksu_execveat_hook) {
@@ -177,7 +177,8 @@ int ksu_handle_execveat_ksud(int *fd, struct filename **filename_ptr,
} }
if (unlikely(!memcmp(filename->name, system_bin_init, if (unlikely(!memcmp(filename->name, system_bin_init,
sizeof(system_bin_init) - 1) && argv)) { sizeof(system_bin_init) - 1) &&
argv)) {
// /system/bin/init executed // /system/bin/init executed
int argc = count(*argv, MAX_ARG_STRINGS); int argc = count(*argv, MAX_ARG_STRINGS);
pr_info("/system/bin/init argc: %d\n", argc); pr_info("/system/bin/init argc: %d\n", argc);
@@ -185,8 +186,10 @@ int ksu_handle_execveat_ksud(int *fd, struct filename **filename_ptr,
const char __user *p = get_user_arg_ptr(*argv, 1); const char __user *p = get_user_arg_ptr(*argv, 1);
if (p && !IS_ERR(p)) { if (p && !IS_ERR(p)) {
char first_arg[16]; char first_arg[16];
ksu_strncpy_from_user_nofault(first_arg, p, sizeof(first_arg)); ksu_strncpy_from_user_nofault(
pr_info("/system/bin/init first arg: %s\n", first_arg); first_arg, p, sizeof(first_arg));
pr_info("/system/bin/init first arg: %s\n",
first_arg);
if (!strcmp(first_arg, "second_stage")) { if (!strcmp(first_arg, "second_stage")) {
pr_info("/system/bin/init second_stage executed\n"); pr_info("/system/bin/init second_stage executed\n");
apply_kernelsu_rules(); apply_kernelsu_rules();
@@ -198,7 +201,8 @@ int ksu_handle_execveat_ksud(int *fd, struct filename **filename_ptr,
} }
} }
} else if (unlikely(!memcmp(filename->name, old_system_init, } else if (unlikely(!memcmp(filename->name, old_system_init,
sizeof(old_system_init) - 1) && argv)) { sizeof(old_system_init) - 1) &&
argv)) {
// /init executed // /init executed
int argc = count(*argv, MAX_ARG_STRINGS); int argc = count(*argv, MAX_ARG_STRINGS);
pr_info("/init argc: %d\n", argc); pr_info("/init argc: %d\n", argc);
@@ -207,7 +211,8 @@ int ksu_handle_execveat_ksud(int *fd, struct filename **filename_ptr,
const char __user *p = get_user_arg_ptr(*argv, 1); const char __user *p = get_user_arg_ptr(*argv, 1);
if (p && !IS_ERR(p)) { if (p && !IS_ERR(p)) {
char first_arg[16]; char first_arg[16];
ksu_strncpy_from_user_nofault(first_arg, p, sizeof(first_arg)); ksu_strncpy_from_user_nofault(
first_arg, p, sizeof(first_arg));
pr_info("/init first arg: %s\n", first_arg); pr_info("/init first arg: %s\n", first_arg);
if (!strcmp(first_arg, "--second-stage")) { if (!strcmp(first_arg, "--second-stage")) {
pr_info("/init second_stage executed\n"); pr_info("/init second_stage executed\n");
@@ -224,13 +229,15 @@ int ksu_handle_execveat_ksud(int *fd, struct filename **filename_ptr,
if (envc > 0) { if (envc > 0) {
int n; int n;
for (n = 1; n <= envc; n++) { for (n = 1; n <= envc; n++) {
const char __user *p = get_user_arg_ptr(*envp, n); const char __user *p =
get_user_arg_ptr(*envp, n);
if (!p || IS_ERR(p)) { if (!p || IS_ERR(p)) {
continue; continue;
} }
char env[256]; char env[256];
// Reading environment variable strings from user space // Reading environment variable strings from user space
if (ksu_strncpy_from_user_nofault(env, p, sizeof(env)) < 0) if (ksu_strncpy_from_user_nofault(
env, p, sizeof(env)) < 0)
continue; continue;
// Parsing environment variable names and values // Parsing environment variable names and values
char *env_name = env; char *env_name = env;
@@ -241,10 +248,14 @@ int ksu_handle_execveat_ksud(int *fd, struct filename **filename_ptr,
*env_value = '\0'; *env_value = '\0';
env_value++; env_value++;
// Check if the environment variable name and value are matching // Check if the environment variable name and value are matching
if (!strcmp(env_name, "INIT_SECOND_STAGE") && (!strcmp(env_value, "1") || !strcmp(env_value, "true"))) { if (!strcmp(env_name,
"INIT_SECOND_STAGE") &&
(!strcmp(env_value, "1") ||
!strcmp(env_value, "true"))) {
pr_info("/init second_stage executed\n"); pr_info("/init second_stage executed\n");
apply_kernelsu_rules(); apply_kernelsu_rules();
init_second_stage_executed = true; init_second_stage_executed =
true;
ksu_android_ns_fs_check(); ksu_android_ns_fs_check();
} }
} }
@@ -252,10 +263,11 @@ int ksu_handle_execveat_ksud(int *fd, struct filename **filename_ptr,
} }
} }
if (unlikely(first_app_process && if (unlikely(first_app_process && !memcmp(filename->name, app_process,
!memcmp(filename->name, app_process, sizeof(app_process) - 1))) { sizeof(app_process) - 1))) {
first_app_process = false; first_app_process = false;
pr_info("exec app_process, /data prepared, second_stage: %d\n", init_second_stage_executed); pr_info("exec app_process, /data prepared, second_stage: %d\n",
init_second_stage_executed);
on_post_fs_data(); // we keep this for old ksud on_post_fs_data(); // we keep this for old ksud
stop_execve_hook(); stop_execve_hook();
} }
@@ -274,7 +286,8 @@ static ssize_t read_proxy(struct file *file, char __user *buf, size_t count,
bool first_read = file->f_pos == 0; bool first_read = file->f_pos == 0;
ssize_t ret = orig_read(file, buf, count, pos); ssize_t ret = orig_read(file, buf, count, pos);
if (first_read) { if (first_read) {
pr_info("read_proxy append %ld + %ld\n", ret, read_count_append); pr_info("read_proxy append %ld + %ld\n", ret,
read_count_append);
ret += read_count_append; ret += read_count_append;
} }
return ret; return ret;
@@ -386,7 +399,8 @@ int ksu_handle_vfs_read(struct file **file_ptr, char __user **buf_ptr,
return 0; return 0;
} }
int ksu_handle_sys_read(unsigned int fd, char __user **buf_ptr, size_t *count_ptr) int ksu_handle_sys_read(unsigned int fd, char __user **buf_ptr,
size_t *count_ptr)
{ {
struct file *file = fget(fd); struct file *file = fget(fd);
if (!file) { if (!file) {
@@ -475,7 +489,8 @@ static int execve_handler_pre(struct kprobe *p, struct pt_regs *regs)
static int sys_execve_handler_pre(struct kprobe *p, struct pt_regs *regs) static int sys_execve_handler_pre(struct kprobe *p, struct pt_regs *regs)
{ {
struct pt_regs *real_regs = PT_REAL_REGS(regs); struct pt_regs *real_regs = PT_REAL_REGS(regs);
const char __user **filename_user = (const char **)&PT_REGS_PARM1(real_regs); const char __user **filename_user =
(const char **)&PT_REGS_PARM1(real_regs);
const char __user *const __user *__argv = const char __user *const __user *__argv =
(const char __user *const __user *)PT_REGS_PARM2(real_regs); (const char __user *const __user *)PT_REGS_PARM2(real_regs);
struct user_arg_ptr argv = { .ptr.native = __argv }; struct user_arg_ptr argv = { .ptr.native = __argv };
@@ -495,7 +510,8 @@ static int sys_execve_handler_pre(struct kprobe *p, struct pt_regs *regs)
} }
// remove this later! // remove this later!
__maybe_unused static int vfs_read_handler_pre(struct kprobe *p, struct pt_regs *regs) __maybe_unused static int vfs_read_handler_pre(struct kprobe *p,
struct pt_regs *regs)
{ {
struct file **file_ptr = (struct file **)&PT_REGS_PARM1(regs); struct file **file_ptr = (struct file **)&PT_REGS_PARM1(regs);
char __user **buf_ptr = (char **)&PT_REGS_PARM2(regs); char __user **buf_ptr = (char **)&PT_REGS_PARM2(regs);
@@ -559,7 +575,6 @@ static struct kprobe input_event_kp = {
.pre_handler = input_handle_event_handler_pre, .pre_handler = input_handle_event_handler_pre,
}; };
static void do_stop_vfs_read_hook(struct work_struct *work) static void do_stop_vfs_read_hook(struct work_struct *work)
{ {
unregister_kprobe(&vfs_read_kp); unregister_kprobe(&vfs_read_kp);
@@ -635,7 +650,8 @@ void ksu_ksud_init()
#endif #endif
} }
void ksu_ksud_exit() { void ksu_ksud_exit()
{
#ifdef CONFIG_KPROBES #ifdef CONFIG_KPROBES
unregister_kprobe(&execve_kp); unregister_kprobe(&execve_kp);
// this should be done before unregister vfs_read_kp // this should be done before unregister vfs_read_kp

View File

@@ -1,6 +1,8 @@
#ifndef __KSU_H_KSUD #ifndef __KSU_H_KSUD
#define __KSU_H_KSUD #define __KSU_H_KSUD
#include <linux/types.h>
#define KSUD_PATH "/data/adb/ksud" #define KSUD_PATH "/data/adb/ksud"
void on_post_fs_data(void); void on_post_fs_data(void);

View File

@@ -1,8 +1,8 @@
#ifndef __KSU_H_KSU_MANAGER #ifndef __KSU_H_KSU_MANAGER
#define __KSU_H_KSU_MANAGER #define __KSU_H_KSU_MANAGER
#include "linux/cred.h" #include <linux/cred.h>
#include "linux/types.h" #include <linux/types.h>
#define KSU_INVALID_UID -1 #define KSU_INVALID_UID -1

View File

@@ -1,6 +1,6 @@
#include "linux/uaccess.h" #include <linux/uaccess.h>
#include "linux/types.h" #include <linux/types.h>
#include "linux/version.h" #include <linux/version.h>
#include "../klog.h" // IWYU pragma: keep #include "../klog.h" // IWYU pragma: keep
#include "selinux.h" #include "selinux.h"

View File

@@ -1,9 +1,9 @@
#include "sepolicy.h" #include <linux/gfp.h>
#include "linux/gfp.h" #include <linux/printk.h>
#include "linux/printk.h" #include <linux/slab.h>
#include "linux/slab.h" #include <linux/version.h>
#include "linux/version.h"
#include "sepolicy.h"
#include "../klog.h" // IWYU pragma: keep #include "../klog.h" // IWYU pragma: keep
#include "ss/symtab.h" #include "ss/symtab.h"
#include "../kernel_compat.h" // Add check Huawei Device #include "../kernel_compat.h" // Add check Huawei Device

View File

@@ -1,7 +1,7 @@
#ifndef __KSU_H_SEPOLICY #ifndef __KSU_H_SEPOLICY
#define __KSU_H_SEPOLICY #define __KSU_H_SEPOLICY
#include "linux/types.h" #include <linux/types.h>
#include "ss/policydb.h" #include "ss/policydb.h"

View File

@@ -1,15 +1,15 @@
#include "asm/current.h" #include <asm/current.h>
#include "linux/cred.h" #include <linux/cred.h>
#include "linux/err.h" #include <linux/err.h>
#include "linux/fs.h" #include <linux/fs.h>
#include "linux/kprobes.h" #include <linux/kprobes.h>
#include "linux/types.h" #include <linux/types.h>
#include "linux/uaccess.h" #include <linux/uaccess.h>
#include "linux/version.h" #include <linux/version.h>
#if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 11, 0) #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 11, 0)
#include "linux/sched/task_stack.h" #include <linux/sched/task_stack.h>
#else #else
#include "linux/sched.h" #include <linux/sched.h>
#endif #endif
#include "allowlist.h" #include "allowlist.h"

View File

@@ -1,11 +1,11 @@
#include "linux/err.h" #include <linux/err.h>
#include "linux/fs.h" #include <linux/fs.h>
#include "linux/list.h" #include <linux/list.h>
#include "linux/slab.h" #include <linux/slab.h>
#include "linux/string.h" #include <linux/string.h>
#include "linux/types.h" #include <linux/types.h>
#include "linux/version.h" #include <linux/version.h>
#include "linux/workqueue.h" #include <linux/workqueue.h>
#include "allowlist.h" #include "allowlist.h"
#include "klog.h" // IWYU pragma: keep #include "klog.h" // IWYU pragma: keep