weishu
5e64eee624
kernel: Fix execve filename access on ARM64
2025-11-27 19:12:10 +08:00
5ec1cff
04ca981e4d
kernel: no need to remark process on post-fs-data and boot-completed
...
- Remark on post-fs-data may unmark zygote unexpectedly, and there is no
necessity to remark on these stages, so simply remove them.
2025-11-15 17:27:48 +08:00
5ec1cff
9f869090d2
kernel: refine syscall_hook_manager
...
- Don't unmark process when setuid if syscall tracepoint is in use
- Remark process when app profile updated
- Ensure zygote is marked on first boot
2025-11-13 20:09:32 +08:00
ShirkNeko
7be8c15b85
kernel: Remove redundant ksu_handle_inode_permission hooks, calling only for manual_su
2025-11-13 15:02:20 +08:00
ShirkNeko
cda7e4c6c0
Clean up kernel code ( #2898 )
...
1) Fix memory leak of callback head in allowlist.c
2) Remove duplicated logic and incorrect log in kernel_umount.c
3) Prevent sleep in kprobe context in ksud.c
4) Remove useless is_unsupported_uid, use euid for security enhance,
add FIXME in setuid_hook.c
5) Remove useless fd argument for execve hook, fix incorrent pointer
usage in syscall_hook_manager.c and sucompat.c
6) Use correct errno in supercalls.c
---------
Co-authored-by: Ylarod <me@ylarod.cn >
2025-11-09 19:20:30 +08:00
ShirkNeko
184467c691
kernel: Undo some changes
2025-11-09 16:09:59 +08:00
ShirkNeko
05ed1a3714
fix build
2025-11-09 14:17:27 +08:00
ShirkNeko
163531fcd2
kernel: Simplify state management logic
2025-11-09 14:07:40 +08:00
ShirkNeko
049956aaa9
Fixes only hook in LKM mode __NR_newfstatat ,__NR_faccessat ,__NR_execve system calls
2025-11-09 12:16:23 +08:00
ShirkNeko
88135d8363
Attempt to refactor and migrate inode_permission, bprm_check_security, and task_alloc entirely to syscall_hook_manager
2025-11-09 02:52:46 +08:00
ShirkNeko
548258f922
kernel: Rewrite the kernel source code ( #554 )
...
* clean unused header
* on_module_mounted in ksud.c
* refact: use app_profile
* unified hook manager
* add zygote to hook target
* move reboot hook to supercall.c
* refactor: kernel_umount setuid_hook
* update mark rules, add init mark tracker
* remove reboot from check_syscall_fastpath
* update setuid_hook, remove uneeded sucompat enable
* log freely
* kernel: Migrate kprobe hook configuration items
* kernel: fix build
* cli: add ksud debug mark
* Fix rustfmt warning
---------
Co-authored-by: Ylarod <me@ylarod.cn >
Co-authored-by: Wang Han <416810799@qq.com >
Co-authored-by: ShirkNeko <109797057+ShirkNeko@users.noreply.github.com >
2025-11-09 01:14:26 +08:00
