Commit Graph

9 Commits

Author SHA1 Message Date
weishu
53be8612c8 kernel: support setting selinux context for profile 2023-06-06 16:35:25 +08:00
3452841752 selinux: use grep to check api supports (#402)
This checks `selinux_state` and `current_sid` supports in a raw way.
Feels more reliable than the version checks.

Supersedes #401, fixes #280, fixes #400.
2023-04-20 15:22:03 +08:00
Ylarod
2f970f7ab8 kernel: refact (#113)
* refact

* sort inlude

* update

* unregister execve kprobe

* update log

* don't unregister if not in kprobe

* opt for no kprobe

* opt for no kprobe

* stop debug

* don't forget to call ksu_uid_observer_exit

* rename core to core_hook

* direct call do_persistent_allow_list

* add prefix

* use getter, add warn

* add wrapper

* run clang-format

clang-format --style="{BasedOnStyle: InheritParentConfig, SortIncludes: true}" -i kernel/**/*.[ch]

* try fix wsa x64 build
2023-01-25 21:53:19 +08:00
Ylarod
4c9942dd3f 🚨 [kernel] remove warnings (#20) 2022-12-24 09:18:38 +08:00
weishu
3196731545 kernel: improve selinux for su context 2022-12-22 22:10:17 +07:00
weishu
9aacf2a64d kernel: avoding other root process being kprobed 2022-12-21 20:50:55 +07:00
weishu
280660125f kernel: don't setenforce if kernel is already permissive 2022-12-12 22:19:17 +07:00
weishu
820d84e512 kernel: make allowlist available cross boot 2022-12-12 11:17:51 +07:00
tiann
51c84400cf Init 2022-12-09 22:04:40 +08:00