Faris
29c6e2dbcc
kernel, ksud: clean headers and add fd wrapper for devpts ( #193 )
...
* Now Official KernelSU devpts compat is questionable
Squashed commits:
4893fad235
e7c3d4a6a6
4bb2dae3f5
Signed-off-by: Faris <rissu.ntk@gmail.com >
Co-authored-by: 5ec1cff <56485584+5ec1cff@users.noreply.github.com >
Co-authored-by: weishu <twsxtd@gmail.com >
Co-authored-by: backslashxx <118538522+backslashxx@users.noreply.github.com >
2025-11-08 12:08:54 +08:00
ShirkNeko
68f3be2cbe
kernel, ksud, manager: New supercalls implementations
...
* This commit squashes new supercall impl:
3138651a38..562a3b9be7
Thanks to these people below:
Official KernelSU:
Co-authored-by: Wang Han <416810799@qq.com >
Co-authored-by: weishu <twsxtd@gmail.com >
Co-authored-by: Ylarod <me@ylarod.cn >
Co-authored-by: YuKongA <70465933+YuKongA@users.noreply.github.com >
xxKSU maintainer:
Co-authored-by: backslashxx <118538522+backslashxx@users.noreply.github.com >
MMRL maintainer:
Co-authored-by: Der_Googler <54764558+dergoogler@users.noreply.github.com >
KSUN maintainer:
Co-authored-by: Rifat Azad <33044977+rifsxd@users.noreply.github.com >
KOWSU maintainer:
Co-authored-by: KOWX712 <leecc0503@gmail.com >
2025-11-06 03:54:44 +08:00
Huy Minh
fd8e3c35bb
kernel: add initial 6.8+/6.14 kernel support
...
* This is a squashed of un-merged pull requests of Official KernelSU
* LKM support are not available.
* Require this additional patch to avoid kernel panic because of "Too many LSMs registered":
7042991a5c
* Un-merged pull requests of Official KernelSU:
https://github.com/tiann/KernelSU/pull/1785
https://github.com/tiann/KernelSU/pull/2662
* This commit probably not 100% completed.
Signed-off-by: rsuntk <rsuntk@yukiprjkt.my.id >
2025-10-07 16:47:46 +08:00
rsuntk
1294bbe853
kernel: fix -Wstrict-prototypes warnings/errors
...
* On newer kernel for some reason -Wno-strict-prototypes still does not fix the errors or warnings.
* To fix it, we just need to add void type.
Signed-off-by: rsuntk <rsuntk@yukiprjkt.my.id >
2025-09-02 14:51:06 +08:00
Helium_Studio
ce58519e66
kernel: Reformat code using clang-format ( #347 )
...
* The coding format is too messy, reformat to improve readability
and get closer to Linux kernel coding style.
* While at it, update .clang-format file to linux-mainline state.
2025-08-22 14:02:20 +08:00
rsuntk
deed7a7903
kernel: move some defs to single file
...
* Much cleaner code, although setenforce is not used anymore
* Guard is_ksu_transition only for 4.19 and under.
Signed-off-by: rsuntk <rsuntk@yukiprjkt.my.id >
2025-08-16 12:44:41 +08:00
rsuntk
ae475cba67
kernel: selinux: expose is_ksu_transition to all linux version
...
* Allow newer kernel to use is_ksu_transition function.
Signed-off-by: rsuntk <rsuntk@yukiprjkt.my.id >
2025-06-20 00:27:17 +08:00
rsuntk
8359bc5890
[skip ci] kernel: move is_ksu_transition to selinux.c
...
* SELinux stuff on ksud? Does something like this is offtopic?
Signed-off-by: rsuntk <90097027+rsuntk@users.noreply.github.com >
2025-06-12 14:12:06 +08:00
ShirkNeko
c98cf121dc
Optimized SELinux compatibility support, adapted data structures to support 32-bit and 64-bit kernels
...
Co-authored-by: rsuntk <rsuntk@yukiprjkt.my.id >
Signed-off-by: ShirkNeko <109797057+ShirkNeko@users.noreply.github.com >
2025-05-12 19:24:40 +08:00
ShirkNeko
9d920e7cc5
kernel: added compatibility for non-GKI devices
...
Co-authored-by: rsuntk <rsuntk@yukiprjkt.my.id >
Co-authored-by: ShirkNeko <109797057+ShirkNeko@users.noreply.github.com >
Signed-off-by: ShirkNeko <109797057+ShirkNeko@users.noreply.github.com >
2025-05-10 13:19:30 +08:00
Wang Han
78bf2493bf
Convert devpts domain to ksu_file ( #1801 )
...
AOSP sepolicy does not allow appdomain to open pts. Hence, convert
devpts domain to ksu_file to allow any access.
2024-06-03 21:21:39 +08:00
Ylarod
898e9d4f8c
[1.0] Drop Non-GKI Support ( #1483 )
...
Co-authored-by: weishu <twsxtd@gmail.com >
2024-06-01 14:50:46 +08:00
weishu
98757bcdb3
kernel: transition devpts in kernel
2024-05-08 21:15:49 +08:00
Ylarod
5b920f8230
kernel: fix secctx mem leak ( #1283 )
...
Co-authored-by: weishu <twsxtd@gmail.com >
2024-01-14 11:15:52 +08:00
Ylarod
f37cc16117
Correctly handle is_ksu_domain, close #972 ( #1246 )
...
fix #972
2024-01-04 14:14:31 +08:00
weishu
ce892bc439
kernel: don't umount for non zygote child process. fixes #1054,#1049,#1045
2023-10-19 17:29:10 +08:00
longhuan1999
54ee400dc5
kernel: Adapt to low version Android init process ( #973 )
...
1. Adapt to low version Android init process
2. Add stop hook output
3. Fix output with missing line breaks
2023-10-02 12:00:24 +08:00
weishu
d675662862
kernel: add some log
2023-07-01 19:35:28 +08:00
weishu
53be8612c8
kernel: support setting selinux context for profile
2023-06-06 16:35:25 +08:00
华
3452841752
selinux: use grep to check api supports ( #402 )
...
This checks `selinux_state` and `current_sid` supports in a raw way.
Feels more reliable than the version checks.
Supersedes #401 , fixes #280 , fixes #400 .
2023-04-20 15:22:03 +08:00
Dhruv Gera
7be405e4e4
selinux: Update 4.9 to the correct check ( #324 )
...
4.9's last release aka 4.9.337 still needs the same fallbacks as 4.9.212
and breaks otherwise, upgrade this to fix compilation
Tested and working on POCO F1, 4.9.337
2023-03-27 21:26:37 +08:00
Enes Sastim
8fbdd996de
use selinux_state for 4.9.212+ ( #245 )
...
_selinux_state_ is backported to 4.9 kernel with the 4.9.212 release,
use it to fix the build.
many thanks to @reallysnow for figuring this out.
inspired by
d7c2c5f02a
2023-02-15 11:39:16 +08:00
Aquarius223
66284bfbe3
kernel: Correctly judge the version of selinux_state ( #214 )
...
* Merged related changes in android-common-kernel-4.14.163 [1] Handle
correct checks for older versions (below 4.14.163, 4.9, 4.4)
* fixes 14be7562 , it is required in 4.14.163 kernel, it is not needed in
4.14.163 and later
[1]: https://github.com/MiCode/Xiaomi_Kernel_OpenSource/commits/1cfd8419
Change-Id: Iade104312d058a249667ca836259d5608418bb55
Co-authored-by: admin <paper@localhost>
2023-02-07 15:02:48 +08:00
初羽
14be75629b
kernel: selinux: Fix build error ( #213 )
...
* d77ab8d although fixed some typo, but since there is no include avc.h,
this will cause the build to fail
* Error:
/mnt/HDD/fish/aospa/kernel/msm-4.9/drivers/staging/ksu/selinux/selinux.c:60:2:
error: use of undeclared identifier 'selinux_enforcing'
selinux_enforcing = enforce;
^
/mnt/HDD/fish/aospa/kernel/msm-4.9/drivers/staging/ksu/selinux/selinux.c:81:9:
error: use of undeclared identifier 'selinux_enforcing'
return selinux_enforcing;
^
2 errors generated.
Change-Id: I4cc8917b2b73ca467873222e02d498da8718988e
2023-02-07 09:50:55 +08:00
小さい猫
d77ab8dbff
kernel: selinux: fix more typos introduced in #166 ( #212 )
...
i didn't realize these typos in #181
Signed-off-by: Ookiineko <chiisaineko@protonmail.com >
2023-02-06 16:31:26 +08:00
小さい猫
199f5cc223
fix some typos introduced in #166 ( #181 )
...
Signed-off-by: Ookiineko <chiisaineko@protonmail.com >
Co-authored-by: f19 <58457605+F-19-F@users.noreply.github.com >
Co-authored-by: Scirese <nuclearlight91@gmail.com >
2023-02-02 23:38:04 +08:00
f19
4f2b8b7077
kernel: backport to 4.4 ( #166 )
...
These changes make KernelSU work on kernel4.4
[link](https://github.com/F-19-F/android_kernel_oneplus_msm8998 ).
LINUX_VERSION_CODE macro changes have been vertied on 4.4 4.9 4.14.
For kernel 4.4,just pick two commits
* [introduce
KernelSU](2993524f2f )
* [allow init exec ksud under
nosuid](3df9df42a6 )
2023-02-01 19:48:36 +08:00
Ylarod
db600d5ea0
kernel: precise trigger timing of post-fs-data ( #118 )
...
* kernel: add report_event cmd
* ksud: report event
* kernel: trigger on_post_fs_data
* ksud: comment unused code
* [skip ci] run clang-format
Signed-off-by: Ylarod <me@ylarod.cn >
* ci: use custom key to sign official bootimgs
* format ksud
* reject non root
* remove
Signed-off-by: Ylarod <me@ylarod.cn >
2023-01-26 11:29:02 +08:00
Ylarod
06aaae1335
kernel: fix missing log tag ( #117 )
2023-01-25 22:24:00 +08:00
Ylarod
2f970f7ab8
kernel: refact ( #113 )
...
* refact
* sort inlude
* update
* unregister execve kprobe
* update log
* don't unregister if not in kprobe
* opt for no kprobe
* opt for no kprobe
* stop debug
* don't forget to call ksu_uid_observer_exit
* rename core to core_hook
* direct call do_persistent_allow_list
* add prefix
* use getter, add warn
* add wrapper
* run clang-format
clang-format --style="{BasedOnStyle: InheritParentConfig, SortIncludes: true}" -i kernel/**/*.[ch]
* try fix wsa x64 build
2023-01-25 21:53:19 +08:00
Ylarod
26f80b7107
kernel: improve include ( #35 )
2023-01-10 19:44:43 +08:00
YuKongA
0c6de7a1ed
kernel: CI build for 5.15.y ( #30 )
2023-01-07 16:39:19 +08:00
weishu
b427c86ab3
misc: code format(use kernel code stype: https://www.kernel.org/doc/html/v6.1/process/coding-style.html
2022-12-27 18:21:10 +07:00
weishu
87d1158313
kernel: don't apply rules for permissive/disabled selinux
2022-12-23 08:59:57 +07:00
weishu
3196731545
kernel: improve selinux for su context
2022-12-22 22:10:17 +07:00
weishu
9aacf2a64d
kernel: avoding other root process being kprobed
2022-12-21 20:50:55 +07:00
weishu
280660125f
kernel: don't setenforce if kernel is already permissive
2022-12-12 22:19:17 +07:00
weishu
820d84e512
kernel: make allowlist available cross boot
2022-12-12 11:17:51 +07:00
tiann
51c84400cf
Init
2022-12-09 22:04:40 +08:00