weishu
5980c113fe
kernel: respect the app profile's umount modules field for kernel umounting
2023-06-04 00:03:56 +08:00
weishu
b31fc47197
kernel: support CMD_IS_UID_GRANTED_ROOT and CMD_IS_UID_SHOULD_UMOUNT
2023-06-03 22:44:01 +08:00
weishu
de72eedb46
kernel: don't copy profile when not found
2023-06-03 17:26:00 +08:00
weishu
3abb7e4ca2
kernel: baby version of profile
2023-06-03 00:01:00 +08:00
浅秋枫影
2716ec58a0
Revert 67667b6 ( #500 )
...
确实会导致卡住问题,一旦卡住,其他程序就无法正确卸载。
可能是,卸载目录那里一直在等待前面的空闲后再卸载,然后把后面的事件全部阻塞了?
2023-05-15 23:18:34 +08:00
tiann
294d6fa05e
kernel: don't umount for process in global namespace
2023-05-12 12:32:35 +08:00
tiann
67667b6df2
kernel: umount by lazy
2023-05-02 00:12:01 +08:00
tiann
45c229dc9f
kernel: fix snprintf
2023-04-18 19:38:58 +08:00
tiann
f35e03d816
kernel: allow manager to be installed in work profile
2023-04-18 18:32:33 +08:00
zhcnUTF8
fabaa61279
kernel: check CONFIG_SECCOMP status ( #351 )
2023-04-05 19:09:47 +08:00
tiann
62bbee56db
kernel: fix incorrect dput
2023-04-03 19:22:05 +08:00
tiann
ec4a233e04
kernel: basicly umount overlayfs in kernel
2023-04-03 19:16:24 +08:00
tiann
814d65cc28
kernel: Fix side channel attack
2023-03-28 12:07:18 +08:00
weishu
09fb118d22
kernel: return early for prctl command
2023-02-22 14:26:53 +07:00
Nullptr
a161c318a1
kernel: allow root processes to get allow/deny list ( #256 )
2023-02-19 16:09:21 +08:00
weishu
ca950d909b
kernel: press KEY_VOLUMEDOWN over 2 seconds will enter safemode and disable all modules
...
Co-authored-by: Ylarod <me@ylarod.cn >
2023-02-13 21:23:28 +07:00
f19
0c322a33bc
kernel: fix filp_open on older kernel's kworker ( #205 )
...
On older kernel, kworker missing keyring from init process , and this
keyring is related to FBE , which causes filp_open return ENOKEY or
other errors.To fix this,just install init's keyring to per
kworkers.This works on Kernel 4.4 and 4.9.
2023-02-05 07:14:59 +08:00
weishu
b9e27621ee
kernel: support sepolicy
2023-01-31 18:54:31 +07:00
Ylarod
ee7065bc12
kernel: minor fix ( #122 )
2023-01-26 14:55:41 +08:00
Ylarod
db600d5ea0
kernel: precise trigger timing of post-fs-data ( #118 )
...
* kernel: add report_event cmd
* ksud: report event
* kernel: trigger on_post_fs_data
* ksud: comment unused code
* [skip ci] run clang-format
Signed-off-by: Ylarod <me@ylarod.cn >
* ci: use custom key to sign official bootimgs
* format ksud
* reject non root
* remove
Signed-off-by: Ylarod <me@ylarod.cn >
2023-01-26 11:29:02 +08:00
Ylarod
22b66b6672
kernel: opt allowlist persist and log ( #119 )
...
* kernel: persist on need
* kernel: opt log for ksu_allow_uid
2023-01-26 08:55:27 +08:00
Ylarod
06aaae1335
kernel: fix missing log tag ( #117 )
2023-01-25 22:24:00 +08:00
Ylarod
2f970f7ab8
kernel: refact ( #113 )
...
* refact
* sort inlude
* update
* unregister execve kprobe
* update log
* don't unregister if not in kprobe
* opt for no kprobe
* opt for no kprobe
* stop debug
* don't forget to call ksu_uid_observer_exit
* rename core to core_hook
* direct call do_persistent_allow_list
* add prefix
* use getter, add warn
* add wrapper
* run clang-format
clang-format --style="{BasedOnStyle: InheritParentConfig, SortIncludes: true}" -i kernel/**/*.[ch]
* try fix wsa x64 build
2023-01-25 21:53:19 +08:00