weishu
5b27f6c010
kernel: Fix shell permission under KSU_DEBUG
2023-06-06 21:05:37 +08:00
weishu
be44fad288
ci: android13-5.15-2022-11 is deprecated: https://android.googlesource.com/kernel/common/+refs
2023-06-06 20:59:15 +08:00
weishu
2a5fb76f95
manager: sync kernel struct and bump profile version
2023-06-06 20:56:27 +08:00
weishu
5db7075432
kernel: bump format version to force clear allowlist, prepare to release a new version
2023-06-06 20:49:39 +08:00
weishu
1408175a35
kernel: fix set groups for kernel 4.9-
2023-06-06 20:45:42 +08:00
weishu
ab1dc894e1
manager: disable template ui temporarily
2023-06-06 19:06:03 +08:00
weishu
c5bc1c8b15
manager: make template ui work
2023-06-06 17:54:57 +08:00
Soo-Hwan Na
6d1ee60d67
kernel/selinux: Need to force include errno.h sometimes ( #572 )
...
- Seen with Linux 4.14 kernel with error message:
In file included from ../drivers/android/kernelsu/selinux/sepolicy.c:1:
In file included from ../drivers/android/kernelsu/selinux/sepolicy.h:6:
In file included from ../security/selinux/ss/policydb.h:30: In file
included from ../security/selinux/ss/avtab.h:26:
../security/selinux/include/security.h:240:10: error: use of undeclared
identifier 'EIDRM'
return -EIDRM;
^
CC drivers/base/transport_class.o
CC kernel/rcu/update.o
../security/selinux/include/security.h:246:10: error: use of undeclared
identifier 'ENOENT'
return -ENOENT;
^
2023-06-06 16:42:45 +08:00
weishu
a58e929205
manager: Default selinux context should be "u:r:su:s0"
2023-06-06 16:37:14 +08:00
weishu
53be8612c8
kernel: support setting selinux context for profile
2023-06-06 16:35:25 +08:00
weishu
c7f6a7d11b
kernel: support settings supplementary groups for profile
2023-06-06 13:19:11 +08:00
weishu
e9011041c5
manager: Fix groups overflow, close #598
2023-06-06 12:40:07 +08:00
weishu
9803371fdb
ci: respect the CONFIG_KSU options ( #599 )
...
close #596 , #597
2023-06-06 12:12:27 +08:00
weishu
710edb72fa
kernel: prevent root process to exec su, which makes app can escape root profile by exec it twice
2023-06-06 11:08:57 +08:00
Igor Sorocean
a4ddf59562
Update ro translation ( #595 )
2023-06-05 22:40:44 +08:00
weishu
37dc9a27a7
kernel: fix incorrect prune uid for work profile app, close #587
2023-06-05 17:41:41 +08:00
weishu
27ccfa6395
manager: change minimal CAP to DAC_READ_SEARCH
2023-06-05 10:17:10 +08:00
weishu
116bc56cfe
manager: Fix set profile failed.
2023-06-05 10:10:16 +08:00
weishu
9ae0126be5
manager: Add default minimal caps for default root profile
2023-06-05 09:08:41 +08:00
weishu
e8755f8ae0
manager: Fix groups and caps selection, close #592
2023-06-05 08:31:15 +08:00
Gustavo Mendes
6ba2bd3af9
Add Portuguese brazilian translation ( #593 )
...
Signed-off-by: Gustavo Mendes <gusttavo.me@outlook.com >
2023-06-05 08:24:41 +08:00
raystef66
4c5e485e76
Update Flemish/Dutch translation ( #590 )
2023-06-05 05:48:10 +08:00
Womsxd
05c6892f43
ksubot.py: Increase timeout ( #589 )
...
Increase the timeout duration and try to resolve the
'telegram.error.TimedOut: Timed out' issue when sending messages in a
Telegram group.
2023-06-04 23:31:37 +08:00
weishu
670a20c37f
manager: Fix selection
2023-06-04 23:24:19 +08:00
weishu
75509aba72
ksud: fix gid is override by uid
2023-06-04 23:14:44 +08:00
weishu
887f02e742
manager: optimize uid/gid panel
2023-06-04 23:14:44 +08:00
Hikari-no-Tenshi
ef8da39d34
manager: Update Ukrainian translation ( #584 )
2023-06-04 21:41:46 +08:00
Jia-Bin
b7c759ece1
Update Traditional Chinese ( #586 )
...
Update Traditional Chinese
Modify the translation to meet localization and usage habits
2023-06-04 21:36:32 +08:00
weishu
019da4a634
ksud: respect the kernel default uid
2023-06-04 18:09:58 +08:00
weishu
33aa6de50b
manager: Add desc for umount modules.
2023-06-04 17:42:58 +08:00
weishu
0b3688c3b1
manager: unify kernel and user structs
2023-06-04 17:29:31 +08:00
weishu
076e5d3655
kernel: make the profile uid, gid, capabilities really work
2023-06-04 17:29:12 +08:00
weishu
c9608af0c8
manager: fix capabilities and namespace save/load
2023-06-04 16:12:03 +08:00
weishu
908fbadaf5
manager: remove unused resources
2023-06-04 16:12:02 +08:00
weishu
ee97fdfc56
kernel: add more capailities
2023-06-04 16:09:27 +08:00
weishu
4ac137313f
manager: rename "umount modules" -> "Hide modules"
2023-06-04 14:25:50 +08:00
weishu
11d0029a4b
manager: Add default groups when empty
2023-06-04 14:25:50 +08:00
weishu
8af5a9038b
kernel: fix set app profile may override other user's
2023-06-04 13:59:22 +08:00
weishu
5d449988fb
manager: Fix app profile umount default
2023-06-04 09:58:02 +08:00
weishu
e969563df0
manager: Add UMOUNT badge
2023-06-04 09:52:51 +08:00
weishu
990626cf7d
kernel: Fixing the issue of a delay in updating the default profile.
2023-06-04 09:47:31 +08:00
weishu
fc77ca989f
kernel: use uid instead of package to compare allowlist, fix #580
2023-06-04 09:18:39 +08:00
diphons
2ce3976023
Fixup: build under linux 4.14 ( #581 )
...
Split compiler_types.h from compiler.h only available for linux 4.14
2023-06-04 09:15:03 +08:00
weishu
63ec531814
kernel: dont prune uid used for app profile
2023-06-04 01:01:39 +08:00
weishu
a4b55b30ca
manager: Add log for fallbacked app profile
2023-06-04 00:59:59 +08:00
weishu
807556f361
manager: show default value for app profile.
2023-06-04 00:22:36 +08:00
weishu
2d854f2f37
manager: the default value of umountModules is actually "true" in kernel
2023-06-04 00:05:19 +08:00
weishu
5980c113fe
kernel: respect the app profile's umount modules field for kernel umounting
2023-06-04 00:03:56 +08:00
weishu
1491465b55
manager: require kernel 10931
2023-06-03 23:58:23 +08:00
weishu
728380222a
kernel: Add version field for struct app_profile
2023-06-03 23:57:05 +08:00