Repository navigation
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
This PR refactors SELinux policy duplication in the kernel SELinux integration to use a simpler “serialize + deserialize” approach instead of hand-copying selected policydb structures.
Changes:
- Replace the custom partial/deep copy logic for
policydbwithpolicydb_write()into a buffer followed bypolicydb_read()into a fresh policydb. - Simplify policy destruction by calling
policydb_destroy()directly. - Add a small “config” fixup in the serialized policy buffer before reading it back.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
AlexLiuDev233
added a commit
to Baka-SU/BakaSU
that referenced
this pull request
May 3, 2026
use policydb_read/policydb_write for dup_policy add same way for nongki to fix the problem as below <3>[ 4.086580] BUG: sleeping function called from invalid context at security/selinux/ss/hashtab.c:47 <3>[ 4.086583] in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 1, name: init <4>[ 4.086586] CPU: 7 PID: 1 Comm: init Tainted: G W 5.4.302-qgki-g342369d45f2a #451 <4>[ 4.086589] Hardware name: Qualcomm Technologies, Inc. Blair QRD NOPMI (DT) <4>[ 4.086591] Call trace: <4>[ 4.086599] dump_backtrace+0x0/0x19c <4>[ 4.086603] dump_stack+0x90/0xcc <4>[ 4.086606] ___might_sleep+0x110/0x12c <4>[ 4.086610] hashtab_insert+0x3c/0x18c <4>[ 4.086614] add_type.llvm.13442088749150705041+0x98/0x1f0 <4>[ 4.086616] ksu_type+0x28/0x5c <4>[ 4.086618] apply_kernelsu_rules+0xb8/0x5b4 <4>[ 4.086621] ksu_initialize_selinux+0x10/0x24 <4>[ 4.086623] ksu_handle_execveat_ksud+0x1a8/0x388 <4>[ 4.086626] ksu_handle_execveat+0xec/0xf4 <4>[ 4.086629] __arm64_sys_execve+0x50/0x84 <4>[ 4.086632] el0_svc_common+0xdc/0x1ac <4>[ 4.086634] el0_svc_handler+0x24/0x64 <4>[ 4.086637] el0_svc+0x8/0x140 for backslashxx's afraid of time window to race, use lock sel_mutex to solve Thanks for 5ec1cff's idea and help! Off topic: I don't want use stop_machine like: backslashxx/KernelSU@4309f10 backslashxx/KernelSU@454b0c9 Even only in sel_mutex/policy_rwlock not exported This severely impacts performance [Adapted from upstream pull request tiann/KernelSU#3350] Co-authored-by: 5ec1cff <ewtqyqyewtqyqy@gmail.com> Signed-off-by: AlexLiuDev233 <wzylin11@outlook.com>
AlexLiuDev233
added a commit
to Baka-SU/BakaSU
that referenced
this pull request
May 3, 2026
use policydb_read/policydb_write for dup_policy add same way for nongki to fix the problem as below <3>[ 4.086580] BUG: sleeping function called from invalid context at security/selinux/ss/hashtab.c:47 <3>[ 4.086583] in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 1, name: init <4>[ 4.086586] CPU: 7 PID: 1 Comm: init Tainted: G W 5.4.302-qgki-g342369d45f2a #451 <4>[ 4.086589] Hardware name: Qualcomm Technologies, Inc. Blair QRD NOPMI (DT) <4>[ 4.086591] Call trace: <4>[ 4.086599] dump_backtrace+0x0/0x19c <4>[ 4.086603] dump_stack+0x90/0xcc <4>[ 4.086606] ___might_sleep+0x110/0x12c <4>[ 4.086610] hashtab_insert+0x3c/0x18c <4>[ 4.086614] add_type.llvm.13442088749150705041+0x98/0x1f0 <4>[ 4.086616] ksu_type+0x28/0x5c <4>[ 4.086618] apply_kernelsu_rules+0xb8/0x5b4 <4>[ 4.086621] ksu_initialize_selinux+0x10/0x24 <4>[ 4.086623] ksu_handle_execveat_ksud+0x1a8/0x388 <4>[ 4.086626] ksu_handle_execveat+0xec/0xf4 <4>[ 4.086629] __arm64_sys_execve+0x50/0x84 <4>[ 4.086632] el0_svc_common+0xdc/0x1ac <4>[ 4.086634] el0_svc_handler+0x24/0x64 <4>[ 4.086637] el0_svc+0x8/0x140 for backslashxx's afraid of time window to race, use lock sel_mutex to solve Thanks for 5ec1cff's idea and help! Off topic: I don't want use stop_machine like: backslashxx/KernelSU@4309f10 backslashxx/KernelSU@454b0c9 Even only in sel_mutex/policy_rwlock not exported This severely impacts performance [Adapted from upstream pull request tiann/KernelSU#3350] Co-authored-by: 5ec1cff <ewtqyqyewtqyqy@gmail.com> Signed-off-by: AlexLiuDev233 <wzylin11@outlook.com>
AlexLiuDev233
added a commit
to Baka-SU/BakaSU
that referenced
this pull request
May 3, 2026
use policydb_read/policydb_write for dup_policy add same way for nongki to fix the problem as below <3>[ 4.086580] BUG: sleeping function called from invalid context at security/selinux/ss/hashtab.c:47 <3>[ 4.086583] in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 1, name: init <4>[ 4.086586] CPU: 7 PID: 1 Comm: init Tainted: G W 5.4.302-qgki-g342369d45f2a #451 <4>[ 4.086589] Hardware name: Qualcomm Technologies, Inc. Blair QRD NOPMI (DT) <4>[ 4.086591] Call trace: <4>[ 4.086599] dump_backtrace+0x0/0x19c <4>[ 4.086603] dump_stack+0x90/0xcc <4>[ 4.086606] ___might_sleep+0x110/0x12c <4>[ 4.086610] hashtab_insert+0x3c/0x18c <4>[ 4.086614] add_type.llvm.13442088749150705041+0x98/0x1f0 <4>[ 4.086616] ksu_type+0x28/0x5c <4>[ 4.086618] apply_kernelsu_rules+0xb8/0x5b4 <4>[ 4.086621] ksu_initialize_selinux+0x10/0x24 <4>[ 4.086623] ksu_handle_execveat_ksud+0x1a8/0x388 <4>[ 4.086626] ksu_handle_execveat+0xec/0xf4 <4>[ 4.086629] __arm64_sys_execve+0x50/0x84 <4>[ 4.086632] el0_svc_common+0xdc/0x1ac <4>[ 4.086634] el0_svc_handler+0x24/0x64 <4>[ 4.086637] el0_svc+0x8/0x140 for backslashxx's afraid of time window to race, use lock sel_mutex to solve Thanks for 5ec1cff's idea and help! Off topic: I don't want use stop_machine like: backslashxx/KernelSU@4309f10 backslashxx/KernelSU@454b0c9 Even only in sel_mutex/policy_rwlock not exported This severely impacts performance [Adapted from upstream pull request tiann/KernelSU#3350] Co-authored-by: 5ec1cff <ewtqyqyewtqyqy@gmail.com> Signed-off-by: AlexLiuDev233 <wzylin11@outlook.com>
5ec1cff
marked this pull request as ready for review
May 10, 2026 13:57
pershoot
pushed a commit
to KernelSU-Next/KernelSU-Next
that referenced
this pull request
May 11, 2026
jinetty
pushed a commit
to jinetty/android_kernel_xiaomi_sm8450
that referenced
this pull request
May 14, 2026
Hanhanawa
pushed a commit
to Hanhanawa/BakaSU
that referenced
this pull request
Oct 3, 2026
use policydb_read/policydb_write for dup_policy add same way for nongki to fix the problem as below <3>[ 4.086580] BUG: sleeping function called from invalid context at security/selinux/ss/hashtab.c:47 <3>[ 4.086583] in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 1, name: init <4>[ 4.086586] CPU: 7 PID: 1 Comm: init Tainted: G W 5.4.302-qgki-g342369d45f2a Baka-SU#451 <4>[ 4.086589] Hardware name: Qualcomm Technologies, Inc. Blair QRD NOPMI (DT) <4>[ 4.086591] Call trace: <4>[ 4.086599] dump_backtrace+0x0/0x19c <4>[ 4.086603] dump_stack+0x90/0xcc <4>[ 4.086606] ___might_sleep+0x110/0x12c <4>[ 4.086610] hashtab_insert+0x3c/0x18c <4>[ 4.086614] add_type.llvm.13442088749150705041+0x98/0x1f0 <4>[ 4.086616] ksu_type+0x28/0x5c <4>[ 4.086618] apply_kernelsu_rules+0xb8/0x5b4 <4>[ 4.086621] ksu_initialize_selinux+0x10/0x24 <4>[ 4.086623] ksu_handle_execveat_ksud+0x1a8/0x388 <4>[ 4.086626] ksu_handle_execveat+0xec/0xf4 <4>[ 4.086629] __arm64_sys_execve+0x50/0x84 <4>[ 4.086632] el0_svc_common+0xdc/0x1ac <4>[ 4.086634] el0_svc_handler+0x24/0x64 <4>[ 4.086637] el0_svc+0x8/0x140 for backslashxx's afraid of time window to race, use lock sel_mutex to solve Thanks for 5ec1cff's idea and help! Off topic: I don't want use stop_machine like: backslashxx/KernelSU@4309f10 backslashxx/KernelSU@454b0c9 Even only in sel_mutex/policy_rwlock not exported This severely impacts performance [Adapted from upstream pull request tiann/KernelSU#3350] Co-authored-by: 5ec1cff <ewtqyqyewtqyqy@gmail.com> Signed-off-by: AlexLiuDev233 <wzylin11@outlook.com>
rzlamrr
added a commit
to rzlamrr/flop_trinket-mi_kernel
that referenced
this pull request
Oct 3, 2026
3b1e46b04 ksud: enhance risk detection logic 9f20db6d5 manager: add risk detection toggle in Developer screen ba4b8db45 fix(kernel): Fix avtab removal length calculation and xperms update 85171fb99 feat(ksud): add timeout for boot stage scripts (tiann/KernelSU#3797) faf4165e0 chore(ksud): make clippy happy 2b31f7185 manager: Check secure screen lock when enabling App lock c61d87648 ksud: ability to disable and enable module risk detection 01941e66f manager: remove haptic toggle and make it always enabled and take isNavBarEnabled out of scrollstate 32e897e20 refactor(ksud): update waitsys and refactor logic (tiann/KernelSU#3755) 4bc78d770 kernel: Add Android riscv64 support with LKM (tiann/KernelSU#3750) 5475843a4 manager: optimize the hell out of homescreen to get rid of the long lasting irritating transition lag c3a0f19df manager: feat: Haptic feedback a19ea4f51 manager: Add option to disable Nav bar 94b8c49a4 manager: feat: App lock e4bf775aa fix(manager): pass format args to UAPI version warning strings 1905f41ec fix(ksud): use waitsys to wait when soft reboot (tiann/KernelSU#3754) c6f3978e6 kernel: fix RCU-protected SELinux policy access (tiann/KernelSU#3746) d3c68954a fix(ksud): wait for service death before post-fs-data when soft reboot (tiann/KernelSU#3744) 3359e8230 fix(manager): Prevent exception if no root access (tiann/KernelSU#3741) f58d79fbf workflows: release: Rename LKM artifacts cd1694d82 workflow: update build-manager to remove stable branch triggers and adjust upload conditions d223f1fcb workflows: release: Fix LKM artifact 81b851a25 kernel: fix avtab iteration macro (tiann/KernelSU#3701) c90e64005 kernel: util: wire up ksyscall (tiann/KernelSU#3742) 1a879d6a8 manager: add custom animated splash screen f6905d5ca manager: remove 'uapi_mismatch' string from multiple language files ab6e2b1a5 manager: remove 'select_language' string from multiple language files 0f9553a63 New Crowdin updates (#1506) be220ff68 fix(manager): ensure modules_update exists before restoring (#1518) 90f1134e5 fix(manager): SuperUser screen crashes when accessed too early (#1529) a951768d0 fix(kernel): Miscellaneous build errors in syscall_hook_manager and arm64 patch_memory (tiann/KernelSU#3738) 893103172 fix(kernel): open file without touching fsnotify and atime while scanning manager apks (tiann/KernelSU#3733) e332150da manager: remove unnecessary native code for unrooted (#1525) a9f76ce7c build(dep): ksuinit: migrate dependency to new repo 519be2c07 manager: auto-detect zip kind instead of two separate entries Opening a zip now auto-detects whether it is an AnyKernel3 package (root-level anykernel.sh) or a regular module zip: 6040ba5e8 manager fix unrooted state initialization in settings screen e9f2356fc fix: WebUI file operations always returning false on success (#1439) 146455c1b ksud: add JSON app-profile get/set commands (#1515) 7409bd36c manager: differ export logs on rooted vs unrooted (#1508) 0f01a3981 docs: update READMEs ac5de08b7 fix(actions): Remove setup-android 9c1911c14 build(deps): migrate dependencies to new repos (tiann/KernelSU#3723) f9a69951d kernel: retain capabilities across execve for non-root profiles (tiann/KernelSU#3710) 16ee78192 manager: use in-app language picker (#1492) fb3643fc0 ksud: risk: fully modularized risk functions, improved output and fully optimized the core function 76dbebf42 ksud: risk: do online evaluation to get the latest cache bb5552422 ksud: risk remove entry for false flag 917df670d ksud: risk: removed irrelavant modules that arent really risky in terms of functionality b93da6492 ksud: risk: add new extreme risk entry 8df4d9cbc ksud: improved risk detection logic and reasons, adde severity index and allow module install continuation for low to medium severity risk through user confirmation 85b700532 ksud: add new patterns for risk modules a161d0bcf fix(kernel): Reject all signature block id except v2 (tiann/KernelSU#3700) 1b2316be3 kernel: selinux: Bypass dynamic wrappers conditionally e0a77599b userspace: ksud: improve risky module blocker parsing, verbose and added reasons 88feb688d feat(resetprop): support update long value for ro props (tiann/KernelSU#3696) 1fb72a604 blocklist: add fateh7 to blacklist (#1496) 46cc00731 userspace: ksud: add malware/suspicious module detection 7b5541098 scripts: ksunextbot: Truncate message and set error return code e801e16b5 feat: new version matching detection mechanism (tiann/KernelSU#3516) 8b9d7a7a9 kernel: Support out-of-tree builds against generic Linux 2482c5695 fix(kernel, uapi, ksud): make fd wrapper work with app profile (tiann/KernelSU#3679) c294278e5 feat(ksud): Implement SIGSYS handler (tiann/KernelSU#3677) fb4f0a6e9 New Crowdin updates (#1482) 39ba38217 manager: remove arabic translations due to malicious activity from crowdin 36aa55c52 fix(kernel): Preserve a ebitmap's size for each policy type (tiann/KernelSU#3680) 5e6f14533 refactor(kernel, ksud, manager): Switch webview zygote umount to allowlist (tiann/KernelSU#3666) 76d065734 docs: update version references to 3.3.0 (tiann/KernelSU#3667) 835db2823 build: bump ddk to 20260828, support android17-6.18 (tiann/KernelSU#3663) d47ac9924 fix changes in 6.18+ (tiann/KernelSU#3480) 56ec8a67f ksud: Fix su identity argument handling (tiann/KernelSU#3659) adfb465b1 manager: Chinese: Fix duplicate (settings_webview_zygote*) 55826561a New Crowdin updates (#1371) 0557d9510 refactor(kernel): Perform umount for webview zygote (tiann/KernelSU#3630) 8ab6aa025 selinux hide: spoof status page and avd seqno (tiann/KernelSU#3647) 9076090d2 feat(ksud): support set selinux context in su (tiann/KernelSU#3653) bdde17c3a kernel: init: Trim a few empty lines (kernelsu_init) 47daef844 fix(kernel): adapt to backport of 6.6 kernel, fix tiann/KernelSU#3629 (tiann/KernelSU#3632) 8f77a4019 fix(kernel): Handle execveat for new bionic libc (tiann/KernelSU#3639) 0b375cee4 refactor(ksuinit): Remove meaningless /sys mount 234f6e040 refactor(kernel): Drop v1 signature verification (tiann/KernelSU#3628) 0bf23f23c ksud: boot-patch-v2: remove redundant security check (tiann/KernelSU#3627) 272bd6e0f ksud: Use kernel BTF for boot image injection 86e8e246e ksud: Add boot image LKM injection 36874077d fix(ksud): Fix buffer overflow caused by android-properties library a91a5cce4 kernel: apk_sign: Format a few spaces to tabs 1c37600b6 refactor(kernel): Align signature block parsing with AOSP (tiann/KernelSU#3613) 18c790e79 ksuinit: compat for version magic mismatch kernel (tiann/KernelSU#3584) 444f8413f workflows: ksuinit: Remove explicit build package (x64) b1b0f0e65 kernel: sulog: Add include (linux/init.h) d2e04179f workflows: Update checkout/upload-artifact to v7 4c18cfdb3 feat: add x64 lkm (tiann/KernelSU#3570) e7536f02c ksud: resetprop: validate timeout value (tiann/KernelSU#3608) 7e237c869 kernel: prevent /system/bin/stub_zygote from being unmarked (tiann/KernelSU#3601) 9781f9bb2 manager: instead if hiding kernel features lets make them disabled if not supported 38791da11 kernel: check kernel_read() results when verifying the APK signing block (tiann/KernelSU#3594) d6a42fd92 kernel: add missing NULL checks on allocation paths (tiann/KernelSU#3572) a124ae5f1 ksud: ensure spawn_sulogd don't return in child; execute /proc/self/exe instead of resolving executable path (tiann/KernelSU#3583) d5874c5a3 manager: fix stray quote corrupting saved app profile templates (tiann/KernelSU#3571) 1d4f72c89 kernel: register tracepoint handler with minimum priority (tiann/KernelSU#3582) 706413e0d manager: add module metadata in confirmation dialog 8fb0a6e44 ksud/ksuinit: Silence build warnings dfa73f1bf chore: make clippy happy (tiann/KernelSU#3574) cd1cb09f6 kernel: add syscall dispatcher patching for x64 (tiann/KernelSU#3562) d1754d8cc ksud: boot-patch: only use kmi from boot if ota (tiann/KernelSU#3557) 3b18216f7 New Crowdin updates (#1366) 910a46004 manager: add pull to refresh for sulog screen 8c363a144 manager: fix sulog screen drowndown menu d7d33d5b2 New Crowdin updates (#1342) d63ba75fd manager: optimize and fix sulogscreen and other screens 1cbad7e2a manager: optimize and fix sulogscreen and other screens 39b16628f manager: Home: Restore ksuVersionTag 1a0ef4898 ksud: Relax regex for module ID/config key 111170990 [PARTIAL] ksud: expose module env vars (tiann/KernelSU#3522) 64a853cae ksud: update resetprop, improve prop area rebuild (tiann/KernelSU#3545) 7bce6ea5e manager: Chinese: Fix empty reboot_userspace 012a3f407 ksud: Adapt resetprop calls to prop-rs-android 0.2.0 (tiann/KernelSU#3532) 9e29205ed ksud: update dependencies 30802e726 kernel: Remove strncpy() from the kernel (tiann/KernelSU#3529) 0608dfd71 manager: Fix MissingFormatArgumentException for home_working_version fe1b65b28 manager: Spanish: Fix malformed require_kernel_version 065a36ae6 kernel: Allow domain to use memfd created by ksu domain (tiann/KernelSU#3528) 54c736794 kernel: Add compat bridge for ksu_toolkit (SULog) a7152225c kernel: kernel_umount: Format a few spaces to tabs a97004c79 kernel, ksud: refactor sucompat (tiann/KernelSU#3521) e1bcbb270 dev: split output dir for local lkm build 3b917c954 dev: remove and ignore kernel/.clangd, add clangd examples bc89ec9b1 manager: fix template save & load (tiann/KernelSU#3517) 1c1cdff36 ksud: su: add --ksu-no-new-privs option (tiann/KernelSU#3515) 9ef07896a kernel: allowlist: Format/indent spaces/tabs 8426b72fb feature: add KSU_NO_NEW_PRIVS (tiann/KernelSU#3509) e1f4fec90 kernel, ksud, manager: implement uapi version (tiann/KernelSU#3455) d3e454f68 kernel,ksud: support module-provided init.rc injection (tiann/KernelSU#3478) ae00b2902 chore: make clippy happy (tiann/KernelSU#3423) dd4c7a6c5 userspace: improve module loading and ksud CLI (tiann/KernelSU#3406) 7c903c95c ksud: add --kmi for ksud late-load f4ea5c2fb ksud: fix fmt and clippy e13b12361 ksud: fix daemonize b536bc870 ksud: minor refactor (tiann/KernelSU#3377) f55f9fb9b ksud: add manager package name option to some commands c57be459d ksud: remove ksud before update it ec9359bf4 fix: add CORS header to ksu://icon/ responses to allow programmatic image loading (tiann/KernelSU#3402) dab1dbc46 manager: simplify sulog parser e6d9fa18f manager: fix sulog string 35b8d7c34 manager: add sulog screen (tiann/KernelSU#3373) dfd8846eb kernel: Fix building sulog on kernel 6.1 & x86_64 (tiann/KernelSU#3401) cdeec0d18 kernel: sulog: fix return value (tiann/KernelSU#3364) 4a6e23795 feat(kernel ksud): add sulog (tiann/KernelSU#3360) bf8a14e80 Revert: feat(kernel): tiny_sulog 444107588 New Crowdin updates (#1245) f1b64f440 kernel: Improve late load mode sequence calculation (tiann/KernelSU#3498) c2013a15a selinux_hide: hide status (tiann/KernelSU#3495) af303ac7c ksud: update android_bootimg and preallocate memory for patching 8e98b5d4c refactor: use built-in bootimg crate, remove magiskboot (tiann/KernelSU#3467) 4c5305b39 manager: strings: zh-rCN: Re-order SELinux Hide feature placement ec3446e82 manager: Re-order AVC Spoof feature placement 18f9334c4 adbroot: support statically-linked GetProperty (tiann/KernelSU#3470) 5f905f64e [PARTIAL] kernel: Fix absolute src handling in Kbuild (tiann/KernelSU#3390) e2538f491 kernel: don't call path_put when kern_path failed (tiann/KernelSU#3410) 7542b2d16 manager: adb_root: load our ksurc if possible (tiann/KernelSU#3412) 39ec9e4d8 kernel: fix path check in adb root (tiann/KernelSU#3391) f0e03aa96 feature: adb root (tiann/KernelSU#3382) 7a3bda171 kernel: symbol_resolver: resolve symbol suffix starts with '$' d591e7d98 ksud: fix some module scripts won't add KSU_MODULE environment var (tiann/KernelSU#3445) f14bf978c ksud: su: support parsing arguments after user (tiann/KernelSU#3464) 5993c8ea6 ci: disable cache-bin in ksud-extra to fix macOS build (tiann/KernelSU#3463) 8b9a9f885 kernel: Prefer hashed .cfi_jt variants before bare symbols (tiann/KernelSU#3475) 4d5ba9875 kernel: refine symbol_resolver (tiann/KernelSU#3469) 1ae6aad75 kernel: Resolve dotted CFI symbol variants in symbol lookup (tiann/KernelSU#3461) 5a4a71874 selinux_hide: fix attr/current detection (tiann/KernelSU#3459) 65a24e11b feature: selinux hide (tiann/KernelSU#3457) 4c9737aed kernel: simpler implementation of copying policydb (tiann/KernelSU#3350) c2e1a7cce kernel: init: Format a few spaces to tabs f08381731 feature: allow shell & force enable adbd (tiann/KernelSU#3298) 293ca016c kernel: prune redundant avtab nodes after deny rules (tiann/KernelSU#3439) 2887ea494 manager: add conditional info for zygisk and meta module f81f73afd manager: rework gesture navigation logic with full-featured condition 105c40a2f manager: add sorting options for module stars in ModuleRepo 86f49b410 manager: allow module install in safe mode aa9154952 manager: added seccomp status a7769b359 manager: improve and refactor meta and zygisk implementation info aefac0d48 manager: ksud: refactor zygiskImpl and Metamodule info and made the info simple and lite (detailed info will be back in the future with better implementation) e6ba52b72 manager: partially fix home screen stutter caused by getzygiskimplementation function 4e4c40be9 manager: simplify developer options state management in ModuleItem 8c1b4a926 manager: module card conditionally expand based on developer options 8d363c437 fix include change (tiann/KernelSU#3428) 81f88298c manager: refactor getZygiskImplementation 584590e06 workflows: build-manager*/ksud/release: Update download-artifact for ksud (v7) 0daf55582 kernel: allowlist: Format a space/tab to a tab/space ddeecfd4c kernel: refactor allowlist (tiann/KernelSU#3418) 551ad8047 manager: add gestures for naviagtion 4c387be48 manager:add contributors card 56e76e282 kernel: Replace GFP_ATOMIC flags in throne tracker 982f46940 kernel: Fix OOB read caused by missing null terminator 77d5b30cb userspace: ksud: susfsd: Add a return code for programmatic use fa5e1c547 userspace: ksud: susfsd: only print error instead of return it 9d0b2be4e userspace: integrate susfsd into ksud 6df403db0 workflows: build-manager/manager-ci: Create x86_64 path (app jniLibs) 095f780bf manager: fix navigation for shortcuts c21acbad5 kernel: supercall: Use strscpy for CHANGE_SPOOF_UNAME 2cd86fb79 manager: webui: Add WebUI BackHandler Support 27a60b6e9 manager: Update min. supported kernel version (33110) c64488ef0 userspace: ksud: Add x86_64 passthrough b5f34deee userspace: ksud: Ignore built susfsd c7ce61491 userspace: ksud: Re-generate Cargo lockfile 4dc22a4fc kernel: Don't advertise webview zygote in umount list (tiann/KernelSU#3389) 1610aee76 kernel: mark more functions as init/exit functions (tiann/KernelSU#3380) 30a29de89 ksud: Change uid references to appid (tiann/KernelSU#3388) 01d825440 ksud: sepolicy: fix *xperm parsing, support bracket for perm_set (tiann/KernelSU#3353) d8d24c1e1 kernel: bump app profile version, migrate selinux domain (tiann/KernelSU#3363) ab5d93d9b kernel: move selinux context to ksu bbdfbd246 syscall_hook: Fix building on kernel 6.6 and below (tiann/KernelSU#3383) 2cb3c91b4 kernel: Fix absolute src handling in Kbuild (tiann/KernelSU#3390) 0f9cceae3 kernel: Fix extmod config propagation for manager/policy/debug d96e8dbd0 fix: GKI kernel build 91e4c0090 kernel / userspace / manager: fix uapi 32abc191a kernel: unified uapi header c7c13e037 kernel: Format a few spaces to tabs (sucompat) 0f42a22ae kernel: sucompat: fallback to sh when ksud is unavailable e782e290b kernel: fix lsm hook 8d16c2221 kernel: common symbol resolve tool c35685aa0 kernel: add lsm hook framework fa5c0f0bc kernel: allow disable manager or policy 6d4aa8bfc kernel: reorganize source layout cb559258d New Crowdin updates (#1174) 140e9c80e ksud: add debug insmod d41dc4be5 ksud: late-load: reopen fd to reset selinux file context after LKM loaded (tiann/KernelSU#3354) 462182fa7 kernel: selinux: minify rules 41d6e81cf kernel: fix copy avtab (tiann/KernelSU#3352) 622036b34 kernel: fix compile for x86-64 linux kernel v6.13- (tiann/KernelSU#3351) 426d9a64c [PARTIAL] ksu: drop official x86_64 support (tiann/KernelSU#3316) c8204e6a7 kernel_umount: fixup printout and avoid UAF (tiann/KernelSU#3338) 748fe0eab userspace: Fix WebUI root shell cgroup escape 690042684 ksud: fork daemon to run late-load mode (tiann/KernelSU#3334) e5910e8a3 feat: ksud-managed emulated soft reboot (tiann/KernelSU#3291) cd424a198 manager / userspace: Add soft reboot (setprop; zygote) 6e4be1931 kernel: handle ksud execve by syscall_hook_manager, use static_key 0081da96c kernel: remove usage of get_current_cred 2e945fa53 supercall: perform free_pid() calls for kernel 6.15+ (tiann/KernelSU#3331) ac5bb5d6c kernel: allow exit 93d56b356 feat: safe exit (tiann/KernelSU#3317) 9707560bd [PARTIAL] Bring back x86_64 support with a catch (tiann/KernelSU#3328) 7e1401e07 kernel: Format a few tabs to spaces (supercalls; syscall_hook_manager) e05540f4f kernel: use syscall table hook to avoid running in atomic context 7bb9d00ab feat: support switch to init_group (tiann/KernelSU#3322) 4cfb2a188 ksud: refine resetprop cli (tiann/KernelSU#3330) 80c081181 update prop-rs-android & resetprop 5380d17cf ksud: embeded resetprop impl (tiann/KernelSU#3300) 326d35396 manager: Update min. supported kernel version dd808f86c [PARTIAL] feat: jailbreak by Magica (tiann/KernelSU#3268) ca8295ad2 kernel: fix process marking for built-in mode (tiann/KernelSU#3284) 31668a6cd New Crowdin updates (#1166) 2c901a93e ksud: refine boot-patch (tiann/KernelSU#3281) 6d662163d Update KSU config to require EXT4_FS (tiann/KernelSU#3266) d3cb4403e kernel: Fix RLIMIT_NPROC leak on root escape (tiann/KernelSU#3286) bf36fbbb1 kernel: upgrade ddk, use ddk-min (tiann/KernelSU#3280) 95f4378f0 kernel: sepolicy: use GFP_KERNEL (tiann/KernelSU#3271) 4693f14b7 kernel: enforcing selinux at late-load mode 948f47715 feat: add late-load mode support (tiann/KernelSU#3258) 1425864dd manager: fix padding for module screen 71363abb0 kernel: refine stackprotector workaround (tiann/KernelSU#3264) fa060a8ae kernel: make clang-format happy 6e112b77c kernel: Only check CONFIG_STACKPROTECTOR_PER_TASK on arm64 (tiann/KernelSU#3263) 271b2be15 kernel: add missing attribute 6a04abc6f kernel: Provide own stackprotector symbol if necessary d4ff3e20a New Crowdin updates (#1164) bee5000d7 manager: fix navigation for superuser and module destination buttons 690c5a010 manager: improve navigation route animations d2866a623 manager: refactor navigation route for navbar and save state for destination 7ccc5dd1b manager: refactor settings screen bedfb626f manager: improved padding for column and snackbar b4434f973 manager: fixed bugs and improve backup and restore ed7515a03 manager: disable toggle when module uninstalled 947edfe6b manager: remove dead strings 9aac87ab8 manager: minor tweak to strings 44a68e8db manager: removed hardcoded string 6ac83131e ksud & ksuinit: fix wrong GetInfoCmd struct (tiann/KernelSU#3256) 9034d6cf2 manager: add new string 613e333ef New Crowdin updates (#1157) de4ecb778 manager: refactor and improve module/allowkist backup.restore 565b4649f manager: minor tweak to statuscard d7d2161ac manager: tweak a string e1d5e1d34 manager: flipped the toggle state of sucompat, avc spoof and kernel umount b34be75f4 manager: bring back susfs info userspace: bring back susfsd da897dec9 manager: some small ui improvements 117af6325 Revert "ksuinit: ignore has_kernelsu and load kernelsu module overriding in-built kernel driver" 8e12bfb7a manager: New Crowdin updates (#1155) 1112651be manager: clean translations for newer ones 95f42b5c9 manager: fix some warning ff1eef21c manager: add stars count for module and meta repo and some improvements 598c11eb5 manager: added dynamic and improved shortcut icons 9534e710b manager: added pull to refresh for module repo and meta module repo screens 077a76b04 manager: fetch superuser and module lists from main activity instead e566750a2 ksud: support patch cmdline b3920c81e kernel: Use ksu cred to save allowlist (tiann/KernelSU#3243) 4855fa3a8 manager: add confirmation dialog for anykernel zip flashing 498ad0e30 manager: remove kpatch-next hardoced shortcut and hidden launcher 6fb44f009 kernel: Avoid malloc in remove_uid_from_arr() (#3099) 56074f8f4 kernel: use rcu to access allowlist, refactor get allowlist api 5282df73b manager: module card and supercard in homescreen is now again a destination button 66ca82356 manager: remove custom colors for update text 64e6797f0 manager: refactor createShortcut method to use module name and webuiIcon same as module screen 3a5b1a37a manager: refactor manager update downloads to allow variant selection (main / spoofed) ce31df039 manager: expose shortcut js interface api to webui 1acb912fb manager: refactor module shortcuts, now supports all OS and auto fetch icons for shortcuts )actionIcon, webuiIcon) 8a8c3b71c manager: add selinux permissive toggle b0aa292b1 manager: added top p[adding for home and settings screen 134d8de62 manager: make kernel umount, avc spoof and sucompat toggles persistent on reboots 738be77ac manager: make superuser items a card d2a4a9944 manager: fix strings 37b608e8e manager: use separate interaction source for switch item d9fc2f083 manager: fix padding for settings card 95221f385 manager: add banners for meta module repo card and improve size of install button bada46a9d manager: add banner for module repo 1cbfc8408 manager: add non-free module repo toggler bf2430b93 manager: ability to add more than 1 repo ca29917ed feat: load module banner on newly installed modules (#1129) 4868b7850 Update Home.kt 26d7f4766 Update strings.xml 6ab4a99cf manager: fix some colors 000852fe2 manager: removed ksu_toolkit and zygisk shortcuts e002435ad manager: optimize destination route and fix navbar button highlights for non nabvar destination screens b541ec689 manager: prevent duplicate navigation to Home in NavBar 3769b42d3 manager: fixed navbar & shortcut destination route e771de703 manager: refactor nav route animations e1b511d01 kernel: Kbuild: Remove duplicate extras.o e7e293c88 kernel: use correct errno when add_try_umount failed (tiann/KernelSU#3212) 6aa18400f manager: back to home page first cf8b3a8a2 manager: don't enforce predictive back gesture 314fbc5a2 manager: add license info label for module repo fa2035d74 manager infocard now collapseable ca8e56e0e manager: make the navbar size better dynamic depending on screen sizes/dpi 95c2d2282 manager: adjust navbar shape 1760b5f1d manager: fixed navbar padding for snackbar 51c8f77ec manager: add visibility parameter for module repo json c7603568c manager: add a-z sorting and search button ad1a88606 manager add custom repo links 99d4ae98a manager changed refresh button icon fbdc23bcb manager: remove unnessary onsync button, now poull to reffresh fetches online templates too 11e4b1d77 manager: remove floating action buttons and added the action to topar 58faf4ebc manager: implement hide and reveal floating navbar on scroll cadc1b0d8 manager: fix padding for navbar items 63868c72d manager: improve floating navbar size 304c1a1cb manager: add jelly transition for floating navbar buttons 6501accc4 manager: implement floating navbar 56006c50c manager: integrate module repo into module screen ec215a2fc kernel: Fix `setup_selinux` using `__task_cred` directly (tiann/KernelSU#3189) fe1fb51bf manager: add flash anykernel intent 70a274998 manager: add module/action shortcuts ec1784370 manager: add fileOutputStream interface to WebUi 26ff5aeee manager: load module list from online repo json 699d513af manager: add essential tool install screen d86d45bc8 manager: add meta module install screen cfaa5d663 manager: turn screen off first before rebooting to recovery a32cb83c6 kernel: Fix potential memory leaks (tiann/KernelSU#3170) (#1082) 5ce30b065 manager: support install lkm by flashing apk in recovery ab7b99e34 kernel: fix bad pointer dereference for uname spoof 2567adae7 manager: slight improvements to module screen 0098eea89 kernel: supercalls: expose spoof uname function to userspace ecd489bbe kernel: improve Git repository detection for KernelSU versioning (tiann/KernelSU#3108) 5da83f740 kernel: Prune legacy (4.x) support (#1072) 9b6c22b49 kernel: Use more reasonable symbol name for newfstatat 81cd9e8bf kernel: Fixing symbol names causing x64 kernel compilation failure (#3147) d8dbb7b16 Add Dynamic Shortcuts and Refactor Static Shortcuts (#1067) e822400c6 kernel: ksud: Refine rc injection, fix issue of Android Canary 2601 cacd27e53 ksud: Update resetprop from Magisk v30.6 (#3144) (#1065) 8de61e230 kernel: Clean up selinux.c (tiann/KernelSU#3132) 8112c52b3 manager: hint kpnext launcher be503e2b2 manager: true edge-to-edge support ef7c36a80 manager: add KPatch-Next webui shortcut for ksun icon in homescreen 333bb622f manager: improve fetchAppList df4dc6b5e Revert "manager: redo fetchAppList onCreate" f97c6762b manager: redo fetchAppList onCreate ad22de915 kernel: check package name before check manager signature (tiann/KernelSU#3134) (#1052) 56879181a selinux: Cache SID lookups for domain checks (tiann/KernelSU#3128) (#1051) 8a61e8a84 Update AnyKernel3 Flashing logic and logging (#1045) 81dc3fa9b kernel: extras: avc log spoofing a30c086e6 kernel: Explicitly check zygote start in execve hook (tiann/KernelSU#3113) (#1038) f6a07575a Merge pull request #1035 from pershoot/dev1 abddb91c0 kernel: fix Wcalloc-transposed-args (tiann/KernelSU#3121) ae76a3c55 manager: removed global namespace toggle f1aedff26 kernel: supercalls: expose ksuver override 42e6e4a5c manager: fix anykernel selection bug 36eb7e50a manager: expose anykernel flasher for non-gki devices 0968ef549 ksud: manager: fix unresolved crates and sync with upstream 51b66579b kernel: Ensure manager is valid before installing fd (#3115) 022030192 kernel: use selinux_cred() method instead of directly use cred->security (#3111) 7ed598539 manager: fix all warnings 90cb7d2e3 ksuinit: use upstream (#3095) b03d21cd5 ksud: update dependencies (#3096) ae238d1c9 manager: add module donation button 2bb9ace01 manager: add anykernel3 flashing support f832368d6 kernel: bumping fallback ksu_version to avoid bad integer value for userspace a93546acf workflow: combine normal and spoofed manager build in a single workflow 81c604ada kernel: append to init.rc instead of prepending to atrace.rc (tiann/KernelSU#3107) (#1017) a630cd8f5 manager: refactor getZygiskImplementation 3e141e6af manager: determine partition recommendation for patching based on kernel version instead of android release suffix 93e37eda1 kernel: Update build setup (#1010) 0a05bd212 manager: better working mode status 2031a08d7 manager: show superuser app uid with dev options 56471673e kernel: supercalls: allow userspace to pull list entries (tiann#3040) 83a45a356 sulogv2 08dab4640 ksuinit: update dependencies and migrate to 2024 (#3088) 7fc17d05b kernel: fix kvrealloc compatibility (#3089) d01726550 kernel: use kvrealloc 8a03b707f manager: fix app icons not loading in webui-next 1e8e3f05e kernel: adjust ioctl IDs to avoid future ioctl conflicts b3f15f277 manager: add webview padding if no request from insets css (#3083) - Also expose ksu.enableInsets() for js to enable/disable webview insets. - Since not all webui support insets, insets now is disabled by default, but if web request resource from `internal/insets.css`, insets will be enabled once automatically. - No changes are required for current WebUI. This makes insets feature fully opt-in only, web that doesn't support inset will not be affected anymore. - Usecase: if a webui want to use inset, it can request insets css at first, but if it want to load external webpage in current window afterwards then it can use ksu.enableInsets(false) to disable insets. 3b5f477ca kernel: Allocate fake struct on heap (#3081) 43287bda1 manager: Remove androidCmakeVersion bce771bbd kernel: release seccomp filter (#3077) 11695a116 kernel: setuid_hook: Remove unused includes and function (#3072) c0944eb47 kernel: Refactor file_wrapper (#3070) b606f0ab8 manager: add better nesting for toggles of supported features c1f113e86 manager: fix enhanced security toggle state being inverted 66af7707b manager: add avc spoof toggle 52b7fc033 ksud: add avc spoof to feature bc3763763 kernel: extras: add avc spoof impl c298676e9 manager: fix and improve intent handling to avoid creating new instances b8db8c849 manager: add meta module implementation name and version f1ef1bdbc ksuinit: ignore has_kernelsu and load kernelsu module overriding in-built kernel driver 0041fe576 manager: improve settings screen 6115d8e95 manager: refactor amoled mode to take effect immedietly instead of restarting activity 899f900cb kernel: fix check format again (#3071) 872e1b8de kernel: fix root_groups defs (#3028) 8490b4655 Add mount namespace support 添加挂载命名空间支持 (#2909) 185362fe8 manager: improve exit and enter transition animations 2de3c864e manager: improve restart function to avoid activity crash 9b7c1e4ff Merge pull request #936 from fatalcoder524/add-shortcuts f9fe9f6df kernel: supercalls/debug: expose ksu_set_manager_appid to sys_reboot this is for debug and testing, this is locked to uid0 only anyway so I dont see issues. 5dc52a42c manager: implement new method to get manager app uid (fix developer mode crash) c5d2b28c9 kernel: sulog: basic ringbuffer su log 65e226e79 manager: add zygisk impl module indicator label item in module card cfa949a16 manager: add meta module indicator label item in module card 7bcd00675 manager: fix tertiary label item color combination on amoled mode 2277612dc src: removed more unused files 0829cb503 ksud: add back KSU_NEXT variable to scripts environment ca24c0d21 manager: fix applist fetching twice causing a crash if spammed open and close ec05b5c4c manager: bring back module restoration from backups df2ce803c remove some unused files (#3034) e27687f35 ci: Correct the file paths checked by clang-format; change trigger path in clang-format workflow (#3063) da81be97c kernel: reformat codes, add workflow to check format (#3062) 0ee37f60e ksud: Decrease log level on release build (#3058) 1b626e5a2 kernel: Install manager fd in task work (#3057) 1e119d30f ci: move ksuinit build to a single workflow (#3054) - This allow ksud-extras to include ksuinit. - Remove x64 ksuinit since there is no lkm for x64. 365ad88a9 kernel: Use GFP_ATOMIC for atomic context (#3052) 919953e98 kernel: Identify manager without PER_USER_RANGE (#3038) 3ad5286f5 ci: Fix cargo deps 1d81eca42 ci: Run rust checks for ksuinit and fix them e4d02c8dd ci: add ksuinit (#3026) d837b01cb kernel: use $(CC) for check_symbol target (#3041) ce3a89c8a kernel: check lkm symbols (#3035) f8df04342 kernel: use our cred to unmount, remove sepolicy of zygote (#3032) 084152e93 support kernel 6.18 (#2999) 37e48432e kernel: escape to ksu domain in execve hook, remove sepolicy between … (#3031) 84a0506da kernel: Remove sepolicy of kernel domain 50968fe52 ksud: more verbose log (#3021) 36075e36a kernel: Remove second stage init handling for old system 8ccbd93bc ksud: Add process info in bugreport (#3014) cc31437d1 kernel: Move kernel part build rules from Makefile to Kbuild (#3003) 8a7495108 manager: fix webui load indefenitely if app list is not initialized (#3012) edf8e48e4 workflow: always sign manager REVERT: 194a4d053 kernel: hook: add app_profile.h include to hook_manager. REVERT: 3589903a0 kernel: hook: rename syscall_fn_t to ksu_syscall_fn_t REVERT: 536f9cfdb kernel: util.h: add ksu_sys_unshare macro for > 4.17 kernels REVERT: 3b0ed1671 legacy: sepolicy: port add_rule_raw bool error propagation from dev REVERT: f14c77acc legacy: Kbuild: derive version from commit count (drop +200 offset) REVERT: 30b65314c fix(selinux_hide): don't reject every app-uid security_check_context write REVERT: 48972b9d9 kernel: port dev branch features to non-GKI legacy layer REVERT: 65571d435 uapi: sync ABI to dev branch (keep #define style for legacy toolchains) REVERT: dd074bc6c Kbuild: Fix missing replacements in hooks.c (#1425) REVERT: 9b36ff0f3 kernel: selinux_hide: rework non-functionals in kprobes hook (#1441) REVERT: f6a1570cc legacy: non-GKI update — execveat (new bionic), hardening fixes, syscall table hooking scheme (#1462) REVERT: a54e4fa46 kernel: Don't use kprobes if we don't have functional kprobes REVERT: 53791c92b manager: throne_tracker: fix ABBA deadlock with packages.list rename REVERT: fcb26cac2 policy/allowlist: implement strscpy_pad fallback for older kernels REVERT: 7b3fb9835 uapi: convert static const to #define for compile-time constants REVERT: fd093e8b8 fix: fixing 4.9 compatbility issues (#1385) REVERT: 07692d96a kernel: purge SuSFS remnants REVERT: ab2bdab77 Fix compilation compatibility for Linux Kernel 4.9 (#1382) REVERT: eb139a6de fix: Adding an #if to make compatibility between 4.19 and earlier kernels and 4.14 and older kernels (#1377) REVERT: 13ad2b4cb fix: sucompat, __init/__exit macros (legacy) (#1376) REVERT: 430a73921 sync legacy: sulog, SELinux hide, adb root (#1364) REVERT: 77b30272a [Port] port selinux_hide from dev branch (#1297) REVERT: fc33995ce Change ksu_kvfree parameter to const (#1210) REVERT: ff7b3b451 kernel: selinux/rules: Pin task to current CPU to avoid cross-CPU rwlock release REVERT: c49a6316c fix: backport scheduler header for legacy kernel compatibility REVERT: 9b08e8886 kernel: sync version code REVERT: e7c00c828 ignore manager dir REVERT: 2ab0a0d3e kernel: Replace GFP_ATOMIC flags in throne tracker REVERT: 798945d0e Revert "kernel: selinux: fix slow path string comparison and remove dead code" REVERT: b4d0ab28e sync ksu version with dev branch REVERT: 63e787b2b Reapply "kernel: sepolicy: use GFP_KERNEL (tiann/KernelSU#3271)" REVERT: c757f80de kernel: compat: `strscpy_pad` for kernels <= 4.14 REVERT: 688b13b81 kernel: fallback to preemptible memory read on nofault failure REVERT: 8eacec77d kernel: ksud: handle newfstat rc size injection REVERT: de1d32244 kernel: supercall: Use strscpy/strlcpy for CHANGE_SPOOF_UNAME REVERT: cecdd9ff0 kernel: Don't advertise webview zygote in umount list (tiann/KernelSU#3389) REVERT: 747fed073 kernel: mark more functions as init/exit functions (tiann/KernelSU#3380) REVERT: 19944600c kernel: bump app profile version, migrate selinux domain (tiann/KernelSU#3363) REVERT: 54d514bda kernel: move selinux context to ksu REVERT: 85f7f1f8a kernel: Fix absolute src handling in Kbuild (tiann/KernelSU#3390) REVERT: 50069ee01 kernel: Fix extmod config propagation for manager/policy/debug REVERT: 4a3a0689d fix: GKI kernel build REVERT: d0dd36c8e kernel: fix uapi REVERT: 86624a963 kernel: unified uapi header REVERT: 5f5172f91 kernel: Format a few spaces to tabs (sucompat) REVERT: 4c9a3c205 kernel: sucompat: fallback to sh when ksud is unavailable REVERT: 765a69f61 kernel: allow disable manager or policy REVERT: 813bc8a7e kernel: reorganize source layout REVERT: 4b95101ef kernel: add missing init_session_keyring variable for legacy kernels REVERT: 46bb0f058 Deleting this block for kernel 4.9, as it causes a BUG when override_creds (#1197) REVERT: f029653f7 kernel: selinux: minify rules REVERT: 27ef2d2be kernel: fix copy avtab (tiann/KernelSU#3352) REVERT: d3c01dd83 kernel_umount: fixup printout and avoid UAF (tiann/KernelSU#3338) REVERT: 6bfa17679 supercall: perform free_pid() calls for kernel 6.15+ (tiann/KernelSU#3331) REVERT: 0306a23ab feat: safe exit (tiann/KernelSU#3317) REVERT: d70eebed3 kernel: remove usage of get_current_cred REVERT: d1e064fbe feat: support switch to init_group (tiann/KernelSU#3322) REVERT: 09093de75 kernel: Kbuild: align KVER with dev branch changes REVERT: 1e65e8655 kernel: selinux: fix slow path string comparison and remove dead code REVERT: a1c38dc5a kernel: compat: resolve mount math bugs, dead code, and memory allocation abuse REVERT: 5ab39a28b kernel: throne_tracker: resolve race condition in async kworker state REVERT: 7a26364cb kernel: remove util.c and try_set_access_flag dead code REVERT: 6ed11562a kernel: hook_manager: resolve spinlock deadlocks and unsafe memory reads REVERT: 79cfc769e kernel: lsm_hooks: fix race conditions, remove dead code and optimize logging REVERT: da543ef9c kernel: lsm_hooks: resolve strict signature mismatch and dentry anti-pattern REVERT: cb1028e7f kernel: app_profile: remove dead mount namespace code REVERT: 1e162d1dd kernel: supercalls: prevent integer overflow and clean up dead code REVERT: 5e48884f4 kernel: setuid_hook: untangle preprocessor macros and prevent NULL pointer panic REVERT: 917775f2e kernel: ksud: prevent atomic panics and fix 32-bit compat in fstat kretprobe REVERT: bcb08758b fix(ksud): remove unsafe memory access hacks in execve kprobe REVERT: 1ff11c111 kernel: sucompat: align userspace stack buffer to 16 bytes REVERT: 916fc4460 kernel: sucompat: safely read execve paths without preempt/access-flag hacks REVERT: 83dde735e kernel: apk_sign: Optimize I/O reads in ZIP parsing loop for APK signature check REVERT: 037e9c006 kernel: apk_sign: Optimize EOCD signature search loop REVERT: db9eae946 kernel: allowlist: optimize `ksu_get_root_profile` linear scan REVERT: a9d7764f1 kernel: throne_tracker: fixup deadlocks on iterate_dir REVERT: 050611872 kernel: throne_tracker: offload runtime tracking to delayed_work REVERT: 85421904f kernel: allowlist: use workqueue instead of init task_work for saving REVERT: a587f23be selinux: add compatibility for pre-4.12 kernels REVERT: 3ef17a5bc kernel: lsm_hooks: prevent VFS deadlocks and optimize permission checks REVERT: 55b220850 Revert "kernel: sepolicy: use GFP_KERNEL (tiann/KernelSU#3271)" REVERT: 785e0bb6e fix: restore missing LSM init for built-in/manual hooks REVERT: b44b482b1 kernel: selinux/rules: backport handle_sepolicy to legacy policydb REVERT: 80bfcb7fd kernel: legacy support for new sepolicy on legacy kernels REVERT: 942853eed feat: jailbreak by Magica (tiann/KernelSU#3268) REVERT: 934c15291 kernel: sync KSU_VERSION with dev branch REVERT: 9a134d03f kernel: fix process marking for built-in mode (tiann/KernelSU#3284) REVERT: 04b9923fe kernel: Fix RLIMIT_NPROC leak on root escape (tiann/KernelSU#3286) REVERT: 33349808e kernel: upgrade ddk, use ddk-min (tiann/KernelSU#3280) REVERT: 6a0712f24 kernel: sepolicy: use GFP_KERNEL (tiann/KernelSU#3271) REVERT: 9515aa4b6 kernel: enforcing selinux at late-load mode REVERT: 3bfc56a35 feat: add late-load mode support (tiann/KernelSU#3258) REVERT: 71e0585c3 kernel: refine stackprotector workaround (tiann/KernelSU#3264) REVERT: 1cd7fd815 kernel: make clang-format happy REVERT: 92e845f37 kernel: Only check CONFIG_STACKPROTECTOR_PER_TASK on arm64 (tiann/KernelSU#3263) REVERT: 3f4eb7dde kernel: add missing attribute REVERT: 1d79ce51e kernel: Provide own stackprotector symbol if necessary REVERT: d8fa0fc81 kernel: Use ksu cred to save allowlist (tiann/KernelSU#3243) REVERT: 8f39f4a16 Revert "kernel: Explicitly check zygote start in execve hook (tiann/KernelSU#3113) (#1038)" REVERT: 1ce19e536 kernel: sync KSU_VERSION with v3.1.0 stable tag REVERT: ff629805c kernel: Avoid malloc in remove_uid_from_arr() REVERT: 1a608613b kernel: use rcu to access allowlist, refactor get allowlist api REVERT: 119b36986 kernel: don't use "reset seccomp filter count when escaping to root" for kernel version <5.9.0 REVERT: fe83b2d09 kernel: sync KSU_VERSION wit dev branch REVERT: 8174393b3 kernel: use correct errno when add_try_umount failed (tiann/KernelSU#3212) REVERT: 0a815847e kernel: supercalls: take sulog_init_heap() out of kprobes guard to fix sulog for manual hooks REVERT: 1fe50d167 kernel: Kbuild: Remove duplicate extras.o REVERT: 85dde0cde kernel: ksud: Restore init.rc injection for manual hooks REVERT: 6f532c03e kernel: sync KSU_VERSION with dev branch REVERT: d77224355 kernel: Fix `setup_selinux` using `__task_cred` directly (tiann/KernelSU#3189) REVERT: c24b3a1ea kernel: ksud: read: add fallback to /init.rc REVERT: 57abef815 kernel: improve Git repository detection for KernelSU versioning (tiann/KernelSU#3108) REVERT: 93c196104 kernel: Use more reasonable symbol name for newfstatat REVERT: 8d7f119ce kernel: Fixing symbol names causing x64 kernel compilation failure (#3147) REVERT: f9df4c57f kernel: ksud: Refine rc injection, fix issue of Android Canary 2601 REVERT: b966ce86d kernel: Clean up selinux.c (tiann/KernelSU#3132) REVERT: 21058f79b kernel: Explicitly check zygote start in execve hook (tiann/KernelSU#3113) (#1038) REVERT: 863c18044 kernel: remove innecesary code in ksud.c REVERT: 107de9c16 kernel: check package name before check manager signature (tiann/KernelSU#3134) (#1052) REVERT: 46644093b selinux: Cache SID lookups for domain checks (tiann/KernelSU#3128) (#1051) REVERT: ed226983e kernel: Fix potential memory leaks (tiann/KernelSU#3170) (#1082) REVERT: 5e276d4ed kernel: abort manual hook compilation if not found ksu_handle_sys_reboot (#1093) REVERT: 8002f622b kernel: supercalls: expose spoof uname function to userspace (#1081) REVERT: 511dfff82 kernel: remove unnecesary duplicated code in sys_reboot (#1073) REVERT: 00127f2de Revert "kernel: ksud: migrate init.rc handling to security_file_permission LSM" (#1056) REVERT: d7de833a9 Sync legacy with dev branch and update scope minimized manual hooks 1.7 (#1047) REVERT: 0356464d9 kernel: fix ksu_handle_faccessat hook not found for manual hook check REVERT: bab4d90a6 Merge pull request #1029 from maxsteeel/legacy REVERT: 1551e9a0e kernel: set KSU_KPROBES_HOOK if not defined KSU_MANUAL_HOOK REVERT: 919b79a60 kernel: apk_sign: fix return check for ksu_sha256 REVERT: 8c0c055f9 kernel: supercalls: expose ksuver override REVERT: 5712ea72e kernel: Add some backports and remove some compatibility code REVERT: d20831e4e kernel: remove unused cflags REVERT: 70830cb12 kernel: update sulogv2 REVERT: 90ce7c45f kernel: Explicitly check zygote start in execve hook REVERT: 69e9fa30c kernel: Ensure manager is valid before installing fd (#3115) REVERT: b68370790 kernel: use selinux_cred() method instead of directly use cred->security (#3111) REVERT: fd7bb77a4 kernel: bumping fallback ksu_version to avoid bad integer value for userspace REVERT: 800a7a203 sync legacy with dev branch and other things (#1021) REVERT: a7a85040f fix issues in legacy branch (#1007) REVERT: 391eb9129 kernel: legacy, add missing early return in ksu_handle_execveat_sucompat (#1009) REVERT: 3d303237d kernel: correct header guard in seccomp_cache.h REVERT: 5f4c923db kernel: sync KSU_VERSION with dev branch REVERT: 5abd0cbdc sync legacy branch with dev branch (#998) REVERT: cfd00daef kernel: fix compilation errors in non-gki kernels (#996) REVERT: 4f8090cdc fix some issues in legacy branch (#995) REVERT: a93da680e add support for legacy/non-gki kernels (#976) git-subtree-dir: drivers/kernelsu git-subtree-split: 3b1e46b04095bd93d506a48a4b6da5eceafeec10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.