Sync legacy with dev branch and update scope minimized manual hooks 1.7#1047
Merged
Conversation
Signed-off-by: Sorayukii <sorayukii69@gmail.com>
kernel, ksud, manager: Remove enhanced security feature (tiann/KernelSU#3123)
* kernel: extras: base implementation of avc log spoofing * kernel: extras: properly version out slow_avc_audit_pre_handler * kernel: extras: add avc spoof to feature this is a rebase of: KOWX712/KernelSU@4b6f76d * kernel/extra: replace sensitive context with priv_app ref: aviraxp/ZN-AuditPatch@a0a46bd Co-Authored-By: backslashxx <118538522+backslashxx@users.noreply.github.com> Co-Authored-By: Wang Han <18079988+aviraxp@users.noreply.github.com> Signed-off-by: Sorayukii <sorayukii69@gmail.com>
devlog backslashxx/KernelSU@5ba658b...8a6ae25 backslashxx/KernelSU@b7df5d1...754bbd5 Signed-off-by: backslashxx <118538522+backslashxx@users.noreply.github.com> Signed-off-by: Sorayukii <sorayukii69@gmail.com>
../drivers/kernelsu/lsm_hooks.c:145:32: error: use of undeclared identifier 'ksu_key_permission'; did you mean 'ksu_inode_permission'?
145 | LSM_HOOK_INIT(key_permission, ksu_key_permission),
| ^~~~~~~~~~~~~~~~~~
| ksu_inode_permission
../include/linux/lsm_hooks.h:2060:57: note: expanded from macro 'LSM_HOOK_INIT'
2060 | { .head = &security_hook_heads.HEAD, .hook = { .HEAD = HOOK } }
| ^~~~
../drivers/kernelsu/lsm_hooks.c:107:5: note: 'ksu_inode_permission' declared here
107 | int ksu_inode_permission(struct inode inode, int mask)
| ^
../drivers/kernelsu/lsm_hooks.c:145:32: error: incompatible function pointer types initializing 'int ()(key_ref_t, const struct cred , unsigned int)' (aka 'int ()(struct __key_reference_with_attributes *, const struct cred *,
unsigned int)') with an expression of type 'int (struct inode *, int)' [-Wincompatible-function-pointer-types]
145 | LSM_HOOK_INIT(key_permission, ksu_key_permission),
| ^~~~~~~~~~~~~~~~~~
2 errors generated.
Signed-off-by: Sorayukii <sorayukii69@gmail.com>
|
this break for CONFIG_KSU_KPROBE_HOOKS=y ksu_handle_sys_read() used in sys_read_handler_pre(), so we shouldn't mark it as deprecated. drivers/kernelsu/ksud.c:803:9: error: 'ksu_handle_sys_read' is deprecated [-Werror,-Wdeprecated-declarations] |
Contributor
Author
I am not use kprobe hooks, waiting for kprobes user to fix it |
slipzryzens
pushed a commit
to slipzryzens/KernelSU-Next
that referenced
this pull request
Jan 6, 2026
….7 (KernelSU-Next#1047) * KSU-Next: Debloat Signed-off-by: Sorayukii <sorayukii69@gmail.com> * kernel: fix Wcalloc-transposed-args (tiann/KernelSU#3121) * Merge pull request KernelSU-Next#1035 from pershoot/dev1 kernel, ksud, manager: Remove enhanced security feature (tiann/KernelSU#3123) * kernel: extras: avc log spoofing * kernel: extras: base implementation of avc log spoofing * kernel: extras: properly version out slow_avc_audit_pre_handler * kernel: extras: add avc spoof to feature this is a rebase of: KOWX712/KernelSU@4b6f76d * kernel/extra: replace sensitive context with priv_app ref: aviraxp/ZN-AuditPatch@a0a46bd Co-Authored-By: backslashxx <118538522+backslashxx@users.noreply.github.com> Co-Authored-By: Wang Han <18079988+aviraxp@users.noreply.github.com> Signed-off-by: Sorayukii <sorayukii69@gmail.com> * kernel: ksud: migrate init.rc handling to security_file_permission LSM devlog backslashxx/KernelSU@5ba658b...8a6ae25 backslashxx/KernelSU@b7df5d1...754bbd5 Signed-off-by: backslashxx <118538522+backslashxx@users.noreply.github.com> Signed-off-by: Sorayukii <sorayukii69@gmail.com> * kernel: Try to fix CONFIG_KSU_ALLOWLIST_WORKAROUND ../drivers/kernelsu/lsm_hooks.c:145:32: error: use of undeclared identifier 'ksu_key_permission'; did you mean 'ksu_inode_permission'? 145 | LSM_HOOK_INIT(key_permission, ksu_key_permission), | ^~~~~~~~~~~~~~~~~~ | ksu_inode_permission ../include/linux/lsm_hooks.h:2060:57: note: expanded from macro 'LSM_HOOK_INIT' 2060 | { .head = &security_hook_heads.HEAD, .hook = { .HEAD = HOOK } } | ^~~~ ../drivers/kernelsu/lsm_hooks.c:107:5: note: 'ksu_inode_permission' declared here 107 | int ksu_inode_permission(struct inode inode, int mask) | ^ ../drivers/kernelsu/lsm_hooks.c:145:32: error: incompatible function pointer types initializing 'int ()(key_ref_t, const struct cred , unsigned int)' (aka 'int ()(struct __key_reference_with_attributes *, const struct cred *, unsigned int)') with an expression of type 'int (struct inode *, int)' [-Wincompatible-function-pointer-types] 145 | LSM_HOOK_INIT(key_permission, ksu_key_permission), | ^~~~~~~~~~~~~~~~~~ 2 errors generated. Signed-off-by: Sorayukii <sorayukii69@gmail.com> --------- Signed-off-by: Sorayukii <sorayukii69@gmail.com> Signed-off-by: backslashxx <118538522+backslashxx@users.noreply.github.com> Co-authored-by: libingxuan <84086386+aaaaaaaa-815@users.noreply.github.com> Co-authored-by: pershoot <190600+pershoot@users.noreply.github.com> Co-authored-by: KOWX712 <leecc0503@gmail.com> Co-authored-by: backslashxx <118538522+backslashxx@users.noreply.github.com> Co-authored-by: Wang Han <18079988+aviraxp@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
7 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changes:
Tested k4.9.337