-
-
Couldn't load subscription status.
- Fork 2.7k
kernelsu: LSM: Identify modules by more than name #1785
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
|
Oh no I didn't think about this 🥲 |
|
Extra patches might be needed, but this is directly into the kernel |
|
This won't work for LKM mode, we need another solution. |
Find a way to reduce lsm active count to make it lower than |
This is based on commit "LSM: Identify modules by more than name" https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.8&id=f3b8788cde61b02f1e6c202f8fac4360e6adbafc Which is a requirement to build on kernel 6.8+. I use 912 as the ID for KernelSU as that's the date the Github repo was created. Signed-off-by: hmtheboy154 <[email protected]>
|
@tiann seems like there are some changes so extra edit in kernel is needed Although they mentioned |
This is based on commit "LSM: Identify modules by more than name" https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.8&id=f3b8788cde61b02f1e6c202f8fac4360e6adbafc Which is a requirement to build on kernel 6.8+. I use 912 as the ID for KernelSU as that's the date the Github repo was created. Signed-off-by: hmtheboy154 <[email protected]>
This is based on commit "LSM: Identify modules by more than name" https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.8&id=f3b8788cde61b02f1e6c202f8fac4360e6adbafc Which is a requirement to build on kernel 6.8+. I use 912 as the ID for KernelSU as that's the date the Github repo was created. Signed-off-by: hmtheboy154 <[email protected]>
This is based on commit "LSM: Identify modules by more than name" https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.8&id=f3b8788cde61b02f1e6c202f8fac4360e6adbafc Which is a requirement to build on kernel 6.8+. I use 912 as the ID for KernelSU as that's the date the Github repo was created. Signed-off-by: hmtheboy154 <[email protected]>
This is based on commit "LSM: Identify modules by more than name" https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.8&id=f3b8788cde61b02f1e6c202f8fac4360e6adbafc Which is a requirement to build on kernel 6.8+. I use 912 as the ID for KernelSU as that's the date the Github repo was created. Signed-off-by: hmtheboy154 <[email protected]>
This is based on commit "LSM: Identify modules by more than name" https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.8&id=f3b8788cde61b02f1e6c202f8fac4360e6adbafc Which is a requirement to build on kernel 6.8+. I use 912 as the ID for KernelSU as that's the date the Github repo was created. Signed-off-by: hmtheboy154 <[email protected]>
This is based on commit "LSM: Identify modules by more than name" https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.8&id=f3b8788cde61b02f1e6c202f8fac4360e6adbafc Which is a requirement to build on kernel 6.8+. I use 912 as the ID for KernelSU as that's the date the Github repo was created. Signed-off-by: hmtheboy154 <[email protected]>
|
With the fact that some recent phones start shipped with kernel 6.12, if anyone try this PR please remember that you need to put this into your kernel or else you won't be able to boot |
|
@hmtheboy154 lsm hook hack is kill damn, ksu has to hook prctl and setuid on kprobe for LKM |
if it can, I don't even know if LKM is possible after 6.8+ |
|
its still doable, the issue is that they have to move the hooks to kprobe (prctl, setuid) for gki, even this can be skipped, we can just manually hook on security/security.c |
* This is a squashed of un-merged pull requests of Official KernelSU * LKM support are not available. * Require this additional patch to avoid kernel panic because of "Too many LSMs registered": android-generic/kernel-zenith@7042991 * Un-merged pull requests of Official KernelSU: tiann#1785 tiann#2662 * This commit probably not 100% completed. Signed-off-by: rsuntk <[email protected]>
* This is a squashed of un-merged pull requests of Official KernelSU * LKM support are not available. * Require this additional patch to avoid kernel panic because of "Too many LSMs registered": android-generic/kernel-zenith@7042991 * Un-merged pull requests of Official KernelSU: tiann/KernelSU#1785 tiann/KernelSU#2662 * This commit probably not 100% completed. Signed-off-by: rsuntk <[email protected]>
* This is a squashed of un-merged pull requests of Official KernelSU * LKM support are not available. * Require this additional patch to avoid kernel panic because of "Too many LSMs registered": android-generic/kernel-zenith@7042991 * Un-merged pull requests of Official KernelSU: tiann/KernelSU#1785 tiann/KernelSU#2662 * This commit probably not 100% completed. Signed-off-by: rsuntk <[email protected]>
* This is a squashed of un-merged pull requests of Official KernelSU * LKM support are not available. * Require this additional patch to avoid kernel panic because of "Too many LSMs registered": android-generic/kernel-zenith@7042991 * Un-merged pull requests of Official KernelSU: tiann/KernelSU#1785 tiann/KernelSU#2662 * This commit probably not 100% completed. Signed-off-by: rsuntk <[email protected]>
* This is a squashed of un-merged pull requests of Official KernelSU * LKM support are not available. * Require this additional patch to avoid kernel panic because of "Too many LSMs registered": android-generic/kernel-zenith@7042991 * Un-merged pull requests of Official KernelSU: tiann/KernelSU#1785 tiann/KernelSU#2662 * This commit probably not 100% completed. Signed-off-by: rsuntk <[email protected]>
* This is a squashed of un-merged pull requests of Official KernelSU * LKM support are not available. * Require this additional patch to avoid kernel panic because of "Too many LSMs registered": android-generic/kernel-zenith@7042991 * Un-merged pull requests of Official KernelSU: tiann/KernelSU#1785 tiann/KernelSU#2662 * This commit probably not 100% completed. Signed-off-by: rsuntk <[email protected]>
* This is a squashed of un-merged pull requests of Official KernelSU * LKM support are not available. * Require this additional patch to avoid kernel panic because of "Too many LSMs registered": android-generic/kernel-zenith@7042991 * Un-merged pull requests of Official KernelSU: tiann#1785 tiann#2662 * This commit probably not 100% completed. Signed-off-by: rsuntk <[email protected]>
* This is a squashed of un-merged pull requests of Official KernelSU * LKM support are not available. * Require this additional patch to avoid kernel panic because of "Too many LSMs registered": android-generic/kernel-zenith@7042991 * Un-merged pull requests of Official KernelSU: tiann#1785 tiann#2662 * This commit probably not 100% completed. Signed-off-by: rsuntk <[email protected]>
* This is a squashed of un-merged pull requests of Official KernelSU * LKM support are not available. * Require this additional patch to avoid kernel panic because of "Too many LSMs registered": android-generic/kernel-zenith@7042991 * Un-merged pull requests of Official KernelSU: tiann#1785 tiann#2662 * This commit probably not 100% completed. Signed-off-by: rsuntk <[email protected]>
* This is a squashed of un-merged pull requests of Official KernelSU * LKM support are not available. * Require this additional patch to avoid kernel panic because of "Too many LSMs registered": android-generic/kernel-zenith@7042991 * Un-merged pull requests of Official KernelSU: tiann#1785 tiann#2662 * This commit probably not 100% completed. Signed-off-by: rsuntk <[email protected]>



This is based on commit "LSM: Identify modules by more than name" https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.8&id=f3b8788cde61b02f1e6c202f8fac4360e6adbafc
Which is a requirement to build on kernel 6.8+. I use 912 as the ID for KernelSU as that's the date the Github repo was created.