Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

kernelsu: LSM: Identify modules by more than name #1785

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

kernelsu: LSM: Identify modules by more than name #1785

wants to merge 1 commit into from

Conversation

hmtheboy154
Copy link
Contributor

This is based on commit "LSM: Identify modules by more than name" https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.8&id=f3b8788cde61b02f1e6c202f8fac4360e6adbafc

Which is a requirement to build on kernel 6.8+. I use 912 as the ID for KernelSU as that's the date the Github repo was created.

@hmtheboy154
Copy link
Contributor Author

image
uh oh

@hmtheboy154
Copy link
Contributor Author

Oh no I didn't think about this 🥲
https://elixir.bootlin.com/linux/v6.8/source/security/security.c#L558

@hmtheboy154
Copy link
Contributor Author

hmtheboy154 commented May 31, 2024 •
edited
Loading

Extra patches might be needed, but this is directly into the kernel
https://elixir.bootlin.com/linux/v6.8/source/security/security.c#L55
Basically add CONFIG_KSU into LSM_CONFIG_COUNT define. I think we might have to update the wiki for this @tiann

@hmtheboy154
Copy link
Contributor Author

image
yep, it's working now

@hmtheboy154
Copy link
Contributor Author

android-generic/kernel-zenith@40384ac

@tiann
Copy link
Owner

tiann commented Jun 1, 2024

This won't work for LKM mode, we need another solution.

@hmtheboy154
Copy link
Contributor Author

This won't work for LKM mode, we need another solution.

Find a way to reduce lsm active count to make it lower than LSM_CONFIG_COUNT and then load the LKM ?

@hmtheboy154
Copy link
Contributor Author

photo_2024-06-01_19-39-34

ok this is bad 🤔

@yujincheng08 yujincheng08 marked this pull request as draft July 6, 2024 05:41
@hmtheboy154
kernelsu: LSM: Identify modules by more than name
a4b2d42 
This is based on commit "LSM: Identify modules by more than name"
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.8&id=f3b8788cde61b02f1e6c202f8fac4360e6adbafc

Which is a requirement to build on kernel 6.8+. I use 912 as the ID
for KernelSU as that's the date the Github repo was created.

Signed-off-by: hmtheboy154 <[email protected]>
@hmtheboy154 hmtheboy154 mentioned this pull request Oct 2, 2024
Open
3 tasks
@hmtheboy154
Copy link
Contributor Author

@tiann seems like there are some changes so extra edit in kernel is needed
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/security/security.c?h=v6.12.2&id=417c5643cd67a55f424b203b492082035d0236c3
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/security/security.c?h=v6.12.2&id=d6bd12e80bf94b055def6ff708e76f836b4b17ad
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/include/linux/lsm_count.h?h=v6.12.2&id=d51e783c17bab0c139bf78d6bd9d1f66673f7903

Although they mentioned static lsm calls, is that something new that could be helpful for us ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@hmtheboy154 @tiann