Manager
Branch: master
#ci_2246
Compare
Workflow run

Good bye me.weishu.kernelsu edition

Manager
Branch: master
#ci_2252

kernel: reformat codes, add workflow to check format (#3062)

Commit
Workflow run

- sync upstream: mksu
- manager: add dark amoled theme as requested

Manager
Branch: master
#ci_2255

remove some unused files (#3034)

- ksu已经不再提供内核发布，所以移除内核集成ksud功能，早在 #159 也移除了构建内核时集成ksud的功能
- 移除管理器riscv64支持，因为内核和ksud都不支持r5，~且短时内支持情况遥遥无期~
- 移除
export_symbol.txt，因为编译gki内核时候kleaf不会检查ksu的符号情况，lkm编译时ddk使用make编译，也不会检查导出符号

---

ci: Correct the file paths checked by clang-format; change trigger path in clang-format workflow (#3063)

Co-authored-by: 5ec1cff <ewtqyqyewtqyqy@gmail.com>

Compare
Workflow run

- kernel: sulog: basic ringbuffer su log

Download the latest ksu_toolkit for sulog feature

Manager
Branch: master
#ci_2256
Compare
Workflow run

- sync upstream: mksu

Manager
Branch: master
#ci_2261

kernel: Refactor file_wrapper
- Use d_dname to forge paths: Fixes an issue where some programs (such as screen) required a valid tty path.
- Enhance security using anon_inode_create_getfile and implements this function for older kernel versions.
- Support reopen from /proc/pid/fd

Compare
Workflow run

- manager: inject eruda when web debug option is enabled

Manager
Branch: master
#ci_2262

kernel: setuid_hook: Remove unused includes and function (#3072)

* is_allow_su is not needed anymore, since its used for validate prctl
checking (cmiiw)
* setuid_hook have so many unused headers, just include what we need

Signed-off-by: rsuntk <rissu.ntk@gmail.com>

Commit
Workflow run

Manager
Branch: master
#ci_2263

kernel: release seccomp filter (#3077)

Commit
Workflow run

Manager
Branch: master
#ci_2271
Compare
Workflow run

- sync upstream: compare
- sulog v2, toolkit webui isn't updated yet, I'm a bit lazy now.

sulog v2: timestamp support

https://github.com/backslashxx/ksu_toolkit/actions

Manager
Branch: master
#ci_2273

kernel: fix kvrealloc compatibility (#3089)

---

kernel: use kvrealloc

We used to think that oneplus protected the original memory with RO, but we are wrong. Why kfree()panic kernel is that original memory isn't allocated with kmalloc() but kvmalloc(). Normal device will eventually use kmalloc() anyway, but oneplus seems to use more aggressive memory allocation optimization and switched to vmalloc() path.

Use kvrealloc()to fix it. Note, kvrealloc() will check flags first and use kmalloc() if GFP_ATOMIC is passed, so it is fine to be called in kprobe context. This also fix the last memory leak we found in ksu driver.

Co-authored-by: Wang Han <416810799@qq.com>

Compare
Workflow run

Manager
Branch: master
#ci_2275

manager: fix all warnings (#3098)

---

ksuinit: use upstream (#3095)

---

ksuinit: update dependencies and migrate to 2024 (#3088)

Compare
Workflow run

Manager
Branch: master
#ci_2280

kernel: append to init.rc instead of prepending to atrace.rc (#3107)

Even though they are all triggered in post-fs-data stage, init.rc get
parsed and triggered first. This will make module noscripts run eariler
and help prevent race condition between module rc executes and service
starts. This also aligns behavior with Magisk.

Commit
Workflow run

Manager
Branch: master
#ci_2284

Translations update from Hosted Weblate (tiann#3049) 

---

kernel: use selinux_cred() method instead of directly use cred->security (#3111)

directly use cred->security will get the first registered security cred
blob, if newer kernel add a new lsm register a security cred too and
load before selinux, we will get that, and do undefined behavior

enfore use selinux_cred(cred) would fix this issue

See:
https://cs.android.com/android/_/android/kernel/common/+/bbd3662a834813730912a58efb44dd6df6d952e6

Compare
Workflow run

kernel: supercalls: expose ksuver override

Manager
Branch: master
#ci_2286

kernel: Ensure manager is valid before installing fd (#3115)

Or if manager is not crowned, userspace can pass the check if calling
setresuid(-1, -1, -1). Luckily, first setuid is usually called when
zygote forks into app and task flag is unmarked there, so this is not a
security issue.

Commit
Workflow run

Manager
Branch: master
#ci_2287

manager: support enable allow-shell and enable-adbd in manager

Commit
Workflow run

Ref: https://news.1rj.ru/str/mksu_ci/118

Manager
Branch: master
#ci_2287

manager: Fix webview card height issue

Commit
Workflow run

Manager
Branch: master
#ci_2292
Compare
Workflow run

- sync upstream: ksu

Manager
Branch: master
#ci_2296
Compare
Workflow run

sync upstream: compare

Manager
Branch: master
#ci_2299
Compare
Workflow run

- sync upstream: compare