- 17 Jun, 2020 1 commit
-
-
topjohnwu authored
-
- 04 Jun, 2020 1 commit
-
-
topjohnwu authored
Introduce new domain `magisk_client` and new file type `magisk_exec`. Connection to magiskd's always-on socket is restricted to magisk_client only. Whitelisted process domains can transit to magisk_client through executing files labelled magisk_exec. The main magisk binary shall be the only file labelled as magisk_exec throughout the whole system. All processes thus are no longer allowed to connect to magiskd directly without going through the proper magisk binary. Connection failures are silenced from audit logs with dontaudit rules, so crazy processes which traverse through all unix domain sockets to try connection can no longer check logcat to know the actual reason behind EACCES, leaking the denied process policy (which is u:r:magisk:s0). This also allows us to remove many rules that open up holes in untrusted_app domains that were used to make remote shell work properly. Since all processes establishing the remote shell are now restricted to the magisk_client domain, all these rules are moved to magisk_client. This makes Magisk require fewer compromises in Android's security model. Note: as of this commit, requesting new root access via Magisk Manager will stop working as Magisk Manager can no longer communicate with magiskd directly. This will be addressed in a future commit that involves changes in both native and application side.
-
- 03 Jun, 2020 3 commits
- 01 Jun, 2020 3 commits
-
-
topjohnwu authored
-
topjohnwu authored
Use C++ magic to strip out debug logs at compile time
-
Chris Renshaw authored
Co-authored-by:
John Wu <topjohnwu@gmail.com>
-
- 31 May, 2020 2 commits
-
-
Shaka Huang authored
Signed-off-by:
Shaka Huang <shakalaca@gmail.com>
-
Ilya Kushnir authored
-
- 30 May, 2020 7 commits
-
-
topjohnwu authored
-
Facundo Montero authored
This update aims to provide better consistency to the Spanish translation by properly separating each possible pronoun. Other small grammar errors have also been corrected.
-
AioiLight authored
-
JoanVC100 authored
-
vvb2060 authored
-
osm0sis authored
- legacy devices brought up to Android 10 may now use a compressed dt in a hdr_v0 AOSP dt variant extra section, so detect, decompress and recompress this - so far these have only been done using lz4 compression (latest format revision magic), e.g. LOS 17.1 victara (Moto X)
-
topjohnwu authored
-
- 29 May, 2020 1 commit
-
-
topjohnwu authored
-
- 25 May, 2020 2 commits
- 24 May, 2020 2 commits
-
-
topjohnwu authored
For match-all-type rules (e.g. "allow magisk * * *" used in Magisk), we used to iterate and apply rules on all existing types. However, this is actually unnecessary as all selinux types should have at least 1 attributes assigned to it (process types "domain", file context types "file_type" etc.). This means in order to create rules that applies to all types, we actually only need to create rules for all attributes. This optimization SIGNIFICANTLY reduces the patched sepolicy that is loaded into the kernel when running Magisk. For example on Pixel 4 XL running Android R DP4, the sepolicy sizes are patched (before) : 3455948 patched (after) : 843176 stock : 630229 The active sepolicy size actually impacts the performance of every single operation in the operating system, because the larger the policies gets, the longer it takes for the kernel to lookup and match rules.
-
topjohnwu authored
-
- 23 May, 2020 4 commits
- 22 May, 2020 1 commit
-
-
topjohnwu authored
- Update help message to match the spec - Make tokenization not seg fault in certain conditions - Moar template + macro magic to reduce boilerplate
-
- 21 May, 2020 1 commit
-
-
topjohnwu authored
-
- 19 May, 2020 3 commits
-
-
topjohnwu authored
It is possible that a module is breaking the device so bad that zygote cannot even be started. In this case, system_server cannot start and detect the safe mode key combo, set the persist property, and reboot. Also on old Android versions, the system directly goes to safe mode after detecting a key combo without rebooting, defeating the purpose of Magisk's safe mode protection if we only check for the persist property. Directly adding key combo check natively in magiskd allows us to enter Magisk safe mode before the system is even aware of it.
-
Chris Renshaw authored
-
topjohnwu authored
-
- 18 May, 2020 8 commits
- 17 May, 2020 1 commit
-
-
Tornike Khintibidze authored
-