#include #include #include #include #include #include #include "init.hpp" using namespace std; struct devinfo { int major; int minor; char devname[32]; char partname[32]; char dmname[32]; }; static vector dev_list; static void parse_device(devinfo *dev, const char *uevent) { dev->partname[0] = '\0'; parse_prop_file(uevent, [=](string_view key, string_view value) -> bool { if (key == "MAJOR") dev->major = parse_int(value.data()); else if (key == "MINOR") dev->minor = parse_int(value.data()); else if (key == "DEVNAME") strcpy(dev->devname, value.data()); else if (key == "PARTNAME") strcpy(dev->partname, value.data()); return true; }); } static void collect_devices() { char path[128]; devinfo dev{}; if (auto dir = xopen_dir("/sys/dev/block"); dir) { for (dirent *entry; (entry = readdir(dir.get()));) { if (entry->d_name == "."sv || entry->d_name == ".."sv) continue; sprintf(path, "/sys/dev/block/%s/uevent", entry->d_name); parse_device(&dev, path); sprintf(path, "/sys/dev/block/%s/dm/name", entry->d_name); if (access(path, F_OK) == 0) { auto name = rtrim(full_read(path)); strcpy(dev.dmname, name.data()); } dev_list.push_back(dev); } } } static struct { char partname[32]; char block_dev[64]; } blk_info; static int64_t setup_block() { if (dev_list.empty()) collect_devices(); for (int tries = 0; tries < 3; ++tries) { for (auto &dev : dev_list) { if (strcasecmp(dev.partname, blk_info.partname) == 0) LOGD("Setup %s: [%s] (%d, %d)\n", dev.partname, dev.devname, dev.major, dev.minor); else if (strcasecmp(dev.dmname, blk_info.partname) == 0) LOGD("Setup %s: [%s] (%d, %d)\n", dev.dmname, dev.devname, dev.major, dev.minor); else continue; dev_t rdev = makedev(dev.major, dev.minor); xmknod(blk_info.block_dev, S_IFBLK | 0600, rdev); return rdev; } // Wait 10ms and try again usleep(10000); dev_list.clear(); collect_devices(); } // The requested partname does not exist return -1; } static void switch_root(const string &path) { LOGD("Switch root to %s\n", path.data()); int root = xopen("/", O_RDONLY); vector mounts; parse_mnt("/proc/mounts", [&](mntent *me) { // Skip root and self if (me->mnt_dir == "/"sv || me->mnt_dir == path) return true; // Do not include subtrees for (const auto &m : mounts) { if (strncmp(me->mnt_dir, m.data(), m.length()) == 0 && me->mnt_dir[m.length()] == '/') return true; } mounts.emplace_back(me->mnt_dir); return true; }); for (auto &dir : mounts) { auto new_path = path + dir; xmkdir(new_path.data(), 0755); xmount(dir.data(), new_path.data(), nullptr, MS_MOVE, nullptr); } chdir(path.data()); xmount(path.data(), "/", nullptr, MS_MOVE, nullptr); chroot("."); LOGD("Cleaning rootfs\n"); frm_rf(root); } void MagiskInit::mount_rules_dir() { char path[128]; xrealpath(BLOCKDIR, blk_info.block_dev); xrealpath(MIRRDIR, path); char *b = blk_info.block_dev + strlen(blk_info.block_dev); char *p = path + strlen(path); auto do_mount = [&](const char *type) -> bool { xmkdir(path, 0755); bool success = xmount(blk_info.block_dev, path, type, 0, nullptr) == 0; if (success) mount_list.emplace_back(path); return success; }; // First try userdata strcpy(blk_info.partname, "userdata"); strcpy(b, "/data"); strcpy(p, "/data"); if (setup_block() < 0) { // Try NVIDIA naming scheme strcpy(blk_info.partname, "UDA"); if (setup_block() < 0) goto cache; } // WARNING: DO NOT ATTEMPT TO MOUNT F2FS AS IT MAY CRASH THE KERNEL // Failure means either f2fs, FDE, or metadata encryption if (!do_mount("ext4")) goto cache; strcpy(p, "/data/unencrypted"); if (xaccess(path, F_OK) == 0) { // FBE, need to use an unencrypted path custom_rules_dir = path + "/magisk"s; } else { // Skip if /data/adb does not exist strcpy(p, SECURE_DIR); if (xaccess(path, F_OK) != 0) return; strcpy(p, MODULEROOT); if (xaccess(path, F_OK) != 0) { goto cache; } // Unencrypted, directly use module paths custom_rules_dir = string(path); } goto success; cache: // Fallback to cache strcpy(blk_info.partname, "cache"); strcpy(b, "/cache"); strcpy(p, "/cache"); if (setup_block() < 0) { // Try NVIDIA naming scheme strcpy(blk_info.partname, "CAC"); if (setup_block() < 0) goto metadata; } if (!do_mount("ext4")) goto metadata; custom_rules_dir = path + "/magisk"s; goto success; metadata: // Fallback to metadata strcpy(blk_info.partname, "metadata"); strcpy(b, "/metadata"); strcpy(p, "/metadata"); if (setup_block() < 0 || !do_mount("ext4")) goto persist; custom_rules_dir = path + "/magisk"s; goto success; persist: // Fallback to persist strcpy(blk_info.partname, "persist"); strcpy(b, "/persist"); strcpy(p, "/persist"); if (setup_block() < 0 || !do_mount("ext4")) return; custom_rules_dir = path + "/magisk"s; success: // Create symlinks so we don't need to go through this logic again strcpy(p, "/sepolicy.rules"); xsymlink(custom_rules_dir.data(), path); } bool LegacySARInit::mount_system_root() { backup_files(); LOGD("Mounting system_root\n"); strcpy(blk_info.block_dev, "/dev/root"); do { // Try legacy SAR dm-verity strcpy(blk_info.partname, "vroot"); auto dev = setup_block(); if (dev >= 0) goto mount_root; // Try NVIDIA naming scheme strcpy(blk_info.partname, "APP"); dev = setup_block(); if (dev >= 0) goto mount_root; sprintf(blk_info.partname, "system%s", config->slot); dev = setup_block(); if (dev >= 0) goto mount_root; // Poll forever if rootwait was given in cmdline } while (config->rootwait); // We don't really know what to do at this point... LOGE("Cannot find root partition, abort\n"); exit(1); mount_root: xmkdir("/system_root", 0755); if (xmount("/dev/root", "/system_root", "ext4", MS_RDONLY, nullptr)) { if (xmount("/dev/root", "/system_root", "erofs", MS_RDONLY, nullptr)) { // We don't really know what to do at this point... LOGE("Cannot mount root partition, abort\n"); exit(1); } } switch_root("/system_root"); // Make dev writable xmkdir("/dev", 0755); xmount("tmpfs", "/dev", "tmpfs", 0, "mode=755"); mount_list.emplace_back("/dev"); // Use the apex folder to determine whether 2SI (Android 10+) bool is_two_stage = access("/apex", F_OK) == 0; LOGD("is_two_stage: [%d]\n", is_two_stage); #if ENABLE_AVD_HACK if (!is_two_stage) { if (config->emulator) { avd_hack = true; // These values are hardcoded for API 28 AVD xmkdir("/dev/block", 0755); strcpy(blk_info.block_dev, "/dev/block/vde1"); strcpy(blk_info.partname, "vendor"); setup_block(); xmount(blk_info.block_dev, "/vendor", "ext4", MS_RDONLY, nullptr); } } #endif return is_two_stage; } void BaseInit::exec_init() { // Unmount in reverse order for (auto &p : reversed(mount_list)) { if (xumount2(p.data(), MNT_DETACH) == 0) LOGD("Unmount [%s]\n", p.data()); } execv("/init", argv); exit(1); } void MagiskInit::setup_tmp(const char *path) { LOGD("Setup Magisk tmp at %s\n", path); xmount("tmpfs", path, "tmpfs", 0, "mode=755"); chdir(path); xmkdir(INTLROOT, 0755); xmkdir(MIRRDIR, 0); xmkdir(BLOCKDIR, 0); mount_rules_dir(); int fd = xopen(INTLROOT "/config", O_WRONLY | O_CREAT, 0); xwrite(fd, magisk_cfg.buf, magisk_cfg.sz); close(fd); // Create applet symlinks for (int i = 0; applet_names[i]; ++i) xsymlink("./magisk", applet_names[i]); xsymlink("./magiskpolicy", "supolicy"); chdir("/"); }