mirror of
https://github.com/topjohnwu/Magisk.git
synced 2024-11-27 20:15:29 +00:00
49f259065d
In the current implementation, Magisk will either have to recreate all early mount implementation (for legacy SAR and rootfs devices) or delegate early mount to first stage init (for 2SI devices) to access required partitions for loading sepolicy. It then has to recreate the split sepolicy loading implementation in-house, apply patches, then dump the compiled + patched policies into monolithic format somewhere. Finally, it patches the original init to force it to load the sepolicy file we just created. With the increasing complexity involved in early mount and split sepolicy (there is even APEX module involved in the future!), it is about time to rethink Magisk's sepolicy strategy as rebuilding init's functionality is not scalable and easy to maintain. In this commit, instead of building sepolicy ourselves, we mock selinuxfs with FIFO files connected to a pre-init daemon, waiting for the actual init process to directly write the sepolicy file into MagiskInit. We then patch the file and load it into the kernel. Some FIFO tricks has to be used to hijack the original init process's control flow and prevent race conditions, details are directly in the comments in code. At the moment, only system-as-root (read-only root) support is added. Support for legacy rootfs devices will come with a follow up commit.
145 lines
4.4 KiB
C++
145 lines
4.4 KiB
C++
#pragma once
|
|
|
|
#include <sys/mman.h>
|
|
#include <sys/stat.h>
|
|
#include <mntent.h>
|
|
#include <functional>
|
|
#include <string_view>
|
|
#include <string>
|
|
#include <vector>
|
|
|
|
#include "xwrap.hpp"
|
|
|
|
template <typename T>
|
|
static inline T align_to(T v, int a) {
|
|
static_assert(std::is_integral<T>::value);
|
|
return (v + a - 1) / a * a;
|
|
}
|
|
|
|
template <typename T>
|
|
static inline T align_padding(T v, int a) {
|
|
return align_to(v, a) - v;
|
|
}
|
|
|
|
struct file_attr {
|
|
struct stat st;
|
|
char con[128];
|
|
};
|
|
|
|
struct byte_data {
|
|
using str_pairs = std::initializer_list<std::pair<std::string_view, std::string_view>>;
|
|
|
|
uint8_t *buf = nullptr;
|
|
size_t sz = 0;
|
|
|
|
int patch(str_pairs list) { return patch(true, list); }
|
|
int patch(bool log, str_pairs list);
|
|
bool contains(std::string_view pattern, bool log = true) const;
|
|
protected:
|
|
void swap(byte_data &o);
|
|
};
|
|
|
|
struct raw_file : public byte_data {
|
|
std::string path;
|
|
file_attr attr;
|
|
|
|
raw_file() : attr{} {}
|
|
raw_file(const raw_file&) = delete;
|
|
raw_file(raw_file &&o) : path(std::move(o.path)), attr(o.attr) { swap(o); }
|
|
~raw_file() { free(buf); }
|
|
};
|
|
|
|
struct mmap_data : public byte_data {
|
|
mmap_data() = default;
|
|
mmap_data(const mmap_data&) = delete;
|
|
mmap_data(mmap_data &&o) { swap(o); }
|
|
mmap_data(const char *name, bool rw = false);
|
|
~mmap_data() { if (buf) munmap(buf, sz); }
|
|
mmap_data& operator=(mmap_data &&other) { swap(other); return *this; }
|
|
};
|
|
|
|
ssize_t fd_path(int fd, char *path, size_t size);
|
|
int fd_pathat(int dirfd, const char *name, char *path, size_t size);
|
|
int mkdirs(std::string path, mode_t mode);
|
|
void rm_rf(const char *path);
|
|
void mv_path(const char *src, const char *dest);
|
|
void mv_dir(int src, int dest);
|
|
void cp_afc(const char *src, const char *dest);
|
|
void link_path(const char *src, const char *dest);
|
|
void link_dir(int src, int dest);
|
|
int getattr(const char *path, file_attr *a);
|
|
int getattrat(int dirfd, const char *name, file_attr *a);
|
|
int fgetattr(int fd, file_attr *a);
|
|
int setattr(const char *path, file_attr *a);
|
|
int setattrat(int dirfd, const char *name, file_attr *a);
|
|
int fsetattr(int fd, file_attr *a);
|
|
void fclone_attr(int src, int dest);
|
|
void clone_attr(const char *src, const char *dest);
|
|
void fd_full_read(int fd, void **buf, size_t *size);
|
|
void full_read(const char *filename, void **buf, size_t *size);
|
|
void fd_full_read(int fd, std::string &str);
|
|
void full_read(const char *filename, std::string &str);
|
|
std::string fd_full_read(int fd);
|
|
std::string full_read(const char *filename);
|
|
void write_zero(int fd, size_t size);
|
|
void file_readline(bool trim, FILE *fp, const std::function<bool(std::string_view)> &fn);
|
|
static inline void file_readline(
|
|
bool trim, const char *file, const std::function<bool(std::string_view)> &fn) {
|
|
FILE *fp = xfopen(file, "re");
|
|
if (fp == nullptr)
|
|
return;
|
|
file_readline(trim, fp, fn);
|
|
}
|
|
static inline void file_readline(const char *file,
|
|
const std::function<bool(std::string_view)> &fn) {
|
|
file_readline(false, file, fn);
|
|
}
|
|
void parse_prop_file(const char *file,
|
|
const std::function<bool(std::string_view, std::string_view)> &fn);
|
|
void frm_rf(int dirfd);
|
|
void clone_dir(int src, int dest);
|
|
void parse_mnt(const char *file, const std::function<bool(mntent*)> &fn);
|
|
void backup_folder(const char *dir, std::vector<raw_file> &files);
|
|
void restore_folder(const char *dir, std::vector<raw_file> &files);
|
|
|
|
template <typename T>
|
|
void full_read(const char *filename, T &buf, size_t &size) {
|
|
static_assert(std::is_pointer<T>::value);
|
|
full_read(filename, reinterpret_cast<void**>(&buf), &size);
|
|
}
|
|
|
|
template <typename T>
|
|
void fd_full_read(int fd, T &buf, size_t &size) {
|
|
static_assert(std::is_pointer<T>::value);
|
|
fd_full_read(fd, reinterpret_cast<void**>(&buf), &size);
|
|
}
|
|
|
|
using sFILE = std::unique_ptr<FILE, decltype(&fclose)>;
|
|
using sDIR = std::unique_ptr<DIR, decltype(&closedir)>;
|
|
sDIR make_dir(DIR *dp);
|
|
sFILE make_file(FILE *fp);
|
|
|
|
static inline sDIR open_dir(const char *path) {
|
|
return make_dir(opendir(path));
|
|
}
|
|
|
|
static inline sDIR xopen_dir(const char *path) {
|
|
return make_dir(xopendir(path));
|
|
}
|
|
|
|
static inline sDIR xopen_dir(int dirfd) {
|
|
return make_dir(xfdopendir(dirfd));
|
|
}
|
|
|
|
static inline sFILE open_file(const char *path, const char *mode) {
|
|
return make_file(fopen(path, mode));
|
|
}
|
|
|
|
static inline sFILE xopen_file(const char *path, const char *mode) {
|
|
return make_file(xfopen(path, mode));
|
|
}
|
|
|
|
static inline sFILE xopen_file(int fd, const char *mode) {
|
|
return make_file(xfdopen(fd, mode));
|
|
}
|