373 lines
8.8 KiB
C++
373 lines
8.8 KiB
C++
#include <sys/mount.h>
|
|
#include <sys/wait.h>
|
|
#include <sys/sysmacros.h>
|
|
#include <linux/input.h>
|
|
#include <libgen.h>
|
|
#include <vector>
|
|
#include <string>
|
|
|
|
#include <magisk.hpp>
|
|
#include <db.hpp>
|
|
#include <utils.hpp>
|
|
#include <daemon.hpp>
|
|
#include <resetprop.hpp>
|
|
#include <selinux.hpp>
|
|
|
|
using namespace std;
|
|
|
|
static bool pfs_done = false;
|
|
static bool safe_mode = false;
|
|
|
|
/*********
|
|
* Setup *
|
|
*********/
|
|
|
|
#define DIR_IS(part) (me->mnt_dir == "/" #part ""sv)
|
|
#define SETMIR(b, part) sprintf(b, "%s/" MIRRDIR "/" #part, MAGISKTMP.data())
|
|
#define SETBLK(b, part) sprintf(b, "%s/" BLOCKDIR "/" #part, MAGISKTMP.data())
|
|
|
|
#define mount_mirror(part, flag) \
|
|
else if (DIR_IS(part) && me->mnt_type != "tmpfs"sv && lstat(me->mnt_dir, &st) == 0) { \
|
|
SETMIR(buf1, part); \
|
|
SETBLK(buf2, part); \
|
|
mknod(buf2, S_IFBLK | 0600, st.st_dev); \
|
|
xmkdir(buf1, 0755); \
|
|
xmount(buf2, buf1, me->mnt_type, flag, nullptr); \
|
|
LOGI("mount: %s\n", buf1); \
|
|
}
|
|
|
|
#define link_mirror(part) \
|
|
SETMIR(buf1, part); \
|
|
if (access("/system/" #part, F_OK) == 0 && access(buf1, F_OK) != 0) { \
|
|
xsymlink("./system/" #part, buf1); \
|
|
LOGI("link: %s\n", buf1); \
|
|
}
|
|
|
|
static bool magisk_env() {
|
|
LOGI("* Initializing Magisk environment\n");
|
|
|
|
string pkg;
|
|
check_manager(&pkg);
|
|
|
|
char buf1[4096];
|
|
char buf2[4096];
|
|
|
|
sprintf(buf1, "%s/0/%s/install", APP_DATA_DIR, pkg.data());
|
|
|
|
// Alternative binaries paths
|
|
const char *alt_bin[] = { "/cache/data_adb/magisk", "/data/magisk", buf1 };
|
|
for (auto alt : alt_bin) {
|
|
struct stat st;
|
|
if (lstat(alt, &st) == 0) {
|
|
if (S_ISLNK(st.st_mode)) {
|
|
unlink(alt);
|
|
continue;
|
|
}
|
|
rm_rf(DATABIN);
|
|
cp_afc(alt, DATABIN);
|
|
rm_rf(alt);
|
|
break;
|
|
}
|
|
}
|
|
|
|
// Remove stuffs
|
|
rm_rf("/cache/data_adb");
|
|
rm_rf("/data/adb/modules/.core");
|
|
unlink("/data/adb/magisk.img");
|
|
unlink("/data/adb/magisk_merge.img");
|
|
unlink("/data/magisk.img");
|
|
unlink("/data/magisk_merge.img");
|
|
unlink("/data/magisk_debug.log");
|
|
|
|
sprintf(buf1, "%s/" MODULEMNT, MAGISKTMP.data());
|
|
xmkdir(buf1, 0755);
|
|
|
|
// Directories in /data/adb
|
|
xmkdir(DATABIN, 0755);
|
|
xmkdir(MODULEROOT, 0755);
|
|
xmkdir(SECURE_DIR "/post-fs-data.d", 0755);
|
|
xmkdir(SECURE_DIR "/service.d", 0755);
|
|
|
|
LOGI("* Mounting mirrors");
|
|
|
|
parse_mnt("/proc/mounts", [&](mntent *me) {
|
|
struct stat st;
|
|
if (0) {}
|
|
mount_mirror(system, MS_RDONLY)
|
|
mount_mirror(vendor, MS_RDONLY)
|
|
mount_mirror(product, MS_RDONLY)
|
|
mount_mirror(system_ext, MS_RDONLY)
|
|
mount_mirror(data, 0)
|
|
else if (SDK_INT >= 24 && DIR_IS(proc) && !strstr(me->mnt_opts, "hidepid=2")) {
|
|
xmount(nullptr, "/proc", nullptr, MS_REMOUNT, "hidepid=2,gid=3009");
|
|
}
|
|
return true;
|
|
});
|
|
SETMIR(buf1, system);
|
|
SETMIR(buf2, system_root);
|
|
if (access(buf1, F_OK) != 0 && access(buf2, F_OK) == 0) {
|
|
xsymlink("./system_root/system", buf1);
|
|
LOGI("link: %s\n", buf1);
|
|
}
|
|
link_mirror(vendor);
|
|
link_mirror(product);
|
|
link_mirror(system_ext);
|
|
|
|
// Disable/remove magiskhide, resetprop
|
|
if (SDK_INT < 19) {
|
|
unlink("/sbin/resetprop");
|
|
unlink("/sbin/magiskhide");
|
|
}
|
|
|
|
if (access(DATABIN "/busybox", X_OK) == -1)
|
|
return false;
|
|
|
|
// TODO: Remove. Backwards compatibility for old manager
|
|
LOGI("* Setting up internal busybox\n");
|
|
sprintf(buf1, "%s/" BBPATH "/busybox", MAGISKTMP.data());
|
|
mkdir(dirname(buf1), 0755);
|
|
cp_afc(DATABIN "/busybox", buf1);
|
|
exec_command_sync(buf1, "--install", "-s", dirname(buf1));
|
|
|
|
return true;
|
|
}
|
|
|
|
void reboot() {
|
|
if (RECOVERY_MODE)
|
|
exec_command_sync("/system/bin/reboot", "recovery");
|
|
else
|
|
exec_command_sync("/system/bin/reboot");
|
|
}
|
|
|
|
static bool check_data() {
|
|
bool mnt = false;
|
|
file_readline("/proc/mounts", [&](string_view s) {
|
|
if (str_contains(s, " /data ") && !str_contains(s, "tmpfs")) {
|
|
mnt = true;
|
|
return false;
|
|
}
|
|
return true;
|
|
});
|
|
if (!mnt)
|
|
return false;
|
|
auto crypto = getprop("ro.crypto.state");
|
|
if (!crypto.empty()) {
|
|
if (crypto == "unencrypted") {
|
|
// Unencrypted, we can directly access data
|
|
return true;
|
|
} else {
|
|
// Encrypted, check whether vold is started
|
|
return !getprop("init.svc.vold").empty();
|
|
}
|
|
}
|
|
// ro.crypto.state is not set, assume it's unencrypted
|
|
return true;
|
|
}
|
|
|
|
void unlock_blocks() {
|
|
int fd, dev, OFF = 0;
|
|
|
|
auto dir = xopen_dir("/dev/block");
|
|
if (!dir)
|
|
return;
|
|
dev = dirfd(dir.get());
|
|
|
|
for (dirent *entry; (entry = readdir(dir.get()));) {
|
|
if (entry->d_type == DT_BLK) {
|
|
if ((fd = openat(dev, entry->d_name, O_RDONLY | O_CLOEXEC)) < 0)
|
|
continue;
|
|
if (ioctl(fd, BLKROSET, &OFF) < 0)
|
|
PLOGE("unlock %s", entry->d_name);
|
|
close(fd);
|
|
}
|
|
}
|
|
}
|
|
|
|
static void collect_logs(bool reset) {
|
|
static bool running = false;
|
|
static pthread_mutex_t log_lock = PTHREAD_MUTEX_INITIALIZER;
|
|
{
|
|
mutex_guard lock(log_lock);
|
|
if (running)
|
|
return;
|
|
int test = exec_command_sync("/system/bin/logcat", "-d", "-f", "/dev/null");
|
|
chmod("/dev/null", 0666);
|
|
if (test != 0)
|
|
return;
|
|
running = true;
|
|
}
|
|
if (reset)
|
|
rename(LOGFILE, LOGFILE ".bak");
|
|
// Start a daemon thread and wait indefinitely
|
|
new_daemon_thread([]{
|
|
int fd = xopen(LOGFILE, O_WRONLY | O_APPEND | O_CREAT | O_CLOEXEC, 0644);
|
|
exec_t exec {
|
|
.fd = fd,
|
|
.fork = fork_no_zombie
|
|
};
|
|
int pid = exec_command(exec, "/system/bin/logcat", "-s", "Magisk");
|
|
close(fd);
|
|
if (pid < 0) {
|
|
mutex_guard lock(log_lock);
|
|
running = false;
|
|
} else {
|
|
waitpid(pid, nullptr, 0);
|
|
}
|
|
});
|
|
}
|
|
|
|
#define test_bit(bit, array) (array[bit / 8] & (1 << (bit % 8)))
|
|
|
|
static bool check_key_combo() {
|
|
uint8_t bitmask[(KEY_MAX + 1) / 8];
|
|
vector<int> events;
|
|
constexpr char name[] = "/dev/.ev";
|
|
|
|
// First collect candidate events that accepts volume down
|
|
for (int minor = 64; minor < 96; ++minor) {
|
|
if (xmknod(name, S_IFCHR | 0444, makedev(13, minor)))
|
|
continue;
|
|
int fd = open(name, O_RDONLY | O_CLOEXEC);
|
|
unlink(name);
|
|
if (fd < 0)
|
|
continue;
|
|
memset(bitmask, 0, sizeof(bitmask));
|
|
ioctl(fd, EVIOCGBIT(EV_KEY, sizeof(bitmask)), bitmask);
|
|
if (test_bit(KEY_VOLUMEDOWN, bitmask))
|
|
events.push_back(fd);
|
|
else
|
|
close(fd);
|
|
}
|
|
if (events.empty())
|
|
return false;
|
|
|
|
run_finally fin([&]{ std::for_each(events.begin(), events.end(), close); });
|
|
|
|
// Check if volume down key is held continuously for more than 3 seconds
|
|
for (int i = 0; i < 300; ++i) {
|
|
bool pressed = false;
|
|
for (const int &fd : events) {
|
|
memset(bitmask, 0, sizeof(bitmask));
|
|
ioctl(fd, EVIOCGKEY(sizeof(bitmask)), bitmask);
|
|
if (test_bit(KEY_VOLUMEDOWN, bitmask)) {
|
|
pressed = true;
|
|
break;
|
|
}
|
|
}
|
|
if (!pressed)
|
|
return false;
|
|
// Check every 10ms
|
|
usleep(10000);
|
|
}
|
|
LOGD("KEY_VOLUMEDOWN detected: enter safe mode\n");
|
|
return true;
|
|
}
|
|
|
|
/****************
|
|
* Entry points *
|
|
****************/
|
|
|
|
void post_fs_data(int client) {
|
|
// ack
|
|
write_int(client, 0);
|
|
close(client);
|
|
|
|
if (getenv("REMOUNT_ROOT"))
|
|
xmount(nullptr, "/", nullptr, MS_REMOUNT | MS_RDONLY, nullptr);
|
|
|
|
if (!check_data())
|
|
goto unblock_init;
|
|
|
|
collect_logs(true);
|
|
|
|
LOGI("** post-fs-data mode running\n");
|
|
|
|
// Unlock all blocks for rw
|
|
unlock_blocks();
|
|
|
|
if (access(SECURE_DIR, F_OK) != 0) {
|
|
if (SDK_INT < 24) {
|
|
// There is no FBE pre 7.0, we can directly create the folder without issues
|
|
xmkdir(SECURE_DIR, 0700);
|
|
} else {
|
|
/* If the folder is not automatically created by Android,
|
|
* do NOT proceed further. Manual creation of the folder
|
|
* will cause bootloops on FBE devices. */
|
|
LOGE(SECURE_DIR " is not present, abort...\n");
|
|
goto unblock_init;
|
|
}
|
|
}
|
|
|
|
if (!magisk_env()) {
|
|
LOGE("* Magisk environment setup incomplete, abort\n");
|
|
goto unblock_init;
|
|
}
|
|
|
|
if (getprop("persist.sys.safemode", true) == "1" || check_key_combo()) {
|
|
safe_mode = true;
|
|
// Disable all modules and magiskhide so next boot will be clean
|
|
disable_modules();
|
|
stop_magiskhide();
|
|
} else {
|
|
exec_common_scripts("post-fs-data");
|
|
auto_start_magiskhide();
|
|
handle_modules();
|
|
}
|
|
|
|
// We still do magic mount because root itself might need it
|
|
magic_mount();
|
|
pfs_done = true;
|
|
|
|
unblock_init:
|
|
close(xopen(UNBLOCKFILE, O_RDONLY | O_CREAT, 0));
|
|
}
|
|
|
|
void late_start(int client) {
|
|
LOGI("** late_start service mode running\n");
|
|
// ack
|
|
write_int(client, 0);
|
|
close(client);
|
|
|
|
collect_logs(false);
|
|
|
|
if (!pfs_done || safe_mode)
|
|
return;
|
|
|
|
exec_common_scripts("service");
|
|
exec_module_scripts("service");
|
|
}
|
|
|
|
void boot_complete(int client) {
|
|
LOGI("** boot_complete triggered\n");
|
|
// ack
|
|
write_int(client, 0);
|
|
close(client);
|
|
|
|
collect_logs(false);
|
|
|
|
if (safe_mode)
|
|
return;
|
|
|
|
/* It's safe to create the folder at this point if the system didn't create it
|
|
* Magisk Manager should finish up the remaining environment setup */
|
|
if (access(SECURE_DIR, F_OK) != 0)
|
|
xmkdir(SECURE_DIR, 0700);
|
|
|
|
if (pfs_done)
|
|
auto_start_magiskhide();
|
|
|
|
if (access(MANAGERAPK, F_OK) == 0) {
|
|
// Install Magisk Manager if exists
|
|
rename(MANAGERAPK, "/data/magisk.apk");
|
|
install_apk("/data/magisk.apk");
|
|
} else {
|
|
// Check whether we have manager installed
|
|
if (!check_manager()) {
|
|
// Install stub
|
|
auto init = MAGISKTMP + "/magiskinit";
|
|
exec_command_sync(init.data(), "-x", "manager", "/data/magisk.apk");
|
|
install_apk("/data/magisk.apk");
|
|
}
|
|
}
|
|
}
|