forked from abcz316/SKRoot-linuxKernelRoot
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathsu_install_helper.cpp
More file actions
194 lines (167 loc) · 5.43 KB
/
su_install_helper.cpp
File metadata and controls
194 lines (167 loc) · 5.43 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
#include "su_install_helper.h"
#include "kernel_root_helper.h"
#include "init64_process_helper.h"
#include "testRoot.h"
#include "../su/su_hide_path_utils.h"
#include <string.h>
#include <dirent.h>
#include <time.h>
#include <iostream>
#include <fstream>
#include <memory>
#include <sys/stat.h>
#include <sys/types.h>
#include <sys/xattr.h>
/*
* xattr name for SELinux attributes.
* This may have been exported via Kernel uapi header.
*/
#ifndef XATTR_NAME_SELINUX
#define XATTR_NAME_SELINUX "security.selinux"
#endif
const char* selinux_file_flag = "u:object_r:system_file:s0";
bool set_file_allow_access_mode(const char* file_full_path) {
std::string str_path = file_full_path;
if (chmod(str_path.c_str(), 0777)) {
TRACE("chmod error.\n");
return false;
}
if (setxattr(str_path.c_str(), XATTR_NAME_SELINUX, selinux_file_flag, strlen(selinux_file_flag) + 1, 0)) {
TRACE("setxattr error.\n");
return false;
}
return true;
}
bool copy_file(const char* source_path, const char* target_path) {
std::string str_source_path = source_path;
std::string str_target_path = target_path;
std::fstream file1;
file1.open(str_source_path.c_str(), std::ios::binary | std::ios::in | std::ios::ate); //打开时指针在文件尾
if (!file1.is_open()) {
TRACE("Could not open file %s.\n", str_source_path.c_str());
return false;
}
size_t length = file1.tellg();
std::unique_ptr<char[]> up_new_file_data = std::make_unique<char[]>(length);
file1.seekg(0);
file1.read(up_new_file_data.get(), length); //二进制只能用这个读
file1.close();
std::fstream file2;
file2.open(str_target_path.c_str(), std::ios::binary | std::ios::out);
if (!file2.is_open()) {
TRACE("Could not open file %s.\n", str_target_path.c_str());
return false;
}
file2.write(up_new_file_data.get(), length); //二进制只能用这个写
file2.close();
return true;
}
std::string install_su(const char* str_root_key, const char* base_path, const char* origin_su_full_path, ssize_t& err, const char* su_hide_folder_head_flag) {
if (kernel_root::get_root(str_root_key) != 0) {
err = -501;
return {};
}
std::string _su_hide_folder_head_flag = su_hide_folder_head_flag;
_su_hide_folder_head_flag += "_";
//1.获取su_xxx隐藏目录
std::string _su_hide_folder_path = find_su_hide_folder_path(base_path, _su_hide_folder_head_flag.c_str()); //没有再看看子目录
if (_su_hide_folder_path.empty()) {
//2.取不到，那就创建一个
_su_hide_folder_path = create_su_hide_folder(str_root_key, base_path, _su_hide_folder_head_flag.c_str());
}
if (_su_hide_folder_path.empty()) {
TRACE("su hide folder path empty error.\n");
err = -502;
return {};
}
if (!set_file_allow_access_mode(_su_hide_folder_path.c_str())) {
TRACE("set file allow access mode error.\n");
err = -503;
return {};
}
std::string su_hide_full_path = _su_hide_folder_path + "/" + "su";
//如果存在了就不要理了
if(access(su_hide_full_path.c_str(), F_OK) == -1) {
if (!copy_file(origin_su_full_path, su_hide_full_path.c_str())) {
TRACE("copy file error.\n");
err = -504;
return {};
}
if (!set_file_allow_access_mode(su_hide_full_path.c_str())) {
TRACE("set file allow access mode error.\n");
err = -505;
return {};
}
}
err = 0;
return su_hide_full_path;
}
std::string safe_install_su(const char* str_root_key, const char* base_path, const char* origin_su_full_path, ssize_t& err, const char* su_hide_folder_head_flag) {
std::string su_hide_full_path;
fork_pipe_info finfo;
if(fork_pipe_child_process(finfo)) {
ssize_t err;
su_hide_full_path = install_su(str_root_key, base_path, origin_su_full_path, err, su_hide_folder_head_flag);
write_errcode_to_father(finfo, err);
write_string_to_father(finfo, su_hide_full_path);
_exit(0);
return 0;
}
err = 0;
if(!wait_fork_child_process(finfo)) {
err = -511;
} else {
if(!read_errcode_from_child(finfo, err)) {
err = -512;
} else if(!read_string_from_child(finfo, su_hide_full_path)) {
err = -513;
}
}
return su_hide_full_path;
}
ssize_t uninstall_su(const char* str_root_key, const char* base_path, const char* su_hide_folder_head_flag) {
if (kernel_root::get_root(str_root_key) != 0) {
return -521;
}
std::string _su_hide_folder_head_flag = su_hide_folder_head_flag;
_su_hide_folder_head_flag += "_";
//从自身路径中删除文件，移除痕迹，防止被检测
remove(std::string(base_path + std::string("/su")).c_str());
do {
//获取su_xxx隐藏目录
std::string _su_hide_path = find_su_hide_folder_path(base_path, _su_hide_folder_head_flag.c_str()); //没有再看看子目录
if (_su_hide_path.empty()) {
break;
}
//取到了，再删
remove(std::string(_su_hide_path + std::string("/su")).c_str());
//文件夹也删掉
std::string del_dir_cmd = "rm -rf ";
del_dir_cmd += _su_hide_path;
ssize_t err;
kernel_root::run_root_cmd(str_root_key, del_dir_cmd.c_str(), err);
if (err) {
return err;
}
return access(_su_hide_path.c_str(), F_OK) == -1 ? 0 : -512;
} while (1);
return 0;
}
ssize_t safe_uninstall_su(const char* str_root_key, const char* base_path, const char* su_hide_folder_head_flag) {
fork_pipe_info finfo;
if(fork_pipe_child_process(finfo)) {
ssize_t ret = uninstall_su(str_root_key, base_path, su_hide_folder_head_flag);
write_errcode_to_father(finfo, ret);
_exit(0);
return 0;
}
ssize_t err = 0;
if(!wait_fork_child_process(finfo)) {
err = -531;
} else {
if(!read_errcode_from_child(finfo, err)) {
err = -532;
}
}
return err;
}