HACK: fs/proc: block access to mounts for "IsolatedService"

Prevents Magisk mount leakage and root detection by apps with unmodified detection code from here: https://darvincitech.wordpress.com/2019/11/04/detecting-magisk-hide/ Example: https://play.google.com/store/apps/details?id=ua.gov.diia.app oryginal commit: acroreiser/android_kernel_lenovo_a6010@d17c01f Signed-off-by: ThunderStorms21th nalas <[email protected]>
DozNaka · Aug 5, 2022 · 6096dd8 · 6096dd8
1 parent 7206878
commit 6096dd8
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/fs/proc_namespace.c b/fs/proc_namespace.c
@@ -275,6 +275,12 @@ static int mounts_open_common(struct inode *inode, struct file *file,
 	if (!task)
 		goto err;
 
+	if(!strncmp("IsolatedService", task->comm, 15))
+	{
+		ret = -EINVAL;
+		goto err;
+	}
+
 	task_lock(task);
 	nsp = task->nsproxy;
 	if (!nsp || !nsp->mnt_ns) {