kernel: Add mitigation to avoid placing manager in lib to bypass check

tiann · Dec 8, 2023 · c560d60 · c560d60
1 parent 064de70
commit c560d60
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/kernel/manager.c b/kernel/manager.c
@@ -57,7 +57,8 @@ bool become_manager(char *pkg)
 		}
 		cwd = d_path(&files_path, buf, PATH_MAX);
 		if (startswith(cwd, "/data/app/") != 0 ||
-		    endswith(cwd, "/base.apk") != 0) {
+		    endswith(cwd, "==/base.apk") != 0) {
+			// AOSP generate ramdom base64 with 16bit, without NO_PADDING, so it must have two "="
 			continue;
 		}
 		// we have found the apk!