GKI_KernelSU_SUSFS/.github/actions/susfs/action.yml

name: Setup SUSFS
description: Clone and apply SUSFS patches with version-specific fixes
inputs:
  android_version:
    description: 'Android version (e.g., android15)'
    required: true
  kernel_version:
    description: 'Kernel version (e.g., 6.6)'
    required: true
  os_patch_level:
    description: 'OS patch level (e.g., 2024-07)'
    required: true
  sublevel:
    description: 'Kernel sublevel'
    required: true
  susfs_commit:
    description: 'Commit map (branch:commit,branch:commit...)'
    required: false

runs:
  using: composite
  steps:
    - name: Setup SUSFS Branch
      shell: bash
      run: |
        SUSFS_BRANCH="gki-${{ inputs.android_version }}-${{ inputs.kernel_version }}"
        SUSFS_REPO="https://gitlab.com/simonpunk/susfs4ksu.git"
        
        echo "Preparing SUSFS for branch: $SUSFS_BRANCH"
        
        # Parse commit map to find the commit for this branch
        COMMIT_MAP="${{ inputs.susfs_commit }}"
        TARGET_COMMIT=""
        
        if [ -n "$COMMIT_MAP" ]; then
          # Split by comma
          IFS=',' read -ra ENTRIES <<< "$COMMIT_MAP"
          for entry in "${ENTRIES[@]}"; do
            # Split by colon
            IFS=':' read -r branch commit <<< "$entry"
            if [ "$branch" == "$SUSFS_BRANCH" ]; then
              TARGET_COMMIT="$commit"
              break
            fi
          done
        fi
        
        if [ -n "$TARGET_COMMIT" ]; then
          echo "Found specific commit for $SUSFS_BRANCH: $TARGET_COMMIT"
          git clone "$SUSFS_REPO" -b "$SUSFS_BRANCH" susfs4ksu
          cd susfs4ksu
          git checkout "$TARGET_COMMIT"
          cd ..
        else
          echo "No specific commit found for $SUSFS_BRANCH, cloning latest..."
          git clone "$SUSFS_REPO" -b "$SUSFS_BRANCH" --depth=1 susfs4ksu
        fi
        
        SUSFS_VERSION="v2.1.0"
        echo "SUSFS_VERSION=$SUSFS_VERSION" >> $GITHUB_ENV
        echo "SUSFS_BRANCH=$SUSFS_BRANCH" >> $GITHUB_ENV
        echo "SUSFS_COMMIT=$TARGET_COMMIT" >> $GITHUB_ENV

    - name: Enable KernelSU SUSFS Config
      shell: bash
      working-directory: ${{ github.workspace }}/kernel
      run: |
        cat >> "${{ github.workspace }}/wild_gki.fragment" << 'EOF'
        # KernelSU SUSFS Configuration
        CONFIG_KSU_SUSFS=y
        CONFIG_KSU_SUSFS_SUS_PATH=y
        CONFIG_KSU_SUSFS_SUS_MOUNT=y
        CONFIG_KSU_SUSFS_SUS_KSTAT=y
        CONFIG_KSU_SUSFS_SPOOF_UNAME=y
        CONFIG_KSU_SUSFS_ENABLE_LOG=y
        CONFIG_KSU_SUSFS_HIDE_KSU_SUSFS_SYMBOLS=y
        CONFIG_KSU_SUSFS_SPOOF_CMDLINE_OR_BOOTCONFIG=y
        CONFIG_KSU_SUSFS_OPEN_REDIRECT=y
        CONFIG_KSU_SUSFS_SUS_MAP=y
        EOF

    - name: Apply KSU SUSFS Patches
      shell: bash
      working-directory: ${{ github.workspace }}/kernel/KernelSU-Next
      run: |
        cp ${{ github.workspace }}/kernel_patches/wild/ksun-e6ba52b-susfs-v2.1.0-a14-6.1-e1c57040.patch ./
        patch -p1 < ksun-e6ba52b-susfs-v2.1.0-a14-6.1-e1c57040.patch

    - name: Apply Kernel SUSFS Patches
      shell: bash
      working-directory: ${{ github.workspace }}/kernel/common
      run: |
        # Apply base SUSFS patches
        cp "${{ github.workspace }}/susfs4ksu/kernel_patches/fs/"* "${{ github.workspace }}/kernel/common/fs/"
        cp "${{ github.workspace }}/susfs4ksu/kernel_patches/include/linux/"* "${{ github.workspace }}/kernel/common/include/linux/"
        cp ${{ github.workspace }}/susfs4ksu/kernel_patches/50_add_susfs_in_gki-${{ inputs.android_version }}-${{ inputs.kernel_version }}.patch ./

        FIX_REJ=0
        if [ "${{ inputs.kernel_version }}" = "5.10" ] && [ "${{ inputs.android_version }}" = "android12" ]; then
          echo "Applying Android 12 5.10 SUSFS fixes"
          if [ "${{ inputs.sublevel }}" -le "43" ]; then
            perl -i -pe 's/(int|size_t)\s+this_len\s*=\s*min_t\s*\(\s*\1\s*,/size_t this_len = min_t(size_t,/;' fs/proc/base.c
          fi
          if [ "${{ inputs.sublevel }}" -le "117" ]; then
            perl -i -0pe 's/^\s*\/\*[\s\S]*?IN_ALL_EVENTS.*?u32 mask = mark->mask & IN_ALL_EVENTS;\s*?\n//m' fs/notify/fdinfo.c
          fi
        fi
        if [ "${{ inputs.kernel_version }}" = "5.15" ] && [ "${{ inputs.android_version }}" = "android13" ]; then
          echo "Applying Android 13 5.15 SUSFS fixes"
          if grep -q '^size_t this_len = min_t(size_t, count, PAGE_SIZE);$' fs/proc/base.c; then
            sed -i 's/^int this_len = min_t(int, count, PAGE_SIZE);$/size_t this_len = min_t(size_t, count, PAGE_SIZE);/' fs/proc/base.c
            FIX_REJ=1
          fi
          if ! grep -q '^#include <linux/mnt_idmapping.h>$' fs/namespace.c; then
            sed -i '/^#include <linux\/shmem_fs.h>$/a #include <linux/mnt_idmapping.h>' fs/namespace.c
            FIX_REJ=1
          fi
          if ! grep -q '^#include <linux/mnt_idmapping.h>$' fs/open.c; then
            sed -i '/^#include <linux\/compat.h>$/a #include <linux/mnt_idmapping.h>' fs/open.c
            FIX_REJ=1
          fi
        fi
        if [ "${{ inputs.kernel_version }}" = "6.1" ]; then
          if grep -q '^#include <trace/hooks/blk.h>$' fs/namespace.c; then
            sed -i '/^#include <trace\/hooks\/blk.h>$/d' fs/namespace.c
            FIX_REJ=1
          fi
        fi
        if [ "${{ inputs.kernel_version }}" = "6.6" ]; then
          echo "Applying 6.6 SUSFS fixes"
          if ! grep -q '^#include <trace/hooks/fs.h>$' fs/namespace.c; then
            sed -i '/^#include <trace\/hooks\/blk.h>$/a #include <trace/hooks/fs.h>' fs/namespace.c
            FIX_REJ=1
          fi
          if ! grep -q '^#include <linux/dma-buf.h>$' fs/proc/base.c; then
            sed -i '/^#include <linux\/cpufreq_times.h>$/a #include <linux/dma-buf.h>' fs/proc/base.c
            FIX_REJ=1
          fi
          if ! grep -q '^\s*pagemap_entry_t \*res = NULL;$' fs/proc/task_mmu.c; then
            sed -i '/int ret.*= 0, copied.*= 0;/{
            /int ret.*= 0, copied.*= 0;/!d
            a\
                unsigned int nr_subpages = __PAGE_SIZE / PAGE_SIZE;\
                pagemap_entry_t *res = NULL;
            }' fs/proc/task_mmu.c
            FIX_REJ=1
          fi
        fi
        if [ "${{ inputs.kernel_version }}" = "6.12" ]; then
          echo "Applying 6.12 SUSFS fixes"
          if grep -q '^#include <linux/dma-buf.h>$' fs/exec.c; then
            sed -i '/^#include <linux\/dma-buf.h>$/d' fs/exec.c
            FIX_REJ=1
          fi
        fi

        patch -p1 < 50_add_susfs_in_gki-${{ inputs.android_version }}-${{ inputs.kernel_version }}.patch || true

        if [ "${{ inputs.kernel_version }}" = "5.10" ] && [ "${{ inputs.android_version }}" = "android12" ]; then
          if [ "${{ inputs.sublevel }}" -le "43" ]; then
            sed -i 's/^size_t this_len = min_t(size_t, count, PAGE_SIZE);$/int this_len = min_t(int, count, PAGE_SIZE);/' fs/proc/base.c
          fi
          if [ "${{ inputs.sublevel }}" -le "117" ]; then
            perl -i -pe 's/^(\s*if \(inode\) \{)/$1\n        \/\*\n         * IN_ALL_EVENTS represents all of the mask bits\n         * that we expose to userspace.  There is at\n         * least one bit (FS_EVENT_ON_CHILD) which is\n         * used only internally to the kernel.\n         *\/\n        u32 mask = mark->mask & IN_ALL_EVENTS;/m' fs/notify/fdinfo.c
          fi
        fi
        
        if [ "${{ inputs.kernel_version }}" = "5.15" ] && [ "${{ inputs.android_version }}" = "android13" ]; then
          sed -i '/#include <linux\/mnt_idmapping.h>$/d' fs/namespace.c
          sed -i '/#include <linux\/mnt_idmapping.h>$/d' fs/open.c
          sed -i 's/^size_t this_len = min_t(size_t, count, PAGE_SIZE);$/int this_len = min_t(int, count, PAGE_SIZE);/' fs/proc/base.c
        fi
        if [ "${{ inputs.kernel_version }}" = "6.1" ]; then
          sed -i '/^#include "internal.h"$/a #include <trace/hooks/blk.h>' fs/namespace.c
        fi
        if [ "${{ inputs.kernel_version }}" = "6.6" ]; then
          sed -i '/^#include <trace\/hooks\/fs.h>$/d' fs/namespace.c
          sed -i '/^#include <linux\/dma-buf.h>$/d' fs/proc/base.c
          sed -i '/unsigned int nr_subpages.*__PAGE_SIZE.*PAGE_SIZE/d' fs/proc/task_mmu.c
          sed -i '/pagemap_entry_t.*res.*NULL/d' fs/proc/task_mmu.c
        fi
        if [ "${{ inputs.kernel_version }}" = "6.12" ]; then
          sed -i '/^#include <linux\/ksh.h>$/a #include <linux/dma-buf.h>' fs/exec.c
          FIX_REJ=1
        fi
        
        SHOW_PAD_FIX=0
        if [[ "${{ inputs.android_version }}" = "android12" && "${{ inputs.kernel_version }}" = "5.10" && "${{ inputs.sublevel }}" -le 209 ]]; then
          SHOW_PAD_FIX=1
        elif [[ "${{ inputs.android_version }}" = "android13" && "${{ inputs.kernel_version }}" = "5.10" && "${{ inputs.sublevel }}" -le 209 && "${{ inputs.os_patch_level }}" != "2024-05" ]]; then
          SHOW_PAD_FIX=1
        elif [[ "${{ inputs.android_version }}" = "android13" && "${{ inputs.kernel_version }}" = "5.15" && "${{ inputs.sublevel }}" -le 148 && "${{ inputs.os_patch_level }}" != "2024-05" ]]; then
          SHOW_PAD_FIX=1
        elif [[ "${{ inputs.android_version }}" = "android14" && "${{ inputs.kernel_version }}" = "5.15" && "${{ inputs.sublevel }}" -le 148 && "${{ inputs.os_patch_level }}" != "2024-05" ]]; then
          SHOW_PAD_FIX=1
        elif [[ "${{ inputs.android_version }}" = "android14" && "${{ inputs.kernel_version }}" = "6.1" && "${{ inputs.sublevel }}" -le 75 && "${{ inputs.os_patch_level }}" != "2024-05" ]]; then
          SHOW_PAD_FIX=1
        fi

        if [[ "$SHOW_PAD_FIX" = "1" ]]; then
          sed -i -e 's/goto show_pad;/return 0;/' ./fs/proc/task_mmu.c
        fi

    - name: Apply Android 13 5.10 Fixes
      if: inputs.android_version == 'android13' && inputs.kernel_version == '5.10'
      shell: bash
      working-directory: ${{ github.workspace }}/kernel/common
      run: |
        if [ "${{ inputs.sublevel }}" -le "107" ]; then
        sed -i '/u32 mask = mark->mask & IN_ALL_EVENTS;/r'<(cat <<'EOF'
        #ifdef CONFIG_KSU_SUSFS_SUS_MOUNT
        		mnt = real_mount(file->f_path.mnt);
        		if (mnt->mnt_id >= DEFAULT_KSU_MNT_ID &&
        			likely(susfs_is_current_proc_umounted()))
        		{
        			struct path path;
        			char *pathname = kmalloc(PAGE_SIZE, GFP_KERNEL);
        			char *dpath;
        			if (!pathname) {
        				goto orig_flow;
        			}
        			dpath = d_path(&file->f_path, pathname, PAGE_SIZE);
        			if (!dpath) {
        				goto out_kfree;
        			}
        			if (kern_path(dpath, 0, &path)) {
        				goto out_kfree;
        			}
        			if (!path.dentry->d_inode) {
        				goto out_path_put;
        			}
        			seq_printf(m, "inotify wd:%x ino:%lx sdev:%x mask:%x ignored_mask:0 ",
        					inode_mark->wd, path.dentry->d_inode->i_ino, path.dentry->d_inode->i_sb->s_dev,
        					(mark->mask & IN_ALL_EVENTS));
        			show_mark_fhandle(m, path.dentry->d_inode);
        			seq_putc(m, '\n');
        			path_put(&path);
        			kfree(pathname);
        			iput(inode);
        			return;
        out_path_put:
        			path_put(&path);
        out_kfree:
        			kfree(pathname);
        		}
        orig_flow:
        #endif // #ifdef CONFIG_KSU_SUSFS_SUS_MOUNT
        EOF
        ) fs/notify/fdinfo.c
        fi

    - name: Apply Android 13 5.15 Fixes
      if: inputs.android_version == 'android13' && inputs.kernel_version == '5.15'
      shell: bash
      working-directory: ${{ github.workspace }}/kernel/common
      run: |
        if [ "${{ inputs.sublevel }}" -le "117" ]; then
        sed -i '/u32 mask = mark->mask & IN_ALL_EVENTS;/r'<(cat <<'EOF'
        #ifdef CONFIG_KSU_SUSFS_SUS_MOUNT
        		mnt = real_mount(file->f_path.mnt);
        		if (mnt->mnt_id >= DEFAULT_KSU_MNT_ID &&
        			likely(susfs_is_current_proc_umounted()))
        		{
        			struct path path;
        			char *pathname = kmalloc(PAGE_SIZE, GFP_KERNEL);
        			char *dpath;
        			if (!pathname) {
        				goto orig_flow;
        			}
        			dpath = d_path(&file->f_path, pathname, PAGE_SIZE);
        			if (!dpath) {
        				goto out_kfree;
        			}
        			if (kern_path(dpath, 0, &path)) {
        				goto out_kfree;
        			}
        			if (!path.dentry->d_inode) {
        				goto out_path_put;
        			}
        			seq_printf(m, "inotify wd:%x ino:%lx sdev:%x mask:%x ignored_mask:0 ",
        					inode_mark->wd, path.dentry->d_inode->i_ino, path.dentry->d_inode->i_sb->s_dev,
        					(mark->mask & IN_ALL_EVENTS));
        			show_mark_fhandle(m, path.dentry->d_inode);
        			seq_putc(m, '\n');
        			path_put(&path);
        			kfree(pathname);
        			iput(inode);
        			return;
        out_path_put:
        			path_put(&path);
        out_kfree:
        			kfree(pathname);
        		}
        orig_flow:
        #endif // #ifdef CONFIG_KSU_SUSFS_SUS_MOUNT
        EOF
        ) fs/notify/fdinfo.c
        fi

    - name: Apply Android 14 6.1 Fixes
      if: inputs.android_version == 'android14' && inputs.kernel_version == '6.1'
      shell: bash
      working-directory: ${{ github.workspace }}/kernel/common
      run: |
        if [ "${{ inputs.sublevel }}" -le "141" ]; then
        sed -i '/#include "fd.h"/r'<(cat <<'EOF'
        #ifdef CONFIG_KSU_SUSFS_SUS_MAP
        #include <linux/susfs_def.h>
        #endif
        EOF
        ) fs/proc/base.c
        fi