Samsung_KernelSU_SUSFS/.github/actions/susfs-patches/action.yml

name: apply susfs patches
description: apply susfs patches
inputs:
  android_version:
   description: 'Android version (android14)'
   required: true
  kernel_version:
   description: 'Kernel version (6.1)'
   required: true
  branch:
   description: 'device kernel'
   required: true

runs:
  using: composite
  steps:
   - name: Apply to KSUN
     shell: bash
     run: |
       cd "$COMMON/KernelSU-Next"
       SUSFS_VERSION="v2.1.0"
          
       # Apply SUSFS to KernelSU-Next
       cp "$SUSFS4KSU/kernel_patches/KernelSU/10_enable_susfs_for_ksu.patch" .
       patch -p1 < 10_enable_susfs_for_ksu.patch || true
       rm -rf 10_enable_susfs_for_ksu.patch

       #Fix rejects from adding susfs to KSUN
       cp "$KERNEL_PATCHES/next/susfs_fix_patches/$SUSFS_VERSION/"*.patch .
       rm -rf multi_manager.patch
       rm -rf multi_sepolicy_fix.patch
       for p in *.patch; do
           patch -p1 < "$p"
           rm -f "$p"
       done
       
   - name: Apply to Kernel
     shell: bash
     run: |
      # Apply SUSFS to kernel
      cd "$COMMON"
      cp "$SUSFS4KSU/kernel_patches/fs/"* ./fs/
      cp "$SUSFS4KSU/kernel_patches/include/linux/"* ./include/linux/
      cp "$SUSFS4KSU/kernel_patches/50_add_susfs_in_gki-${{ inputs.android_version }}-${{ inputs.kernel_version }}.patch" ./          

      #Prepare open.c for susfs patching
      sed -i '/#ifdef CONFIG_SECURITY_DEFEX/,/^#endif/d' fs/open.c

      #Prepare namespace.c for susfs patching
      sed -i '/copy_flags = CL_COPY_UNBINDABLE | CL_EXPIRE;/,/#endif/ {
        /#ifdef CONFIG_KDP_NS/,/#endif/ {
           /#else/,/#endif/!d
           /#else/d
           /#endif/d
        }
       }' fs/namespace.c
          
      # Apply SUSFS core patch
      patch -p1 < 50_add_susfs_in_gki-${{ inputs.android_version }}-${{ inputs.kernel_version }}.patch || true
      rm -rf 50_add_susfs_in_gki-${{ inputs.android_version }}-${{ inputs.kernel_version }}.patch

      shopt -s nullglob
      patches=("KERNEL_PATCHES/samsung/${{ inputs.branch }}"/*.patch)
      
      if [${patches[@]} -gt 0 ]; then
       echo "Patches found, applying..."
       cp "${patches[@]}" ./
       
       # Fix SUSFS rejects
        for p in *.patch; do
          patch -p1 < "$p"
          rm -f "$p"
        done
        shopt -u nullglob
      else
        echo "No patch file found, skipping"
      fi
          
      cd "$GITHUB_WORKSPACE"
      cat >> "$GKI_DEFCONFIG" << 'EOF'
      # SUSFS Configuration
      CONFIG_KSU_SUSFS=y
      EOF