polygraphene / DirtyPipe-Android

Dirty Pipe root exploit for Android (Pixel 6)
758 stars 128 forks source link

HI, How do you bypass kernel module signature verification? #16

Open YeJZ opened 1 year ago

polygraphene commented 1 year ago

What error did you get on calling finit_module? In my experience on Pixel 6 kernel, we need proper crc on module_layout symbol. There was no cryptographic signature verification.

Securee commented 10 months ago

@polygraphene In my test,some device will enable signature verification. and when to call: int ret = syscall(__NR_finit_module, fd, "", 0); the logcat will print the error msg: I modprobe-payload: Failed: /vendor/lib/libFace3D_hlos.so -1 129 the errno=129,mean "Key was rejected by service". So,how can we bypass the kernel module sigature verification?