Add stealth mode: SUSFS path hiding, prop masking, kmod hiding

Stealth mode toggle in WebUI hides RadioControl from detection:
- resetprop -n for invisible prop changes
- SUSFS sus_path hiding for module dir, config dir, device nodes
- SUSFS sus_kstat to hide kernel modules from /proc/modules
- sysfs rc_wifi_mon status node hidden
- Requires KernelSU-Next with SUSFS enabled
This commit is contained in:
sssnake
2026-03-31 21:00:59 -07:00
parent db07b4f7ef
commit 070f8a4fb3
4 changed files with 47 additions and 1 deletions

View File

@@ -23,6 +23,7 @@ FACTORY_TEST_MODE=0
USB_DIAG_MODE=0
HIDDEN_MENUS=0
MODEM_LOG=0
STEALTH_MODE=0
WIFI_MODE=managed
# Kernel modules to load (space-separated)
@@ -150,6 +151,41 @@ if [ "$DETECTED_SOC" = "tensor" ]; then
fi
fi
#############################
# Stealth mode
#############################
if [ "$STEALTH_MODE" = "1" ]; then
# Use resetprop -n to set props without triggering property_service
# This makes changes invisible to apps querying via __system_property_find
for prop in ro.build.type ro.debuggable ro.secure ro.adb.secure \
ro.factorytest persist.sys.factorytest; do
val=$(getprop "$prop" 2>/dev/null)
[ -n "$val" ] && resetprop -n "$prop" "$val" 2>/dev/null
done
# SUSFS path hiding — hide module directory from filesystem enumeration
# Requires KernelSU-Next with SUSFS enabled
if command -v ksud >/dev/null 2>&1; then
# Hide our module directory
ksud susfs add_sus_path "$MODDIR" 2>/dev/null
# Hide config directory
ksud susfs add_sus_path "$CONFIG_DIR" 2>/dev/null
# Hide kernel module device nodes
ksud susfs add_sus_path /dev/rc_shannon 2>/dev/null
ksud susfs add_sus_path /dev/rc_diag 2>/dev/null
# Hide sysfs status
ksud susfs add_sus_path /sys/kernel/rc_wifi_mon 2>/dev/null
fi
# Hide kernel modules from /proc/modules (SUSFS ksu_sus_kstat)
if [ -f /proc/susfs_sus_kstat ]; then
for mod in rc_wifi_mon rc_shannon_cmd rc_diag_bridge; do
echo "$mod" > /proc/susfs_sus_kstat 2>/dev/null
done
fi
fi
#############################
# Mount debugfs if needed
#############################