optional: turn off mount monitor at boot complete

security_remove_hooks ?

Author: backslashxx

kernel/core_hook.c

@@ -50,6 +50,7 @@ static bool ksu_module_mounted = false;
 extern int handle_sepolicy(unsigned long arg3, void __user *arg4);
 
 static bool ksu_su_compat_enabled = true;
+static bool ksu_mount_monitor_enabled = true;
 extern void ksu_sucompat_init();
 extern void ksu_sucompat_exit();
 
@@ -332,6 +333,9 @@ int ksu_handle_prctl(int option, unsigned long arg2, unsigned long arg3,
 			if (!boot_complete_lock) {
 				boot_complete_lock = true;
 				pr_info("boot_complete triggered\n");
+				// turn off mount monitor
+				pr_info("turning off ksu_mount_monitor\n");
+				ksu_mount_monitor_enabled = false;
 			}
 			break;
 		}
@@ -597,7 +601,10 @@ int ksu_handle_setuid(struct cred *new, const struct cred *old)
 
 int ksu_mount_monitor(const char *dev_name, const char *dirname, const char *type) 
 {
-	
+	if (!ksu_mount_monitor_enabled) {
+		return 0;
+	}
+
 	char *device_name_copy = kstrdup(dev_name, GFP_KERNEL);
 	char *fstype_copy = kstrdup(type, GFP_KERNEL);
 	struct mount_entry *new_entry;
@@ -709,6 +716,10 @@ static int ksu_task_fix_setuid(struct cred *new, const struct cred *old,
 static int ksu_sb_mount(const char *dev_name, const struct path *path,
                         const char *type, unsigned long flags, void *data)
 {
+	if (!ksu_mount_monitor_enabled) {
+		return 0;
+	}
+	
 	char buf[256];
 	char *dir_name = d_path(path, buf, sizeof(buf));