Skip to content

Q25 Toolbox v4.1.4

Choose a tag to compare

@nozerorma nozerorma released this 05 Oct 12:26
· 17 commits to production-release since this release

Root detection stealth for key remapping

  • The hardware key remapping bind mount (Q25_keyboard.kl) is now isolated exclusively inside system_server's mount namespace (nsenter -t $SS_PID -m) with slave propagation rather than the global master namespace (su -M).
  • This prevents root and integrity checkers (such as Native Detector and Duck Detector) from detecting a suspicious mount on /vendor/usr/keylayout/Q25_keyboard.kl in untrusted app processes, while EventHub continues to receive the remapped hardware layout seamlessly.

Full changelog: CHANGELOG.md