Added adaway.root template

[JohnRTitor]

Adaway only needs the following permissions to work properly: DAC_OVERRIDE, SYS_PTRACE.

Note: systemless hosts kernelsu module needs to be installed, to add support.

This PR only addresses the minimal permission requirements of Adaway to let it modify hosts file.

[tiann]

Why needs PTRACE? please check: #1134 (comment)

[JohnRTitor]

To be honest, I just enabled all the permissions and kept removing them till I got to this list. These permission are "essential" without these, the app can not seem to be modify the hosts file.

If I just add it to the group readproc and remove the PTRACE perm:

Another thing I would like to note that there is a "Web server feature":
It needs to NET_BIND_SERVICE to work. (the certificate needs to be manually installed via certificate manager)

The app works fine with DAC_OVERRIDE, NET_BIND_SERVICE, SYS_PTRACE. or ofcourse, with the "default" app profile.

[tiann]

The PTRACE is a very dangerous cap, i don't know why it needs ptrace to work

[JohnRTitor]

Without this perm, the app can't seem to detect that it has root, on a fresh install/data cleared. I'm pinging @symbuzzer here who contributed to both KernelSU and Adaway for their input. Also pinging an Adaway maintainer @PerfectSlayer

[symbuzzer]

It shouldn't need CAP_SYS_PTRACE I think. I also don't understand why it needs to read process

[JohnRTitor]

It shouldn't need CAP_SYS_PTRACE I think. I also don't understand why it needs to read process

Can you find out why it needs to use the perm from the open source code? Adaway maintainer @PerfectSlayer seems to have stalled the project for a year. He is still active on GitHub though.

[symbuzzer]

I have no motivation for this, sorry ,:(

[PerfectSlayer]

Hey AdAway maintainer here 👋

Not sure either why CAP_SYS _PTRACE is needed but if you get this error without it, it should mostly come from one of the two classes: RootModel or ShellUtils.

It might also help if you are able to provide a logcat when it’s failing.

[JohnRTitor]

Here's the log snippet.
Log_2024-02-13_15-37-12.txt

I suppose this is the issue.

[symbuzzer]

@PerfectSlayer
Wouldn't you consider creating the hosts file from the /data/data/org.adaway/files/ folder into the /data/adb/modules/systemless-hosts-KernelSU-module/system/etc/ folder? If KernelSU and systemless-hosts-KernelSU-module are installed, of course.

[tiann]

Although there are still some doubts, I will merge it; because it is better to have restrictions than no restrictions at all. If you find out why PTRACE is needed, you are welcome to PR again.