Skip to content

Releases: yakidango-official/GhostLock-H80GT

GhostLock - Honor 80 GT v0.3.1

Choose a tag to compare

@yakidango-official yakidango-official released this 31 Aug 02:24
  • [loader] Fixed: the id line at the top of the load log showed bogus numbers, and errors from other processes leaked into the log
  • [loader] Temporary files are cleaned up automatically when the run finishes
  • [loader] Helper processes exit on their own after the jailbreak instead of lingering until the next reboot
  • [setup] Stricter success check: success is now reported only after SELinux is confirmed restored
  • [setup] The KernelSU manager opens automatically when the jailbreak completes

中文

  • [loader] 修复:加载日志开头的 id 行显示异常数字,日志中会混入其他进程的报错
  • [loader] 运行结束后自动清理临时文件
  • [loader] 越狱结束后辅助进程自动退出,不再残留到重启后
  • [setup] 成功判定更严格:确认 SELinux 已恢复后才报告成功
  • [setup] 越狱完成后自动打开 KernelSU 管理器

KernelSU: v3.3.0

GhostLock - Honor 80 GT v0.3.0

Choose a tag to compare

@yakidango-official yakidango-official released this 29 Aug 23:01
  • [KernelSU] Upgraded to KernelSU v3.3.0; ksud and the module are rebuilt to match
  • [firmware] Added support for 8.0.0.135 / 8.0.0.143 / 8.0.0.150 (adapted, not verified on a real device)

中文

  • [KernelSU] 升级到 KernelSU v3.3.0;ksud 与内核模块同步重建
  • [固件] 新增适配 8.0.0.135 / 8.0.0.143 / 8.0.0.150(已适配,真机未验证)

GhostLock - Honor 80 GT v0.2.7

Choose a tag to compare

@yakidango-official yakidango-official released this 28 Aug 03:38
  • [exploit] Fixed error handling that broke the route's own retry and boot_id restore; setup.sh no longer runs concurrent attempts
  • [exploit] Robustness: fork failure, helper-settle timeout, diagnostic-mode hang, empty parameters
  • [build] Fixed the dead param-pairing check in the release pipeline; 5.10.236 targets accept the carrier override; dev driver verifies ksud, reboots on loader abort, uses a fresh run dir per attempt
  • [KernelSU] Comment correction only

中文

  • [exploit] 修复错误处理压掉自身重试与 boot_id 恢复的问题;setup.sh 不再并发重试
  • [exploit] 健壮性修复(fork 失败、就绪超时、诊断模式卡死、空参数)
  • [build] 修复发版管线失效的参数检查;5.10.236 接受载体覆盖;开发脚本验证 ksud、中止即重启、每次换新目录
  • [KernelSU] 修正注释

KernelSU: v3.2.5

GhostLock - Honor 80 GT v0.2.6

Choose a tag to compare

@yakidango-official yakidango-official released this 27 Aug 03:04
  • ⚠️ [sepolicy] critical fix: module sepolicy.rule files were never applied. ksu_dup_sepolicy allocated its buffer using a stale policydb.len, so every injection after the first failed with EINVAL. Module rules now load dynamically; install a module and hot reboot (see the hotreboot module) to apply it, no re-jailbreak needed
  • [loader] Fix module activation on CN builds: Honor's parseReadAppsPermission crashes in LSPosed's daemon, keeping some modules (e.g. Thanox) inactive. Worked around by temporarily changing ro.product.locale.region after each jailbreak; user locale settings are not affected
  • [KernelSU] Enable selinux_hide on the late load; the backup policy is captured from a pristine snapshot before any rule is injected
  • [loader] No adbd handling anymore, matching upstream KSU's late-load path: the adb_root hook only takes effect for adbd launches that happen after the feature is turned on, so an adbd started earlier stays unrooted until it is restarted. There is no safe point for the loader itself to restart adbd (before re-enforcing, the restart kills the loader too, because the on-device shell tools run inside adbd's process group; after re-enforcing, the shell no longer has permission to kill adbd). ADB Root recovery is handled by the hotreboot module instead: at each soft reboot it checks whether adbd is already running with the KernelSU hook and restarts it only if not
  • [KernelSU] Remove the device codename from kernel log messages; output now matches stock KSU formatting
  • [exploit] Correct the KS scan window for 16GB RAM variants (two defects in the v0.2.5 implementation)

中文

  • ⚠️ [sepolicy] 重要修复:模块的 sepolicy.rule 从未生效过。ksu_dup_sepolicy 使用过期的 policydb.len 分配缓冲区,首次注入之后的全部注入均以 EINVAL 失败。模块规则现在支持动态加载,安装模块后热重启(推荐使用 hotreboot 模块)即可生效,无需重新越狱
  • [loader] 修复国行系统的模块激活问题:荣耀 parseReadAppsPermission 在 LSPosed 守护进程中崩溃,导致部分模块(如 Thanox 等)始终未激活。现在每次越狱后临时修改 ro.product.locale.region 绕过,用户区域设置不受影响
  • [KernelSU] 晚加载模式下启用 selinux_hide,备份策略取自注入任何规则前的原始快照
  • [loader] loader 不再处理 adbd,与原版 KSU 的晚加载行为一致:adb_root 钩子只对功能开启后启动的 adbd 生效,此前已在运行的 adbd 要等重启才能获得 root。而 loader 自己没有安全的时机去重启 adbd(在恢复 enforcing 之前重启,会因设备端终端工具运行在 adbd 的进程组里而把 loader 一并杀死;恢复 enforcing 之后,shell 又不再有结束 adbd 进程的权限)。ADB Root 的恢复改由 hotreboot 模块完成:每次软重启时检查 adbd 是否已带 KernelSU 钩子运行,仅在未挂钩时重启它
  • [KernelSU] 移除内核日志中的机型代号,输出格式与原版 KSU 一致
  • [exploit] 修正 16GB 内存机型的 KS 扫描窗口(v0.2.5 实现中有两处缺陷)

KernelSU: v3.2.5

GhostLock - Honor 80 GT v0.2.5

Choose a tag to compare

@yakidango-official yakidango-official released this 26 Aug 05:17
  • Full bundle for the HONOR 80 GT (AGT-AN00) supported versions: 8.0.0.128 - 9.0.0.230, setup.sh covers them all via kernel-string manifest
  • Device-verified firmwares: 8.0.0.128 / 8.0.0.160 / 9.0.0.157 / 9.0.0.200SP1 / 9.0.0.220SP2 / 9.0.0.230
  • Fix the KS scan window for 16GB RAM variants (待验证 / pending verification): the old window ended below the extrapolated 16GB physmap top, so the mm bruteforce failed on every try
  • ZygiskNext is disabled on the late load (it wedges the session); enable it in the manager and use the hotreboot module to bring it up
  • setup.sh runs on-device (Shizuku/rish) or from the PC over adb, with automatic retry on the known early-miss reboot (pc mode only)
    Known issue: in rare cases networking stops working after the jailbreak (Wi-Fi associates but no data flows). Reboot and re-run the jailbreak to recover.

中文

  • HONOR 80 GT (AGT-AN00) Ghostlock exploit,支持版本: 8.0.0.128 - 9.0.0.230,setup.sh 通过内核字符串清单自动适配
  • 真机验证过的固件:8.0.0.128 / 8.0.0.160 / 9.0.0.157 / 9.0.0.200SP1 / 9.0.0.220SP2 / 9.0.0.230
  • 修复 16G 机型的 KS 扫描窗口(待验证):旧窗口终点低于 16G 机型的物理映射顶,导致mm 暴力扫描失败
  • 晚加载时禁用 ZygiskNext(会导致整个会话卡死);在管理器里启用后用 hotreboot 模块 拉起
  • setup.sh 支持手机端(Shizuku/rish)或 PC 端 adb 运行,未命中重启自动重试 (仅电脑版)
    已知问题:小概率越狱后网络不可用(WiFi 已连接但无数据)。重启设备重新越狱即可恢复。

KernelSU: v3.2.5