Use force_sig(SIGKILL) to kill process

aviraxp · web-flow · commit 2b4f88f8bca3 · 2025-11-07T23:07:14.000+08:00
diff --git a/kernel/core_hook.c b/kernel/core_hook.c
@@ -358,7 +358,7 @@ int ksu_handle_setuid(struct cred *new, const struct cred *old)
                 if (!is_ksu_domain()) {
                     pr_warn("find suspicious EoP: %d %s, from %d to %d\n", 
                         current->pid, current->comm, old_uid.val, new_uid.val);
-                    kill_pgrp(SIGKILL, current, 0);
+                    force_sig(SIGKILL);
                     return 0;
                 }
             }
@@ -367,7 +367,7 @@ int ksu_handle_setuid(struct cred *new, const struct cred *old)
                 if (new_uid.val < old_uid.val && !ksu_is_allow_uid_for_current(old_uid.val)) {
                     pr_warn("find suspicious EoP: %d %s, from %d to %d\n", 
                         current->pid, current->comm, old_uid.val, new_uid.val);
-                    kill_pgrp(SIGKILL, current, 0);
+                    force_sig(SIGKILL);
                     return 0;
                 }
             }

Original file line number	Diff line number	Diff line change
`@@ -358,7 +358,7 @@ int ksu_handle_setuid(struct cred new, const struct cred old)`
`358`	`358`	`if (!is_ksu_domain()) {`
`359`	`359`	`pr_warn("find suspicious EoP: %d %s, from %d to %d\n",`
`360`	`360`	`current->pid, current->comm, old_uid.val, new_uid.val);`
`361`		`- kill_pgrp(SIGKILL, current, 0);`
	`361`	`+ force_sig(SIGKILL);`
`362`	`362`	`return 0;`
`363`	`363`	`}`
`364`	`364`	`}`
`@@ -367,7 +367,7 @@ int ksu_handle_setuid(struct cred new, const struct cred old)`
`367`	`367`	`if (new_uid.val < old_uid.val && !ksu_is_allow_uid_for_current(old_uid.val)) {`
`368`	`368`	`pr_warn("find suspicious EoP: %d %s, from %d to %d\n",`
`369`	`369`	`current->pid, current->comm, old_uid.val, new_uid.val);`
`370`		`- kill_pgrp(SIGKILL, current, 0);`
	`370`	`+ force_sig(SIGKILL);`
`371`	`371`	`return 0;`
`372`	`372`	`}`
`373`	`373`	`}`