here's the test APK :)

Give it a try..👀

Lemme cook 🗿

Can anyone try the recently discovered "Copy Fail" vulnerability on Droidspaces?

https://github.com/tgies/copy-fail-c/releases/tag/v0.2.0

Looks like I don't have a supported kernel.

What is expected is gaining root access inside the container or total container escape.

It seems like Google saved all ya all asses by turning off the core Android kernel configuration necessary for this vulnerability:

CONFIG_CRYPTO_USER_API_AEAD=y

But that doesn’t mean we are immune to this kind of attack since non-GKI kernels exist.

We still gotta block the necessary syscalls needed for this kind of attack using seccomp for the greater good.

Well, you are vulnerable on Linux Desktop

What happened was a Local Privilege Escalation, not a container escape.

Therefore, this is a kernel issue rather than an issue with Droidspaces.

However, we will work on a fix from our side if possible ❤️

okay. we are safe now🗿

Give it a try:

https://t.me/DroidspacesCI/206?single

I know. Most users use hw-access by default, and you all want freedom.

But we have to admit this: if your rooting method is compromised, if sudo, su, or the kernel is compromised, Droidspaces is compromised too. We can't prevent that.

Our goal is to make devices real Linux servers that need real capabilities, not sandboxes.