南宫雪珊

Freeze package cgroup before killing

Apps are able to prevent their death by forking multiple processes under different services and monitoring for the death of any of these. When a child death is detected, the remaining process restarts the terminating/terminated service before it's able to be killed itself. This is now prevented by freezing the entire cgroup of the package to be killed before killing the individual processes. After the kills are completed synchronously, the cgroup can be unfrozen to allow for restarts. Before freezing the cgroup, the binder interfaces of the processes about to be frozen are also frozen to prevent indefinite blocking by synchronous Binder callers.

https://github.com/aosp-mirror/platform_frameworks_base/commit/79825c6f2f8b46808e4b431fe52b3be78f1e8ac8

自此，2016年公开的MarsDaemon保活终于死亡。
https://blog.csdn.net/marswin89/article/details/50917098

时间表：
Android 6 MarsDaemon 公开，绕过强行停止保活
Android 8 禁止后台应用启动后台服务
Android 9 启动前台服务需要权限
Android 10 禁止后台应用启动活动
Android 11 支持cgroupv2的设备可以冻结缓存状态的应用
Android 12 禁止后台应用启动前台服务
Android 13 添加前台服务任务管理器
Android 14 强行停止前冻结应用

GitHub

Freeze package cgroup before killing · aosp-mirror/platform_frameworks_base@79825c6

Apps are able to prevent their death by forking multiple processes
under different services and monitoring for the death of any of these.
When a child death is detected, the remaining process resta...

www.tgoop.com/vvb2060Channel/810

3.8K viewsedited  Oct 6, 2023 at 08:59

Freeze package cgroup before killing

Apps are able to prevent their death by forking multiple processes under different services and monitoring for the death of any of these. When a child death is detected, the remaining process restarts the terminating/terminated service before it's able to be killed itself. This is now prevented by freezing the entire cgroup of the package to be killed before killing the individual processes. After the kills are completed synchronously, the cgroup can be unfrozen to allow for restarts. Before freezing the cgroup, the binder interfaces of the processes about to be frozen are also frozen to prevent indefinite blocking by synchronous Binder callers.

https://github.com/aosp-mirror/platform_frameworks_base/commit/79825c6f2f8b46808e4b431fe52b3be78f1e8ac8

自此，2016年公开的MarsDaemon保活终于死亡。
https://blog.csdn.net/marswin89/article/details/50917098

时间表：
Android 6 MarsDaemon 公开，绕过强行停止保活
Android 8 禁止后台应用启动后台服务
Android 9 启动前台服务需要权限
Android 10 禁止后台应用启动活动
Android 11 支持cgroupv2的设备可以冻结缓存状态的应用
Android 12 禁止后台应用启动前台服务
Android 13 添加前台服务任务管理器
Android 14 强行停止前冻结应用

BY 南宫雪珊