diff --git a/docs/build-status.md b/docs/build-status.md index 68d4276..8d2ca90 100644 --- a/docs/build-status.md +++ b/docs/build-status.md @@ -402,3 +402,15 @@ Findings wired: `dns.answer_rewritten` (high) when a reference mismatches, and `dns.authoritative_unreachable` (medium) when the nonce isn't answered by the canary server. This closes the first full client↔server measurement loop: the Kotlin app measures against the Go server's canary zone on real hardware. 6 tests now run per measurement. + +## App: Shizuku shell tier VERIFIED on-device — the app is feature-complete for v1 tiers (2026-08-01) +Ran the app on the OnePlus with Shizuku running (`echolot-app/reports/CPH2747-app-run3-shizuku.json`): +- **`tiers: {app:true, shizuku:true}`**, shizuku test **ok**, **commands_ok 7/7**, + **`exec_path: UserService`** (the OnePlus binds it — matches the prober; the newProcess fallback + stays for the Lenovo). +- Evidence is the real privileged material the production parsers need: live ARP/NDP neighbor + table, per-table IPv6 routes, `ip addr`, an actual `[NEIGH]` netlink event from `ip monitor`, + IpClient DHCP logs incl. APF capabilities, and the wifi state dump — all as shell(2000). +Both privilege tiers now work end to end in the production app on real hardware, alongside the +canary-DNS loop against the live server. 6 tests/run: link.snapshot, icmp.ping4, icmp.ping6, +net.captive_portal, dns.canary, link.ip_monitor(shizuku). diff --git a/echolot-app/reports/CPH2747-app-run3-shizuku.json b/echolot-app/reports/CPH2747-app-run3-shizuku.json new file mode 100644 index 0000000..5f382b4 --- /dev/null +++ b/echolot-app/reports/CPH2747-app-run3-shizuku.json @@ -0,0 +1,398 @@ +{ + "schema": "echolot/measurement", + "schema_version": "1.0.0", + "run": { + "id": "6a8f4680-e3ef-4602-8f80-bf5d8c3657af", + "trigger": "manual", + "started_at": "2026-08-01T07:04:19.587228Z", + "ended_at": "2026-08-01T07:04:34.598486Z", + "clock": { + "mono_origin_wall": "2026-08-01T07:04:19.587228Z", + "ntp_offset_ms": null, + "ntp_offset_source": null + }, + "app": { + "version": "0.1.0", + "build": 1, + "git": null, + "flavor": "app" + }, + "device": { + "manufacturer": "OnePlus", + "model": "CPH2747", + "android_sdk": 36, + "android_release": "16", + "security_patch": null + }, + "tiers": { + "app": true, + "shizuku": true, + "root": false + }, + "profiles_used": [], + "notes": null + }, + "networks": [ + { + "id": "net-0", + "transport": "cellular", + "interface": "rmnet_data4", + "link": { + "mtu": 1500, + "addresses": [ + { + "addr": "2001:4bb8:417:bd78:e4fe:8cff:febe:ca8c", + "prefix_len": 64, + "scope": null, + "flags": [], + "valid_lft_s": null, + "pref_lft_s": null + } + ], + "routes": [ + { + "dst": "::/0", + "gateway": "fe80::246f:12be:21ef:1b54", + "iface": "rmnet_data4", + "proto": null, + "expires_s": null + }, + { + "dst": "2001:4bb8:417:bd78::/64", + "gateway": "::", + "iface": "rmnet_data4", + "proto": null, + "expires_s": null + } + ], + "dns": { + "servers": [ + "fda1:3fb1:0:8:0:10:0:101", + "fda1:3fb1:0:8:0:10:0:100" + ], + "private_dns_mode": "off", + "private_dns_hostname": null, + "search_domains": [], + "nat64_prefix": null + }, + "dhcp": null, + "captive_portal": null + }, + "wifi": null, + "cellular": null, + "changes": [] + }, + { + "id": "net-1", + "transport": "wifi", + "interface": "wlan0", + "link": { + "mtu": null, + "addresses": [ + { + "addr": "fe80::7a:75ff:fee9:ae9e", + "prefix_len": 64, + "scope": null, + "flags": [], + "valid_lft_s": null, + "pref_lft_s": null + }, + { + "addr": "10.13.102.124", + "prefix_len": 24, + "scope": null, + "flags": [], + "valid_lft_s": null, + "pref_lft_s": null + } + ], + "routes": [ + { + "dst": "fe80::/64", + "gateway": "::", + "iface": "wlan0", + "proto": null, + "expires_s": null + }, + { + "dst": "::/0", + "gateway": "fe80::7a9a:18ff:fe54:b8f9", + "iface": "wlan0", + "proto": null, + "expires_s": null + }, + { + "dst": "10.13.102.0/24", + "gateway": "0.0.0.0", + "iface": "wlan0", + "proto": null, + "expires_s": null + }, + { + "dst": "0.0.0.0/0", + "gateway": "10.13.102.1", + "iface": "wlan0", + "proto": null, + "expires_s": null + } + ], + "dns": { + "servers": [ + "10.13.102.1" + ], + "private_dns_mode": "off", + "private_dns_hostname": null, + "search_domains": [ + "hudelist.local" + ], + "nat64_prefix": null + }, + "dhcp": null, + "captive_portal": null + }, + "wifi": null, + "cellular": null, + "changes": [] + } + ], + "server_sessions": [], + "tests": [ + { + "id": "cde1e8d8-c3d8-42bb-bfb7-a9cc79c593c7", + "type": "link.snapshot", + "network_ref": null, + "session_ref": null, + "tier": "app", + "started_mono_ns": 1195052, + "ended_mono_ns": 1325990, + "status": "ok", + "error": null, + "params": null, + "evidence": { + "network_count": 2, + "networks": [ + { + "id": "net-0", + "transport": "cellular", + "interface": "rmnet_data4", + "mtu": 1500, + "addresses": "2001:4bb8:417:bd78:e4fe:8cff:febe:ca8c/64", + "dns": "fda1:3fb1:0:8:0:10:0:101, fda1:3fb1:0:8:0:10:0:100", + "nat64": "none" + }, + { + "id": "net-1", + "transport": "wifi", + "interface": "wlan0", + "mtu": 0, + "addresses": "fe80::7a:75ff:fee9:ae9e/64, 10.13.102.124/24", + "dns": "10.13.102.1", + "nat64": "none" + } + ] + }, + "metrics": null + }, + { + "id": "13ef7aea-e8e5-4e89-b585-222f85c01953", + "type": "icmp.ping4", + "network_ref": null, + "session_ref": null, + "tier": "app", + "started_mono_ns": 1428334, + "ended_mono_ns": 114065886, + "status": "ok", + "error": null, + "params": null, + "evidence": { + "target": "1.1.1.1", + "default": "reply type=0 rtt_ms=71.1 bytes=15", + "cellular:net-0": "error: Binding socket to network 137 failed: EPERM (Operation not permitted)", + "wifi:net-1": "reply type=0 rtt_ms=38.9 bytes=15" + }, + "metrics": { + "networks_ok": 2, + "rtt_ms_min": 38.9, + "rtt_ms_avg": 55.0, + "rtt_ms_max": 71.1 + } + }, + { + "id": "80fe2128-bcd4-4606-9d76-bf4b97ca316a", + "type": "icmp.ping6", + "network_ref": null, + "session_ref": null, + "tier": "app", + "started_mono_ns": 114526563, + "ended_mono_ns": 6298296404, + "status": "failed", + "error": null, + "params": null, + "evidence": { + "target": "2606:4700:4700::1111", + "default": "error: recvfrom failed: EAGAIN (Try again)", + "cellular:net-0": "error: Binding socket to network 137 failed: EPERM (Operation not permitted)", + "wifi:net-1": "error: recvfrom failed: EAGAIN (Try again)" + }, + "metrics": { + "networks_ok": 0 + } + }, + { + "id": "e47cbc01-fad0-4fb2-bcb3-66c14dc36bb9", + "type": "net.captive_portal", + "network_ref": null, + "session_ref": null, + "tier": "app", + "started_mono_ns": 6298807706, + "ended_mono_ns": 6995623539, + "status": "ok", + "error": null, + "params": null, + "evidence": { + "https_url": "https://www.google.com/generate_204", + "http_url": "http://connectivitycheck.gstatic.com/generate_204", + "default": { + "https_code": 204, + "http_code": 204, + "verdict": "validated" + }, + "cellular:net-0": { + "https_code": -1, + "http_code": -1, + "verdict": "no_internet" + }, + "wifi:net-1": { + "https_code": 204, + "http_code": 204, + "verdict": "validated" + } + }, + "metrics": null + }, + { + "id": "bfd7ba1d-4a3a-444d-bd0f-8c4d6a27cac9", + "type": "dns.canary", + "network_ref": null, + "session_ref": null, + "tier": "app", + "started_mono_ns": 6996122445, + "ended_mono_ns": 7236548539, + "status": "ok", + "error": null, + "params": null, + "evidence": { + "zone": "c.echo-lot.app", + "reference_records": { + "ttl-5": { + "fqdn": "ttl-5.c.echo-lot.app", + "expected": "192.0.2.5", + "got": "192.0.2.5", + "verdict": "match" + }, + "ttl-60": { + "fqdn": "ttl-60.c.echo-lot.app", + "expected": "192.0.2.60", + "got": "192.0.2.60", + "verdict": "match" + }, + "ttl-3600": { + "fqdn": "ttl-3600.c.echo-lot.app", + "expected": "192.0.2.36", + "got": "192.0.2.36", + "verdict": "match" + }, + "ttl-86400": { + "fqdn": "ttl-86400.c.echo-lot.app", + "expected": "192.0.2.86", + "got": "192.0.2.86", + "verdict": "match" + } + }, + "nonce_query": { + "fqdn": "fe492767.adhoc.c.echo-lot.app", + "got": "192.0.2.46", + "reached_authoritative": true, + "note": "a non-192.0.2.x answer means something other than the canary server replied" + } + }, + "metrics": { + "references_matched": 4, + "references_mismatched": 0, + "references_failed": 0 + } + }, + { + "id": "692a93e1-5f8c-4a79-ae52-7248bfbe92bf", + "type": "link.ip_monitor", + "network_ref": null, + "session_ref": null, + "tier": "shizuku", + "started_mono_ns": 7237221143, + "ended_mono_ns": 15009945880, + "status": "ok", + "error": null, + "params": null, + "evidence": { + "binder_alive": true, + "version": 13, + "runs_as": "shell(2000)", + "exec_path": "UserService", + "id": "uid=2000\nuid=2000(shell) gid=2000(shell) groups=2000(shell),1004(input),1007(log),1011(adb),1015(sdcard_rw),1028(sdcard_r),1078(ext_data_rw),1079(ext_obb_rw),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats),3009(readproc),3011(uhid),3012(readtracefs) context=u:r:shell:s0", + "ip_neigh": "uid=2000\n10.13.102.120 dev wlan0 lladdr 0e:d8:14:58:6c:8b STALE\n10.13.102.5 dev wlan0 lladdr 90:09:d0:1a:83:e4 REACHABLE\n10.13.102.1 dev wlan0 lladdr 78:9a:18:54:b8:f9 REACHABLE\n10.13.102.108 dev wlan0 lladdr 14:49:e0:6d:6c:00 STALE\n10.13.102.107 dev wlan0 lladdr 38:8c:50:08:13:5b STALE\n10.13.102.21 dev wlan0 FAILED\n10.13.102.116 dev wlan0 lladdr 0c:08:b4:03:68:0e STALE\n10.13.102.125 dev wlan0 FAILED\nfe80::7a9a:18ff:fe54:b8f9 dev wlan0 lladdr 78:9a:18:54:b8:f9 router REACHABLE", + "ip6_route": "uid=2000\nfe80::/64 dev wlan0 table 1028 proto kernel metric 256 pref medium\nfe80::/64 dev wlan0 table 1028 proto static metric 1024 pref medium\ndefault via fe80::7a9a:18ff:fe54:b8f9 dev wlan0 table 1028 proto ra metric 1024 expires 1778sec pref medium\nfe80::/64 dev vgate0 table 1031 proto kernel metric 256 pref medium\n2001:4bb8:417:bd78::/64 dev rmnet_data4 table 1032 proto kernel metric 256 pref medium\n2001:4bb8:417:bd78::/64 dev rmnet_data4 table 1032 proto static metric 1024 pref medium\nfe80::/64 dev rmnet_data4 table 1032 proto kernel metric 256 pref medium\ndefault via fe80::246f:12be:21ef:1b54 dev rmnet_data4 table 1032 proto ra metric 1024 expires 63797sec hoplimit 255 pref medium\nfe80::/64 dev wlan0 table 1000000028 proto static metric 1024 pref medium\n2001:4bb8:417:bd78::/64 dev rmnet_data4 table 1000000032 proto static metric 1024 pref medium\nfe80::/64 dev dummy0 table 1002 proto kernel metric 256 pref medium\ndefault dev dummy0 table 1002 proto static metric 1024 pref medium\nfe80::/64 dev ifb0 table 1003 proto kernel metric 256 pref medium\nfe80::/64 dev ifb1 table 1004 proto kernel metric 256 pref medium\nfe80::/64 dev ifb2 table 1019 proto kernel metric 256 pref medium\nfe8", + "ip_addr": "uid=2000\n1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000\n link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00\n inet 127.0.0.1/8 scope host lo\n valid_lft forever preferred_lft forever\n inet6 ::1/128 scope host \n valid_lft forever preferred_lft forever\n2: dummy0: mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000\n link/ether be:3d:e2:93:78:b9 brd ff:ff:ff:ff:ff:ff\n inet6 fe80::bc3d:e2ff:fe93:78b9/64 scope link \n valid_lft forever preferred_lft forever\n3: ifb0: mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 1000\n link/ether ba:6e:46:b5:3d:bb brd ff:ff:ff:ff:ff:ff\n inet6 fe80::b86e:46ff:feb5:3dbb/64 scope link \n valid_lft forever preferred_lft forever\n4: ifb1: mtu 1500 qdisc htb state UNKNOWN group default qlen 1000\n link/ether d6:2a:e2:f5:93:8f brd ff:ff:ff:ff:ff:ff\n inet6 fe80::d42a:e2ff:fef5:938f/64 scope link \n valid_lft forever preferred_lft forever\n5: tunl0@NONE: mtu 1480 qdisc noop state DOWN group default qlen 1000\n link/ipip 0.0.0.0 brd 0.0.0.0\n6: gre0@NO", + "ip_monitor": "uid=2000\n[NEIGH]10.13.102.5 dev wlan0 lladdr 90:09:d0:1a:83:e4 STALE", + "dhcp_log": "uid=2000\nRecently active IpClient logs:\nIpClient.wlan0\n IpClient.wlan0 APF dump:\n Capabilities: { apfVersionSupported: 6000, maximumApfProgramSize: 4096 }\n InstallableProgramSizeClamp: 2147483647\n--\n IpClient.wlan0 current ProvisioningConfiguration:\n ProvisioningConfiguration{mUniqueEui64AddressesOnly: false, mEnablePreconnection: false, mUsingMultinetworkPolicyTracker: true, mUsingIpReachabilityMonitor: true, mRequestedPreDhcpActionMs: 18000, mInitialConfig: null, mStaticIpConfig: null, mApfCapabilities: ApfCapabilities{version: 6000, maxSize: 4096, format: 1}, mProvisioningTimeoutMs: 18000, mIPv6AddrGenMode: 0, mNetwork: 201, mDisplayName: \"hudeWLAN-WPA3\", mCreatorUid:1000, mScanResultInfo: SSID: hudeWLAN-WPA3, BSSID: 72:a7:41:a3:0d:d7, Information Elements: {[ID: 0, [104, 117, 100, 101, 87, 76, 65, 78, 45, 87, 80, 65, 51]][ID: 1, [-110, 36, 72, 108]][ID: 3, [44]][ID: 48, [1, 0, 0, 15, -84, 4, 1, 0, 0, 15, -84, 4, 1, 0, 0, 15, -84, 8, -64, 0]][ID: 45, [-17, 9, 3, -1, -1, -1, -1, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 24, 4, -121, 25, 0]][ID: 61, [44, 5, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]][ID: 127, [0, 0, 8, -128, 0, 0, 0, 64, 0, 0, 0]][ID: 1", + "wifi_dump": "uid=2000\n rec[12]: time=08-01 08:42:26.270 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_POST_DHCP_ACTION screen=on v4 v4r v4dns v6r\n rec[13]: time=08-01 08:42:26.275 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_IPV4_PROVISIONING_SUCCESS screen=on DhcpResultsParcelable{baseConfiguration: IP address 10.13.102.124/24 Gateway 10.13.102.1 DNS servers: [ 10.13.102.1 ] Domains hudelist.local, leaseDuration: 600, mtu: 0, serverAddress: 10.13.102.1, vendorInfo: null, serverHostName: , captivePortalApiUrl: null}\n rec[14]: time=08-01 08:42:26.279 processed=ConnectableState org=L3ConnectedState dest= what=CMD_UPDATE_LINKPROPERTIES screen=on 25 0 v4 v4r v4dns v6r\n rec[15]: time=08-01 08:45:29.216 processed=ConnectingOrConnectedState org=L3ConnectedState dest= what=SUPPLICANT_STATE_CHANGE_EVENT screen=on 0 0 ssid: \"hudeWLAN-WPA3\" bssid: 00:00:00:00:00:00 nid: 16 frequencyMhz: 2462 state: ASSOCIATED\n--\n rec[21]: time=08-01 08:47:26.310 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_POST_DHCP_ACTION screen=on v4 v4r v4dns v6r\n rec[22]: time=08-01 08:47:26.315 processed=L2ConnectedState org=L3ConnectedState dest=