The Linux kernel FastRPC driver creates a unique session for every process that opens a file descriptor. Session sharing allows the sharing of a reverse tunnel across clients that need it. Add support for managing the session for clients. The argument to -p is a path to any executable file, such as /bin/sh. The file descriptor to the FastRPC device node is in the HEXAGONRPC_FD environment variable.
This is a proof-of-concept for interacting with the Snapdragon Sensor Core using the reverse-engineered protocol buffers. It was made to try to initialize it, but the Pixel 3a is missing some sensors once the firmware is loaded.
A best effort is made to prefix all log messages with sensh: so it's clear
which lines were entered by the user.
Requirements
- gcc
- libqrtr
- meson or make
- protobuf-c
- qmic (optional for regenerating QMI, at https://github.com/andersson/qmic)
Installation
This can be compiled using Meson:
$ meson setup build
$ ninja -C build
There is also a Makefile to compile this, if you can get it to work:
$ mkdir build
$ make -k
Usage
Sensh doesn't automatically track, probe, or look up sensors; that is for a full implementation. Instead, it expects you to look up the sensor and copy the ID with your terminal emulator:
lookup accel_cal
sensh: accel_cal sensor found: A1392FDF217B7D9EI6648AED8C04DDFB9
attr A1392FDF217B7D9EI6648AED8C04DDFB9
sensh: name: ASH_CAL
sensh: vendor: GOOGLE
sensh: type: accel_cal
sensh: version: 1
sensh: api: sns_cal.proto
sensh: rates: 10.000000
sensh: stream type: 1
sensh: physical sensor: 0
sensh: available: 1
You can send 3 messages: lookup, attr, and watch. The lookup command returns SUIDs for the passed data type. The attr command returns attributes for the sensor. Finally, the watch command tells the sensor core to send events from a sensor whenever the sensor's value changes.
An EOF (normally Ctrl+D) is enough to exit the shell unless the sensor core died.
References
The following sources were used as reference: