finds.dev← search

// the find

aviraxp/ZN-AuditPatch

★ 379 · C · updated Apr 2026

Replace sensitive context in audit log

A Zygisk module that hooks Android's audit logging system to redact sensitive context from audit log entries, based on a patch proposed to AOSP. Useful for privacy-conscious Android modders who want to prevent sensitive app context from leaking into system logs. Requires a rooted Android device with Zygisk support.

The AOSP upstream patch reference is the right move — this isn't random hooking, it's backporting a real platform fix. Using Zygisk (rather than Magisk's older module format) means the hook runs early in the process lifecycle, before most sensitive context is logged. The codebase is tiny, which means there's actually something to read: one hook.cpp file and you understand the whole thing.

The README is essentially nothing — one link to an AOSP code review. No explanation of what 'sensitive context' means in practice, what gets redacted, or what doesn't. No documentation on which Android versions are supported or tested. The AOSP patch link is the only anchor, so if that review is abandoned or the behavior changes upstream, there's no standalone explanation of what this module actually does.

View on GitHub →

// want more like this?

We dig through GitHub every week and send a few repos picked for what you actually care about — each with an honest take like this one.

Get finds in your inbox → Search again →