Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-06-29 08:02:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
1c9a66f896
DivestOS/Scripts/LineageOS-17.1/Patch.sh

301 lines
19 KiB
Bash
Raw Normal View History

17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
#!/bin/bash
License headers
2020-11-17 15:11:40 +00:00
#DivestOS: A privacy focused mobile distribution
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
#Copyright (c) 2015-2020 Divested Computing Group
#
#This program is free software: you can redistribute it and/or modify
#it under the terms of the GNU General Public License as published by
#the Free Software Foundation, either version 3 of the License, or
#(at your option) any later version.
#
#This program is distributed in the hope that it will be useful,
#but WITHOUT ANY WARRANTY; without even the implied warranty of
#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
#GNU General Public License for more details.
#
#You should have received a copy of the GNU General Public License
#along with this program. If not, see <https://www.gnu.org/licenses/>.
#Last verified: 2020-04-14
#Initialize aliases
#source ../../Scripts/init.sh
#Delete Everything and Sync
#resetWorkspace
#Apply all of our changes
#patchWorkspace
#Build!
#buildDevice [device]
#buildAll
#
#START OF PREPRATION
#
#Download some (non-executable) out-of-tree files for use later on
cd "$DOS_TMP_DIR";
if [ "$DOS_HOSTS_BLOCKING" = true ]; then $DOS_TOR_WRAPPER wget "$DOS_HOSTS_BLOCKING_LIST" -N; fi;
cd "$DOS_BUILD_BASE";
#
#END OF PREPRATION
#
#
#START OF ROM CHANGES
#
#top dir
cp -r "$DOS_PREBUILT_APPS""Fennec_DOS-Shim" "$DOS_BUILD_BASE""packages/apps/"; #Add a shim to install Fennec DOS without actually including the large APK
gpgVerifyDirectory "$DOS_PREBUILT_APPS""android_vendor_FDroid_PrebuiltApps/packages";
cp -r "$DOS_PREBUILT_APPS""android_vendor_FDroid_PrebuiltApps/." "$DOS_BUILD_BASE""vendor/fdroid_prebuilt/"; #Add the prebuilt apps
cp -r "$DOS_PATCHES_COMMON""android_vendor_divested/." "$DOS_BUILD_BASE""vendor/divested/"; #Add our vendor files
Small updates - recovery: abort on serial number specific updates, credit: GrapheneOS - Add lists of missing CVEs - Update cherrypicks
2020-09-02 18:15:21 +00:00
enterAndClear "bootable/recovery";
patch -p1 < "$DOS_PATCHES/android_bootable_recovery/0001-No_SerialNum_Restrictions.patch"; #Abort on serial number specific packages (GrapheneOS)
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enterAndClear "bionic";
if [ "$DOS_GRAPHENE_MALLOC" = true ]; then patch -p1 < "$DOS_PATCHES/android_bionic/0001-HM-Use_HM.patch"; fi; #(GrapheneOS)
Build fixes
2020-04-16 01:38:46 +00:00
if [ "$DOS_GRAPHENE_MALLOC" = true ]; then patch -p1 < "$DOS_PATCHES/android_bionic/0002-Symbol_Ordering.patch"; fi; #(GrapheneOS)
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enterAndClear "build/make";
17.1: Fixup TTS
2020-09-25 15:38:26 +00:00
patch -p1 < "$DOS_PATCHES/android_build/0001-Restore_TTS.patch"; #Add back PicoTTS and language files
Failed attempt at fixing signing PRODUCT_OTA_PUBLIC_KEYS is meant to be set by a vendor tree, something we don't use. Override it at the source and set it explicitely as well. This ensures that the compiled recovery.img and the one generated by sign_target_files_apks.py includes the real public keys for verification. 11.0 signing is ignored. This will need to be extensively tested as breakage can mean brick on locked devices. Although in failure cases it seems test-keys are accepted. -- After much testing there appears to be a deeper issue with how keys are inserted into the recovery and handled
2021-04-06 02:57:59 +00:00
patch -p1 < "$DOS_PATCHES/android_build/0002-OTA_Keys.patch"; #add correct keys to recovery for OTA verification
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
sed -i '75i$(my_res_package): PRIVATE_AAPT_FLAGS += --auto-add-overlay' core/aapt2.mk;
Only include Silence when needed ie. not on tablets without cellular
2021-03-24 01:11:07 +00:00
sed -i 's/messaging/Silence/' target/product/aosp_base_telephony.mk target/product/gsi_common.mk; #Switch to Silence
Small changes - Disable generation of unused OTA to reduce compile time - 17.1+: Disable APEX, breaks signing, and is also useless since no Play Store. - 18.1: Fixup signing
2021-03-29 21:09:12 +00:00
awk -i inplace '!/updatable_apex.mk/' target/product/mainline_system.mk; #Disable APEX
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enterAndClear "device/qcom/sepolicy-legacy";
patch -p1 < "$DOS_PATCHES/android_device_qcom_sepolicy-legacy/0001-Camera_Fix.patch"; #Fix camera on -user builds XXX: REMOVE THIS TRASH
echo "SELINUX_IGNORE_NEVERALLOWS := true" >> sepolicy.mk; #necessary for -user builds of legacy devices
March 2021 Security Updates
2021-03-04 17:55:50 +00:00
enterAndClear "external/chromium-webview";
Update CVE patchers
2021-05-27 17:02:11 +00:00
git pull "https://github.com/LineageOS/android_external_chromium-webview" refs/changes/11/310811/1; #update webview
March 2021 Security Updates
2021-03-04 17:55:50 +00:00
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enterAndClear "external/svox";
git revert --no-edit 1419d63b4889a26d22443fd8df1f9073bf229d3d; #Add back Makefiles
sed -i '12iLOCAL_SDK_VERSION := current' pico/Android.mk; #Fix build under Pie
sed -i 's/about to delete/unable to delete/' pico/src/com/svox/pico/LangPackUninstaller.java;
awk -i inplace '!/deletePackage/' pico/src/com/svox/pico/LangPackUninstaller.java;
Small changes - hardenDefconfig: more options from Alexander Popov's checker - 17.1: A2DP fix from GrapheneOS when hardened_malloc is in use
2020-05-23 22:06:22 +00:00
enterAndClear "frameworks/av";
if [ "$DOS_GRAPHENE_MALLOC" = true ]; then patch -p1 < "$DOS_PATCHES/android_frameworks_av/0001-HM_A2DP_Fix.patch"; fi; #(GrapheneOS)
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enterAndClear "frameworks/base";
Many changes - Missing credit in LICENSE - Update TODO - hardenLocationConf: don't change version - hardenDefconfig: Fix reboot on shutdown - changeDefaultDNS: replace a level3 dns straggler for tethering config - Don't remove CompanionDeviceManager if microG is included - Update cherry picks - init.sh: update comment wording
2020-10-11 23:22:14 +00:00
hardenLocationConf services/core/java/com/android/server/location/gps_debug.conf;
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
sed -i 's/DEFAULT_MAX_FILES = 1000;/DEFAULT_MAX_FILES = 0;/' services/core/java/com/android/server/DropBoxManagerService.java; #Disable DropBox
sed -i 's/DEFAULT_MAX_FILES_LOWRAM = 300;/DEFAULT_MAX_FILES_LOWRAM = 0;/' services/core/java/com/android/server/DropBoxManagerService.java; #Disable DropBox
sed -i 's/(notif.needNotify)/(true)/' location/java/com/android/internal/location/GpsNetInitiatedHandler.java; #Notify user when location is requested via SUPL
sed -i 's/entry == null/entry == null || true/' core/java/android/os/RecoverySystem.java; #Skip update compatibiltity check XXX: TEMPORARY FIX
sed -i 's/!Build.isBuildConsistent()/false/' services/core/java/com/android/server/wm/ActivityTaskManagerService.java; #Disable fingerprint mismatch warning XXX: TEMPORARY FIX
Small changes - 17.1: bringup bacon and ether
2020-07-23 08:47:34 +00:00
sed -i 's/DEFAULT_STRONG_AUTH_TIMEOUT_MS = 72 \* 60 \* 60 \* 1000;/DEFAULT_STRONG_AUTH_TIMEOUT_MS = 12 * 60 * 60 * 1000;/' core/java/android/app/admin/DevicePolicyManager.java; #decrease strong auth prompt timeout
17.1: Rebase microG patches
2020-09-24 12:02:27 +00:00
if [ "$DOS_MICROG_INCLUDED" = "FULL" ]; then patch -p1 < "$DOS_PATCHES/android_frameworks_base/0002-Signature_Spoofing.patch"; fi; #Allow packages to spoof their signature (microG)
if [ "$DOS_MICROG_INCLUDED" = "FULL" ]; then patch -p1 < "$DOS_PATCHES/android_frameworks_base/0003-Harden_Sig_Spoofing.patch"; fi; #Restrict signature spoofing to system apps signed with the platform key
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
changeDefaultDNS;
patch -p1 < "$DOS_PATCHES/android_frameworks_base/0006-Disable_Analytics.patch"; #Disable/reduce functionality of various ad/analytics libraries
patch -p1 < "$DOS_PATCHES/android_frameworks_base/0007-Always_Restict_Serial.patch"; #always restrict access to Build.SERIAL (GrapheneOS)
patch -p1 < "$DOS_PATCHES/android_frameworks_base/0008-Browser_No_Location.patch"; #don't grant location permission to system browsers (GrapheneOS)
patch -p1 < "$DOS_PATCHES/android_frameworks_base/0009-SystemUI_No_Permission_Review.patch"; #allow SystemUI to directly manage Bluetooth/WiFi (GrapheneOS)
if [ "$DOS_GRAPHENE_EXEC" = true ]; then patch -p1 < "$DOS_PATCHES/android_frameworks_base/0010-Exec_Based_Spawning.patch"; fi; #add exec-based spawning support (GrapheneOS)
patch -p1 < "$DOS_PATCHES/android_frameworks_base/0003-SUPL_No_IMSI.patch"; #don't send IMSI to SUPL (MSe)
patch -p1 < "$DOS_PATCHES/android_frameworks_base/0004-Fingerprint_Lockout.patch"; #enable fingerprint failed lockout after 5 attempts (GrapheneOS)
Many changes - Missing credit in LICENSE - Update TODO - hardenLocationConf: don't change version - hardenDefconfig: Fix reboot on shutdown - changeDefaultDNS: replace a level3 dns straggler for tethering config - Don't remove CompanionDeviceManager if microG is included - Update cherry picks - init.sh: update comment wording
2020-10-11 23:22:14 +00:00
if [ "$DOS_MICROG_INCLUDED" != "FULL" ]; then rm -rf packages/CompanionDeviceManager; fi; #Used to support Android Wear (which hard depends on GMS)
Drop many more repositories
2020-05-24 18:05:00 +00:00
rm -rf packages/OsuLogin; #Automatic Wi-Fi connection non-sense
rm -rf packages/PrintRecommendationService; #Creates popups to install proprietary print apps
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
if [ "$DOS_DEBLOBBER_REMOVE_IMS" = true ]; then
enterAndClear "frameworks/opt/net/ims";
patch -p1 < "$DOS_PATCHES/android_frameworks_opt_net_ims/0001-Fix_Calling.patch"; #Fix calling when IMS is removed
fi
Cherrypicks and CVE-2019-2306 patching
2021-01-06 18:41:41 +00:00
enterAndClear "hardware/qcom/display";
git apply "$DOS_PATCHES_COMMON/android_hardware_qcom_display/CVE-2019-2306-msm8084.patch" --directory msm8084;
git apply "$DOS_PATCHES_COMMON/android_hardware_qcom_display/CVE-2019-2306-msm8916.patch" --directory msm8226;
git apply "$DOS_PATCHES_COMMON/android_hardware_qcom_display/CVE-2019-2306-msm8960.patch" --directory msm8960;
git apply "$DOS_PATCHES_COMMON/android_hardware_qcom_display/CVE-2019-2306-msm8974.patch" --directory msm8974;
git apply "$DOS_PATCHES_COMMON/android_hardware_qcom_display/CVE-2019-2306-msm8994.patch" --directory msm8994;
#TODO: missing msm8909, msm8996, msm8998, sdm845, sdm8150
enterAndClear "hardware/qcom-caf/apq8084/display";
git apply "$DOS_PATCHES_COMMON/android_hardware_qcom_display/CVE-2019-2306-apq8084.patch";
Fixup typo from 42b94605
2021-01-13 09:46:51 +00:00
enterAndClear "hardware/qcom-caf/msm8952/display";
Cherrypicks and CVE-2019-2306 patching
2021-01-06 18:41:41 +00:00
git apply "$DOS_PATCHES_COMMON/android_hardware_qcom_display/CVE-2019-2306-msm8952.patch";
Fixup typo from 42b94605
2021-01-13 09:46:51 +00:00
enterAndClear "hardware/qcom-caf/msm8960/display";
Cherrypicks and CVE-2019-2306 patching
2021-01-06 18:41:41 +00:00
git apply "$DOS_PATCHES_COMMON/android_hardware_qcom_display/CVE-2019-2306-msm8960.patch";
enterAndClear "hardware/qcom-caf/msm8974/display";
git apply "$DOS_PATCHES_COMMON/android_hardware_qcom_display/CVE-2019-2306-msm8974.patch";
enterAndClear "hardware/qcom-caf/msm8994/display";
git apply "$DOS_PATCHES_COMMON/android_hardware_qcom_display/CVE-2019-2306-msm8994.patch";
Re-enable the SOUND_TRIGGER removal bits disabled in e9fd952b It does not fix the phone call audio issues on mata like I hoped it would.
2021-01-18 14:11:37 +00:00
enterAndClear "hardware/qcom-caf/msm8996/audio";
patch -p1 < "$DOS_PATCHES/android_hardware_qcom_audio/0001-Unused-8996.patch"; #audio_extn: Fix unused parameter warning in utils.c
Small fixes
2020-11-09 05:29:29 +00:00
Re-enable the SOUND_TRIGGER removal bits disabled in e9fd952b It does not fix the phone call audio issues on mata like I hoped it would.
2021-01-18 14:11:37 +00:00
enterAndClear "hardware/qcom-caf/msm8998/audio";
patch -p1 < "$DOS_PATCHES/android_hardware_qcom_audio/0001-Unused-8998.patch"; #audio_extn: Fix unused parameter warning in utils.c
Small fixes
2020-04-19 17:19:22 +00:00
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enterAndClear "libcore";
if [ "$DOS_GRAPHENE_EXEC" = true ]; then patch -p1 < "$DOS_PATCHES/android_libcore/0001-Exec_Preload.patch"; fi; #add exec-based spawning support (GrapheneOS)
if [ "$DOS_GRAPHENE_EXEC" = true ]; then patch -p1 < "$DOS_PATCHES/android_libcore/0002-Exec_Based_Spawning.patch"; fi; #add exec-based spawning support (GrapheneOS)
enterAndClear "lineage-sdk";
awk -i inplace '!/LineageWeatherManagerService/' lineage/res/res/values/config.xml; #Disable Weather
if [ "$DOS_DEBLOBBER_REMOVE_AUDIOFX" = true ]; then awk -i inplace '!/LineageAudioService/' lineage/res/res/values/config.xml; fi;
enterAndClear "packages/apps/Contacts";
patch -p1 < "$DOS_PATCHES_COMMON/android_packages_apps_Contacts/0001-No_Google_Links.patch"; #Remove Privacy Policy and Terms of Service links (GrapheneOS)
enterAndClear "packages/apps/LineageParts";
rm -rf src/org/lineageos/lineageparts/lineagestats/ res/xml/anonymous_stats.xml res/xml/preview_data.xml; #Nuke part of the analytics
patch -p1 < "$DOS_PATCHES/android_packages_apps_LineageParts/0001-Remove_Analytics.patch"; #Remove analytics
enterAndClear "packages/apps/Settings";
git revert --no-edit 486980cfecce2ca64267f41462f9371486308e9d; #don't hide oem unlock
sed -i 's/private int mPasswordMaxLength = 16;/private int mPasswordMaxLength = 48;/' src/com/android/settings/password/ChooseLockPassword.java; #Increase max password length (GrapheneOS)
sed -i 's/if (isFullDiskEncrypted()) {/if (false) {/' src/com/android/settings/accessibility/*AccessibilityService*.java; #Never disable secure start-up when enabling an accessibility service
if [ "$DOS_MICROG_INCLUDED" = "FULL" ]; then sed -i 's/GSETTINGS_PROVIDER = "com.google.settings";/GSETTINGS_PROVIDER = "com.google.oQuae4av";/' src/com/android/settings/backup/PrivacySettingsUtils.java; fi; #microG doesn't support Backup, hide the options
enterAndClear "packages/apps/SetupWizard";
patch -p1 < "$DOS_PATCHES/android_packages_apps_SetupWizard/0001-Remove_Analytics.patch"; #Remove analytics
enterAndClear "packages/apps/Trebuchet";
deblobber: Don't remove CNE - breaks Wi-Fi calling - breaks IMS on marlin/sailfish
2020-12-22 18:53:29 +00:00
cp $DOS_BUILD_BASE/vendor/divested/overlay/common/packages/apps/Trebuchet/res/xml/default_workspace_*.xml res/xml/; #XXX: Likely no longer needed
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enterAndClear "packages/apps/Updater";
patch -p1 < "$DOS_PATCHES/android_packages_apps_Updater/0001-Server.patch"; #Switch to our server
patch -p1 < "$DOS_PATCHES/android_packages_apps_Updater/0002-Tor_Support.patch"; #Add Tor support
sed -i 's/PROP_BUILD_VERSION_INCREMENTAL);/PROP_BUILD_VERSION_INCREMENTAL).replaceAll("\\\\.", "");/' src/org/lineageos/updater/misc/Utils.java; #Remove periods from incremental version
#TODO: Remove changelog
enterAndClear "packages/inputmethods/LatinIME";
patch -p1 < "$DOS_PATCHES_COMMON/android_packages_inputmethods_LatinIME/0001-Voice.patch"; #Remove voice input key
Small fixes
2020-04-19 17:19:22 +00:00
#enterAndClear "packages/services/Telephony";
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
#patch -p1 < "$DOS_PATCHES/android_packages_services_Telephony/0001-PREREQ_Handle_All_Modes.patch"; #XXX 17REBASE
#patch -p1 < "$DOS_PATCHES/android_packages_services_Telephony/0002-More_Preferred_Network_Modes.patch"; #XXX 17REBASE
enterAndClear "system/core";
if [ "$DOS_HOSTS_BLOCKING" = true ]; then cat "$DOS_HOSTS_FILE" >> rootdir/etc/hosts; fi; #Merge in our HOSTS file
Update cherrypicks
2021-02-05 21:43:01 +00:00
git revert --no-edit 3032c7aa5ce90c0ae9c08fe271052c6e0304a1e7 01266f589e6deaef30b782531ae14435cdd2f18e; #insanity
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
git revert --no-edit bd4142eab8b3cead0c25a2e660b4b048d1315d3c; #Always update recovery
Small fixes - Bring 17.1 recovery in line with 18.1 - flox: fix sensors on 17.1 - flo 15.1: sensors might still be broken due to denial - flox 17.1: reboot issue is likely fixed - 18.1: fix my Wi-Fi (wpa2-eap with a cert, but no domain)
2021-03-27 06:14:25 +00:00
patch -p1 < "$DOS_PATCHES/android_system_core/0001-Harden.patch"; #Harden mounts with nodev/noexec/nosuid + misc sysctl changes (GrapheneOS)
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
if [ "$DOS_GRAPHENE_MALLOC" = true ]; then patch -p1 < "$DOS_PATCHES/android_system_core/0002-HM-Increase_vm_mmc.patch"; fi; #(GrapheneOS)
Small tweaks
2020-12-12 14:50:27 +00:00
enterAndClear "system/extras";
ASB cherry picks
2020-11-04 14:48:12 +00:00
patch -p1 < "$DOS_PATCHES/android_system_extras/0001-ext4_pad_filenames.patch"; #FBE: pad filenames more (GrapheneOS)
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enterAndClear "system/sepolicy";
Many fixes 17.1: recovery: rebranding reverts 17.1: mata: fix vorbis 17.1: g2/g3: fix Wi-Fi under -user 15.1/16.0: g2/g3: improve misc_block_exception patch
2020-04-30 21:27:13 +00:00
patch -p1 < "$DOS_PATCHES/android_system_sepolicy/0001-LGE_Fixes.patch"; #Fix -user builds for LGE devices
patch -p1 < "$DOS_PATCHES/android_system_sepolicy/0001-LGE_Fixes.patch" --directory="prebuilts/api/29.0";
patch -p1 < "$DOS_PATCHES/android_system_sepolicy/0001-LGE_Fixes.patch" --directory="prebuilts/api/28.0";
patch -p1 < "$DOS_PATCHES/android_system_sepolicy/0001-LGE_Fixes.patch" --directory="prebuilts/api/27.0";
patch -p1 < "$DOS_PATCHES/android_system_sepolicy/0001-LGE_Fixes.patch" --directory="prebuilts/api/26.0";
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
awk -i inplace '!/true cannot be used in user builds/' Android.mk; #Allow ignoring neverallows under -user
deblobber improvements - fixup CNE removal to disable Wi-Fi calling - extend system.prop edits to cover all .props - remove persist. and ro. from edits to cover all properties
2021-01-18 12:11:54 +00:00
enterAndClear "system/update_engine";
git revert --no-edit c68499e3ff10f2a31f913e14f66aafb4ed94d42d; #Do not skip payload signature verification
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enterAndClear "vendor/lineage";
rm build/target/product/security/lineage.x509.pem;
rm -rf overlay/common/lineage-sdk/packages/LineageSettingsProvider/res/values/defaults.xml; #Remove analytics
rm -rf overlay/common/frameworks/base/core/res/res/drawable-*/default_wallpaper.png;
Many changes - Promote many 16.0 devices to 17.1 - Many build fixes - Switch to FairEmail
2020-04-25 16:19:54 +00:00
if [ "$DOS_HOSTS_BLOCKING" = true ]; then awk -i inplace '!/50-lineage.sh/' config/*.mk; fi; #Make sure our hosts is always used
awk -i inplace '!/PRODUCT_EXTRA_RECOVERY_KEYS/' config/*.mk; #Remove extra keys
awk -i inplace '!/security\/lineage/' config/*.mk; #Remove extra keys
awk -i inplace '!/WeatherProvider/' config/*.mk;
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
awk -i inplace '!/def_backup_transport/' overlay/common/frameworks/base/packages/SettingsProvider/res/values/defaults.xml;
Many changes - Promote many 16.0 devices to 17.1 - Many build fixes - Switch to FairEmail
2020-04-25 16:19:54 +00:00
if [ "$DOS_DEBLOBBER_REMOVE_AUDIOFX" = true ]; then awk -i inplace '!/AudioFX/' config/*.mk; fi;
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
if [ "$DOS_MICROG_INCLUDED" = "NLP" ]; then sed -i '/Google provider/!b;n;s/com.google.android.gms/org.microg.nlp/' overlay/common/frameworks/base/core/res/res/values/config.xml; fi;
Many changes - Promote many 16.0 devices to 17.1 - Many build fixes - Switch to FairEmail
2020-04-25 16:19:54 +00:00
sed -i 's/LINEAGE_BUILDTYPE := UNOFFICIAL/LINEAGE_BUILDTYPE := dos/' config/*.mk; #Change buildtype
if [ "$DOS_NON_COMMERCIAL_USE_PATCHES" = true ]; then sed -i 's/LINEAGE_BUILDTYPE := dos/LINEAGE_BUILDTYPE := dosNC/' config/*.mk; fi;
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
echo 'include vendor/divested/divestos.mk' >> config/common.mk; #Include our customizations
Sync APN list from 17.1 to all versions - 15.1: enable hammerhead due to reported bt issues on 16.0
2021-01-04 22:39:17 +00:00
cp -f "$DOS_PATCHES_COMMON/apns-conf.xml" prebuilt/common/etc/apns-conf.xml; #Update APN list
Only include Silence when needed ie. not on tablets without cellular
2021-03-24 01:11:07 +00:00
sed -i 's/messaging/Silence/' config/telephony.mk; #Switch to Silence
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enter "vendor/divested";
Many changes - 17.1: Add Pixel 4/XL - Promote klte to 17.1 - hardenBootArgs: don't run on klte - hardenBootArgs: regorganize - hardenDefconfig: enabler: drop unnecessary options (iommu) - hardenDefconfig: disabler: comment diag options for now - deblobber: comment dirac lines to fix cheeseburger headphone jack - fixup Etar replacement
2020-10-11 08:46:19 +00:00
awk -i inplace '!/EtarPrebuilt/' packages.mk; #lineage-17.1 calendar is Etar fork
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
if [ "$DOS_MICROG_INCLUDED" = "FULL" ]; then echo "PRODUCT_PACKAGES += GmsCore GsfProxy FakeStore" >> packages.mk; fi;
if [ "$DOS_HOSTS_BLOCKING" = false ]; then echo "PRODUCT_PACKAGES += $DOS_HOSTS_BLOCKING_APP" >> packages.mk; fi;
echo "PRODUCT_PACKAGES += vendor.lineage.trust@1.0-service" >> packages.mk; #All of our kernels have deny USB patch added
#
#END OF ROM CHANGES
#
#
#START OF DEVICE CHANGES
#
17.1: drop support for all devices tested working on 18.1
2021-04-02 03:06:27 +00:00
enterAndClear "device/cyanogen/msm8916-common";
awk -i inplace '!/TARGET_RELEASETOOLS_EXTENSIONS/' BoardConfigCommon.mk; #broken releasetools
Ensure mm-pp-daemon is disabled When not in late_start appears to break boot if not available. Seems to fix oneplus2 and likely ether + others
2021-05-29 21:29:36 +00:00
sed -i -e '/mm-pp-d/,+4d' rootdir/etc/init.qcom.rc;
Small changes
2021-01-24 04:08:00 +00:00
Add FP3 to 16.0 and 17.1 Untested
2021-03-20 00:13:53 +00:00
enterAndClear "device/fairphone/FP3";
enableVerity; #Resurrect dm-verity
More verity resurrection
2020-06-08 15:54:40 +00:00
enterAndClear "device/google/bonito";
enableVerity; #Resurrect dm-verity
Small fixes
2020-09-13 23:52:37 +00:00
awk -i inplace '!/INODE_COUNT/' BoardConfig-lineage.mk; #mke2fs -1 incompatibility (?)
More verity resurrection
2020-06-08 15:54:40 +00:00
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enterAndClear "device/google/marlin";
git revert --no-edit 777dafa35f185b1f501e3c80b8ab495191583444; #remove some carrier blobs
enterAndClear "device/lge/mako";
Small fixes
2020-04-19 17:19:22 +00:00
echo "pmf=0" >> wifi/wpa_supplicant_overlay.conf; #Wi-Fi chipset doesn't support PMF
Update CVE patchers
2020-10-07 03:36:29 +00:00
awk -i inplace '!/TARGET_RELEASETOOLS_EXTENSIONS/' BoardConfig.mk; #broken releasetools
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
Ensure mm-pp-daemon is disabled When not in late_start appears to break boot if not available. Seems to fix oneplus2 and likely ether + others
2021-05-29 21:29:36 +00:00
enterAndClear "device/motorola/clark";
License headers
2020-11-17 15:11:40 +00:00
#echo "TARGET_RECOVERY_PERMISSIVE_OVERRIDE := true" >> BoardConfig.mk; #Allow extract_firmware.sh to function
Ensure mm-pp-daemon is disabled When not in late_start appears to break boot if not available. Seems to fix oneplus2 and likely ether + others
2021-05-29 21:29:36 +00:00
sed -i -e '/mm-pp-d/,+5d' rootdir/init.qcom.rc;
enterAndClear "device/motorola/griffin";
sed -i -e '/mm-pp-d/,+4d' rootdir/etc/init.qcom.rc;
License headers
2020-11-17 15:11:40 +00:00
Small changes - Add m7 and avicii (untested) - Use low_ram target on <2GB devices Silly me, this never did anything due to the git reset... - Update Chromium WebView cherrypick
2021-03-24 04:57:59 +00:00
enterAndClear "device/oneplus/avicii";
enableVerity; #Resurrect dm-verity
Initial bringup of many devices to 17.1
2020-05-30 18:09:56 +00:00
enterAndClear "device/oneplus/oneplus2";
sed -i 's|etc/permissions/qti_libpermissions.xml|vendor/etc/permissions/qti_libpermissions.xml|' proprietary-files.txt;
Ensure mm-pp-daemon is disabled When not in late_start appears to break boot if not available. Seems to fix oneplus2 and likely ether + others
2021-05-29 21:29:36 +00:00
sed -i -e '/mm-pp-d/,+5d' rootdir/etc/init.qcom.rc;
Initial bringup of many devices to 17.1
2020-05-30 18:09:56 +00:00
Small changes - SUPL NTP fix - Remove debug info from dexpreopt, saves a few MB - 15.1+: enable full dexpreopt, for perf and memory benefits - 17.1: change oneplus/msm8998-common kernel - 17.1: add OpenCamera to AUX list - Resurrect verity for devices missed previously - Update some CVE patchers - deblobber: remove some lingering atfwd blobs
2020-11-01 14:50:03 +00:00
enterAndClear "device/oneplus/sm8150-common";
enableVerity; #Resurrect dm-verity
Initial bringup of many devices to 17.1
2020-05-30 18:09:56 +00:00
enterAndClear "device/oppo/common";
awk -i inplace '!/TARGET_RELEASETOOLS_EXTENSIONS/' BoardConfigCommon.mk; #disable releasetools to fix delta ota generation
Small updates + Many fixes
2020-07-12 23:04:01 +00:00
enterAndClear "device/zuk/msm8996-common";
awk -i inplace '!/WfdCommon/' msm8996.mk; #fix breakage
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
enterAndClear "kernel/google/marlin";
git revert --no-edit dd4a454f080f60cc7c4f5cc281a48cba80947baf; #Resurrect dm-verity
#Make changes to all devices
cd "$DOS_BUILD_BASE";
if [ "$DOS_LOWRAM_ENABLED" = true ]; then find "device" -maxdepth 2 -mindepth 2 -type d -print0 | xargs -0 -n 1 -P 8 -I {} bash -c 'enableLowRam "{}"'; fi;
find "hardware/qcom/gps" -name "gps\.conf" -type f -print0 | xargs -0 -n 1 -P 4 -I {} bash -c 'hardenLocationConf "{}"';
find "device" -name "gps\.conf" -type f -print0 | xargs -0 -n 1 -P 4 -I {} bash -c 'hardenLocationConf "{}"';
More small tweaks - Really fix yylloc sed line - Drop merged ASB cherrypicks - Edit vendor gps.conf files too
2021-04-15 10:19:32 +00:00
find "vendor" -name "gps\.conf" -type f -print0 | xargs -0 -n 1 -P 4 -I {} bash -c 'hardenLocationConf "{}"';
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
find "device" -type d -name "overlay" -print0 | xargs -0 -n 1 -P 4 -I {} bash -c 'hardenLocationFWB "{}"';
Many small tweaks - Remove leftover WireGuard repo missed in 31898834 - Enable the volteOverride, to ensure VoLTE enablement on supported devices on unknown carriers - Extend volteOverride to support system.prop if vendor.prop doesn't exist (to cover eg. marlin/sailfish) - Disable commenting of SOUND_TRIGGER flags. sountrigger blobs are not removed due to boot breakage. disable this and stop patching hardware/qcom/audio. Intended to potentially fix phone call audio issues on mata - Small CVE patcher updates
2021-01-15 22:28:35 +00:00
if [ "$DOS_DEBLOBBER_REMOVE_IMS" = "false" ]; then find "device" -maxdepth 2 -mindepth 2 -type d -print0 | xargs -0 -n 1 -P 8 -I {} bash -c 'volteOverride "{}"'; fi;
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
find "device" -maxdepth 2 -mindepth 2 -type d -print0 | xargs -0 -n 1 -P 8 -I {} bash -c 'enableDexPreOpt "{}"';
find "device" -maxdepth 2 -mindepth 2 -type d -print0 | xargs -0 -n 1 -P 8 -I {} bash -c 'hardenUserdata "{}"';
find "device" -maxdepth 2 -mindepth 2 -type d -print0 | xargs -0 -n 1 -P 8 -I {} bash -c 'hardenBootArgs "{}"';
find "kernel" -maxdepth 2 -mindepth 2 -type d -print0 | xargs -0 -n 1 -P 4 -I {} bash -c 'hardenDefconfig "{}"';
Small changes - Disable generation of unused OTA to reduce compile time - 17.1+: Disable APEX, breaks signing, and is also useless since no Play Store. - 18.1: Fixup signing
2021-03-29 21:09:12 +00:00
find "device" -maxdepth 2 -mindepth 2 -type d -print0 | xargs -0 -n 1 -P 8 -I {} bash -c 'disableAPEX "{}"';
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
cd "$DOS_BUILD_BASE";
deblobAudio;
Fixup 9f01dc03 Enables replacing of vendor fingerprints. I thought this was broken, turns out it was the AUX camera change instead.
2020-11-02 16:04:47 +00:00
removeBuildFingerprints;
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
#Fix broken options enabled by hardenDefconfig()
Fixes
2020-10-23 22:15:01 +00:00
sed -i "s/CONFIG_DEBUG_RODATA=y/# CONFIG_DEBUG_RODATA is not set/" kernel/google/yellowstone/arch/arm*/configs/*_defconfig; #Breaks on compile
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
sed -i "s/CONFIG_DEBUG_RODATA=y/# CONFIG_DEBUG_RODATA is not set/" kernel/lge/mako/arch/arm/configs/lineageos_*_defconfig; #Breaks on compile
sed -i "s/CONFIG_STRICT_MEMORY_RWX=y/# CONFIG_STRICT_MEMORY_RWX is not set/" kernel/motorola/msm8996/arch/arm64/configs/*_defconfig; #Breaks on compile
More small tweaks - Really fix yylloc sed line - Drop merged ASB cherrypicks - Edit vendor gps.conf files too
2021-04-15 10:19:32 +00:00
sed -i 's/^YYLTYPE yylloc;/extern YYLTYPE yylloc;/' kernel/*/*/scripts/dtc/dtc-lexer.l*; #Fix builds with GCC 10
Small fixes
2020-09-13 23:52:37 +00:00
rm -v kernel/*/*/drivers/staging/greybus/tools/Android.mk;
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 20:15:33 +00:00
#
#END OF DEVICE CHANGES
#
Reference in New Issue Copy Permalink