Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-10-01 01:35:54 -04:00
Code Issues Packages Projects Releases Wiki Activity
59c28bc022
DivestOS/Scripts/LineageOS-18.1/CVE_Patchers/android_kernel_google_wahoo.sh

93 lines
6.0 KiB
Bash
Raw Normal View History

18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
#!/bin/bash
cd "$DOS_BUILD_BASE""kernel/google/wahoo"
git apply $DOS_PATCHES_LINUX_CVES/0006-AndroidHardening-Kernel_Hardening/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0010.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0012.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0013.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0014.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0015.patch
Update CVE patchers
2021-05-03 20:13:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0017.patch
Small tweaks - disable disablement of PROC_PAGE_MONITOR to fix memory stats calculation - enable slub_nomerge, similar to slab_nomerge for pre 3.18 kernels slub_nomerge was already default enabled on many 3.10 devices via: 0006-AndroidHardening-Kernel_Hardening/3.10/0010.patch Signed-off-by: Tad <tad@spotco.us>
2021-09-12 06:37:40 -04:00
#git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0019.patch
Update CVE patchers
2021-05-03 20:13:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0020.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0021.patch
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0022.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0023.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2015-7837/ANY/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-03-09 16:32:41 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-1583/^4.6/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-6187/^4.7/0001.patch
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-8394/ANY/0001.patch
Initial loose versioning work for 4.9 This applies 4.9 patches to 4.4 and 3.18 now that 4.4 is EOL Untested, but looks mild Signed-off-by: Tad <tad@spotco.us>
2022-02-22 13:01:58 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-10153/4.9/0002.patch
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-0610/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-0627/ANY/0002.patch
Initial loose versioning work for 4.9 This applies 4.9 patches to 4.4 and 3.18 now that 4.4 is EOL Untested, but looks mild Signed-off-by: Tad <tad@spotco.us>
2022-02-22 13:01:58 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-9059/4.9/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-03-08 21:10:32 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-9211/4.9/0002.patch
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-9699/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-11065/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13693/^4.12.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13694/^4.12.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-14886/ANY/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-03-08 21:10:32 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-17052/4.9/0002.patch
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18061/ANY/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-03-09 16:32:41 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18174/^4.10/0001.patch
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18204/4.4/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-03-09 16:32:41 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-1000252/^4.13/0002.patch
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-3575/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5902/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5906/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-9415/ANY/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-16597/4.4/0002.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-03-09 16:32:41 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-8912/^5.0/0001.patch
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12378/^5.1.5/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-03-09 16:32:41 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12456/^5.1.5/0002.patch
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14047/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-15291/4.4/0006.patch
Initial loose versioning work for 4.9 This applies 4.9 patches to 4.4 and 3.18 now that 4.4 is EOL Untested, but looks mild Signed-off-by: Tad <tad@spotco.us>
2022-02-22 13:01:58 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-16994/4.9/0004.patch
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19051/4.4/0012.patch
Small tweaks Signed-off-by: Tad <tad@spotco.us>
2021-08-31 18:35:07 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19068/4.4/0004.patch
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-14386/3.10-^4.4/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-16119/^5.10/0002.patch
Initial loose versioning work for 4.9 This applies 4.9 patches to 4.4 and 3.18 now that 4.4 is EOL Untested, but looks mild Signed-off-by: Tad <tad@spotco.us>
2022-02-22 13:01:58 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-0935/4.9/0006.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2021-09-07 16:14:01 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-1963/ANY/0003.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-03-17 22:06:53 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-4149/4.9/0006.patch
Initial loose versioning work for 4.9 This applies 4.9 patches to 4.4 and 3.18 now that 4.4 is EOL Untested, but looks mild Signed-off-by: Tad <tad@spotco.us>
2022-02-22 13:01:58 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-20292/4.9/0004.patch
18.1: small fixes Signed-off-by: Tad <tad@spotco.us>
2022-02-12 07:32:29 -05:00
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-30324/ANY/0001.patch
Initial loose versioning work for 4.9 This applies 4.9 patches to 4.4 and 3.18 now that 4.4 is EOL Untested, but looks mild Signed-off-by: Tad <tad@spotco.us>
2022-02-22 13:01:58 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-42739/4.9/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-02-19 22:28:35 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-44879/^5.16/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-04-04 14:58:50 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-0435/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-0487/4.4/0008.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-03-31 21:03:13 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1016/4.9/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-04-27 06:48:12 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1198/4.9/0007.patch
Update CVE patchers Newly added CVE-2022-20009 is dupe with CVE-2022-25258 and CVE-2022-25375 Signed-off-by: Tad <tad@spotco.us>
2022-05-03 22:12:54 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1199/4.9/0010.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1199/4.9/0011.patch
Update CVE patchers TODO: maybe split CVE-2022-23960/4.9 to get back? Signed-off-by: Tad <tad@spotco.us>
2022-04-19 12:26:51 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1353/^5.17/0001.patch
Update CVE patchers Newly added CVE-2022-20009 is dupe with CVE-2022-25258 and CVE-2022-25375 Signed-off-by: Tad <tad@spotco.us>
2022-05-03 22:12:54 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1516/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20009/ANY/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-03-17 22:06:53 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-23037/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-23039/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-23040/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-23042/4.9/0003.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-04-04 14:58:50 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-24958/4.4/0015.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-24958/4.4/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-25258/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-26966/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27223/4.4/0008.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-03-28 16:47:03 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27950/^5.16/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-04-04 14:58:50 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-28356/4.9/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-04-27 06:48:12 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-28390/4.9/0007.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-04-04 14:58:50 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-GPZ2253/4.9/0007.patch
Update CVE patchers Newly added CVE-2022-20009 is dupe with CVE-2022-25258 and CVE-2022-25375 Signed-off-by: Tad <tad@spotco.us>
2022-05-03 22:12:54 -04:00
editKernelLocalversion "-dos.p88"
18.1: Initial bringup - Functionality tested on mako and klte - In-place upgrade from 17.1 tested working on klte - Compile tested on bacon and klte - Recovery OTA key patch missing, unsure if still needed. - Deblobber needs support for removing vintf manifest paths from vendor Android.bp - Launcher needs more default_workspace grid variants (eg. 4x5)
2021-03-22 19:59:15 -04:00
cd "$DOS_BUILD_BASE"
Reference in New Issue Copy Permalink