Update CVE patchers with CopperheadOS kernel hardning patches

This commit is contained in:
Tad 2017-12-05 18:22:31 -05:00
parent 8b9bd2ce62
commit 3dd9a262df
15 changed files with 164 additions and 9 deletions

@ -1 +1 @@
Subproject commit e4d74b10881dc778ce4c1beea63b5588b4d7e4e1
Subproject commit b1f6f76f69efdaeebf5294940adbe6f76cbf9e7f

View File

@ -1,5 +1,18 @@
#!/bin/bash
cd $base"kernel/asus/msm8916"
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch
git apply $cvePatches/CVE-2016-6672/ANY/0001.patch
git apply $cvePatches/CVE-2016-6693/ANY/0001.patch
git apply $cvePatches/CVE-2016-6696/ANY/0001.patch

View File

@ -1,5 +1,32 @@
#!/bin/bash
cd $base"kernel/google/marlin"
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0018.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0019.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0020.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0021.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0022.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0023.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0024.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0025.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0026.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0027.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0030.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0031.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0033.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0034.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0035.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0036.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0037.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0038.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0039.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0040.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0041.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0042.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0043.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0044.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0045.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0049.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0050.patch
git apply $cvePatches/CVE-2014-9900/ANY/0001.patch
git apply $cvePatches/CVE-2015-2041/^3.19/0002.patch
git apply $cvePatches/CVE-2015-7515/^4.4/0002.patch

View File

@ -14,8 +14,6 @@ git apply $cvePatches/CVE-2017-0710/ANY/0001.patch
git apply $cvePatches/CVE-2017-0750/ANY/0001.patch
git apply $cvePatches/CVE-2017-0751/ANY/0001.patch
git apply $cvePatches/CVE-2017-0786/ANY/0001.patch
git apply $cvePatches/CVE-2017-11015/prima/0001.patch
git apply $cvePatches/CVE-2017-11015/prima/0002.patch
git apply $cvePatches/CVE-2017-11089/ANY/0001.patch
git apply $cvePatches/CVE-2017-11090/ANY/0001.patch
git apply $cvePatches/CVE-2017-12153/3.2-^3.16/0001.patch

View File

@ -1,5 +1,15 @@
#!/bin/bash
cd $base"kernel/htc/flounder"
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch
git apply $cvePatches/CVE-2014-9892/ANY/0001.patch
git apply $cvePatches/CVE-2014-9900/ANY/0001.patch
git apply $cvePatches/CVE-2015-7515/^4.4/0002.patch

View File

@ -1,5 +1,18 @@
#!/bin/bash
cd $base"kernel/htc/msm8994"
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch
git apply $cvePatches/CVE-2013-7446/^4.3/0002.patch
git apply $cvePatches/CVE-2014-9781/ANY/0001.patch
git apply $cvePatches/CVE-2014-9903/ANY/0001.patch

View File

@ -1,6 +1,21 @@
#!/bin/bash
cd $base"kernel/huawei/angler"
git apply $cvePatches/00LinuxIncrementals/3.10/3.10.0073-0074.patch
git apply $cvePatches/0001-LinuxIncrementals/3.10/3.10.0073-0074.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0017.patch
git apply $cvePatches/CVE-2014-8160/^3.18/0002.patch
git apply $cvePatches/CVE-2014-8173/3.9-^3.12/0001.patch
git apply $cvePatches/CVE-2014-9781/ANY/0001.patch
@ -32,7 +47,6 @@ git apply $cvePatches/CVE-2016-3689/ANY/0001.patch
git apply $cvePatches/CVE-2016-3857/ANY/0001.patch
git apply $cvePatches/CVE-2016-3865/ANY/0001.patch
git apply $cvePatches/CVE-2016-3894/ANY/0001.patch
git apply $cvePatches/CVE-2016-5342/ANY/0001.patch
git apply $cvePatches/CVE-2016-5345/ANY/0001.patch
git apply $cvePatches/CVE-2016-5858/ANY/0001.patch
git apply $cvePatches/CVE-2016-5859/3.10/0001.patch

View File

@ -1,6 +1,20 @@
#!/bin/bash
cd $base"kernel/lge/bullhead"
git apply $cvePatches/00LinuxIncrementals/3.10/3.10.0073-0074.patch
git apply $cvePatches/0001-LinuxIncrementals/3.10/3.10.0073-0074.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch
git apply $cvePatches/CVE-2014-8160/^3.18/0002.patch
git apply $cvePatches/CVE-2014-8173/3.9-^3.12/0001.patch
git apply $cvePatches/CVE-2014-9781/ANY/0001.patch

View File

@ -1,5 +1,16 @@
#!/bin/bash
cd $base"kernel/moto/shamu"
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0017.patch
git apply $cvePatches/CVE-2014-8160/^3.18/0002.patch
git apply $cvePatches/CVE-2014-8173/3.9-^3.12/0001.patch
git apply $cvePatches/CVE-2014-9420/ANY/0001.patch
@ -32,7 +43,6 @@ git apply $cvePatches/CVE-2016-3857/ANY/0001.patch
git apply $cvePatches/CVE-2016-3865/ANY/0001.patch
git apply $cvePatches/CVE-2016-3865/ANY/0002.patch
git apply $cvePatches/CVE-2016-3894/ANY/0001.patch
git apply $cvePatches/CVE-2016-5342/ANY/0001.patch
git apply $cvePatches/CVE-2016-5870/ANY/0001.patch
git apply $cvePatches/CVE-2016-6672/ANY/0001.patch
git apply $cvePatches/CVE-2016-6695/ANY/0001.patch

View File

@ -1,5 +1,17 @@
#!/bin/bash
cd $base"kernel/motorola/msm8916"
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch
git apply $cvePatches/CVE-2014-9420/ANY/0001.patch
git apply $cvePatches/CVE-2014-9781/ANY/0001.patch
git apply $cvePatches/CVE-2015-1593/ANY/0001.patch

View File

@ -1,5 +1,18 @@
#!/bin/bash
cd $base"kernel/motorola/msm8992"
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch
git apply $cvePatches/CVE-2013-7446/^4.3/0003.patch
git apply $cvePatches/CVE-2014-9781/ANY/0001.patch
git apply $cvePatches/CVE-2015-0573/ANY/0001.patch

View File

@ -1,5 +1,18 @@
#!/bin/bash
cd $base"kernel/nextbit/msm8992"
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch
git apply $cvePatches/CVE-2014-9904/ANY/0001.patch
git apply $cvePatches/CVE-2016-6672/ANY/0001.patch
git apply $cvePatches/CVE-2016-6693/ANY/0001.patch

View File

@ -25,8 +25,6 @@ git apply $cvePatches/CVE-2017-0751/ANY/0001.patch
git apply $cvePatches/CVE-2017-0786/ANY/0001.patch
git apply $cvePatches/CVE-2017-0791/ANY/0001.patch
git apply $cvePatches/CVE-2017-1000380/^4.11/0001.patch
git apply $cvePatches/CVE-2017-11015/prima/0001.patch
git apply $cvePatches/CVE-2017-11015/prima/0002.patch
git apply $cvePatches/CVE-2017-11089/ANY/0001.patch
git apply $cvePatches/CVE-2017-11090/ANY/0001.patch
git apply $cvePatches/CVE-2017-12153/3.2-^3.16/0001.patch

View File

@ -1,5 +1,24 @@
#!/bin/bash
cd $base"kernel/samsung/universal8890"
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0018.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0020.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0021.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0022.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0024.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0025.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0026.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0027.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0030.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0031.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0033.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0034.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0035.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0037.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0040.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0042.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0044.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0045.patch
git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0049.patch
git apply $cvePatches/CVE-2013-7446/^4.3/0003.patch
git apply $cvePatches/CVE-2014-9900/ANY/0001.patch
git apply $cvePatches/CVE-2014-9940/ANY/0001.patch

View File

@ -146,6 +146,7 @@ rm core/res/res/values/config.xml.orig core/res/res/values/strings.xml.orig
enter "frameworks/opt/net/wifi"
#Fix an issue when permision review is enabled that prevents using the Wi-Fi quick tile
#See https://github.com/CopperheadOS/platform_frameworks_opt_net_wifi/commit/c2a2f077a902226093b25c563e0117e923c7495b
sed -i 's/boolean mPermissionReviewRequired/boolean mPermissionReviewRequired = false/' service/java/com/android/server/wifi/WifiServiceImpl.java;
awk -i inplace '!/mPermissionReviewRequired = Build.PERMISSIONS_REVIEW_REQUIRED/' service/java/com/android/server/wifi/WifiServiceImpl.java;
awk -i inplace '!/\|\| context.getResources\(\).getBoolean\(/' service/java/com/android/server/wifi/WifiServiceImpl.java;
awk -i inplace '!/com.android.internal.R.bool.config_permissionReviewRequired/' service/java/com/android/server/wifi/WifiServiceImpl.java;