From 3dd9a262dfcb8318d75069f92912fa8df75303e4 Mon Sep 17 00:00:00 2001 From: Tad Date: Tue, 5 Dec 2017 18:22:31 -0500 Subject: [PATCH] Update CVE patchers with CopperheadOS kernel hardning patches --- Patches/Linux | 2 +- .../android_kernel_asus_msm8916.sh | 13 +++++++++ .../android_kernel_google_marlin.sh | 27 +++++++++++++++++++ .../CVE_Patchers/android_kernel_google_msm.sh | 2 -- .../android_kernel_htc_flounder.sh | 10 +++++++ .../android_kernel_htc_msm8994.sh | 13 +++++++++ .../android_kernel_huawei_angler.sh | 18 +++++++++++-- .../android_kernel_lge_bullhead.sh | 16 ++++++++++- .../CVE_Patchers/android_kernel_moto_shamu.sh | 12 ++++++++- .../android_kernel_motorola_msm8916.sh | 12 +++++++++ .../android_kernel_motorola_msm8992.sh | 13 +++++++++ .../android_kernel_nextbit_msm8992.sh | 13 +++++++++ .../CVE_Patchers/android_kernel_samsung_jf.sh | 2 -- .../android_kernel_samsung_universal8890.sh | 19 +++++++++++++ Scripts/LineageOS-14.1/Patch.sh | 1 + 15 files changed, 164 insertions(+), 9 deletions(-) diff --git a/Patches/Linux b/Patches/Linux index e4d74b10..b1f6f76f 160000 --- a/Patches/Linux +++ b/Patches/Linux @@ -1 +1 @@ -Subproject commit e4d74b10881dc778ce4c1beea63b5588b4d7e4e1 +Subproject commit b1f6f76f69efdaeebf5294940adbe6f76cbf9e7f diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_asus_msm8916.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_asus_msm8916.sh index 34ad084f..aa530c9f 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_asus_msm8916.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_asus_msm8916.sh @@ -1,5 +1,18 @@ #!/bin/bash cd $base"kernel/asus/msm8916" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch git apply $cvePatches/CVE-2016-6672/ANY/0001.patch git apply $cvePatches/CVE-2016-6693/ANY/0001.patch git apply $cvePatches/CVE-2016-6696/ANY/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_marlin.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_marlin.sh index 14f5aec8..ac01682e 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_marlin.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_marlin.sh @@ -1,5 +1,32 @@ #!/bin/bash cd $base"kernel/google/marlin" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0018.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0019.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0020.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0021.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0022.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0023.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0024.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0025.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0026.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0027.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0030.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0031.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0033.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0034.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0035.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0036.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0037.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0038.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0039.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0040.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0041.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0042.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0043.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0044.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0045.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0049.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0050.patch git apply $cvePatches/CVE-2014-9900/ANY/0001.patch git apply $cvePatches/CVE-2015-2041/^3.19/0002.patch git apply $cvePatches/CVE-2015-7515/^4.4/0002.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_msm.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_msm.sh index 72c64369..c029b7c2 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_msm.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_msm.sh @@ -14,8 +14,6 @@ git apply $cvePatches/CVE-2017-0710/ANY/0001.patch git apply $cvePatches/CVE-2017-0750/ANY/0001.patch git apply $cvePatches/CVE-2017-0751/ANY/0001.patch git apply $cvePatches/CVE-2017-0786/ANY/0001.patch -git apply $cvePatches/CVE-2017-11015/prima/0001.patch -git apply $cvePatches/CVE-2017-11015/prima/0002.patch git apply $cvePatches/CVE-2017-11089/ANY/0001.patch git apply $cvePatches/CVE-2017-11090/ANY/0001.patch git apply $cvePatches/CVE-2017-12153/3.2-^3.16/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_flounder.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_flounder.sh index d6f4dd66..34d46e11 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_flounder.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_flounder.sh @@ -1,5 +1,15 @@ #!/bin/bash cd $base"kernel/htc/flounder" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch git apply $cvePatches/CVE-2014-9892/ANY/0001.patch git apply $cvePatches/CVE-2014-9900/ANY/0001.patch git apply $cvePatches/CVE-2015-7515/^4.4/0002.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_msm8994.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_msm8994.sh index cf7d98cc..b07b2272 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_msm8994.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_msm8994.sh @@ -1,5 +1,18 @@ #!/bin/bash cd $base"kernel/htc/msm8994" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch git apply $cvePatches/CVE-2013-7446/^4.3/0002.patch git apply $cvePatches/CVE-2014-9781/ANY/0001.patch git apply $cvePatches/CVE-2014-9903/ANY/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_huawei_angler.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_huawei_angler.sh index 835437a8..6723e3ab 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_huawei_angler.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_huawei_angler.sh @@ -1,6 +1,21 @@ #!/bin/bash cd $base"kernel/huawei/angler" -git apply $cvePatches/00LinuxIncrementals/3.10/3.10.0073-0074.patch +git apply $cvePatches/0001-LinuxIncrementals/3.10/3.10.0073-0074.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0017.patch git apply $cvePatches/CVE-2014-8160/^3.18/0002.patch git apply $cvePatches/CVE-2014-8173/3.9-^3.12/0001.patch git apply $cvePatches/CVE-2014-9781/ANY/0001.patch @@ -32,7 +47,6 @@ git apply $cvePatches/CVE-2016-3689/ANY/0001.patch git apply $cvePatches/CVE-2016-3857/ANY/0001.patch git apply $cvePatches/CVE-2016-3865/ANY/0001.patch git apply $cvePatches/CVE-2016-3894/ANY/0001.patch -git apply $cvePatches/CVE-2016-5342/ANY/0001.patch git apply $cvePatches/CVE-2016-5345/ANY/0001.patch git apply $cvePatches/CVE-2016-5858/ANY/0001.patch git apply $cvePatches/CVE-2016-5859/3.10/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_bullhead.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_bullhead.sh index c63861fc..8b4cc2ce 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_bullhead.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_bullhead.sh @@ -1,6 +1,20 @@ #!/bin/bash cd $base"kernel/lge/bullhead" -git apply $cvePatches/00LinuxIncrementals/3.10/3.10.0073-0074.patch +git apply $cvePatches/0001-LinuxIncrementals/3.10/3.10.0073-0074.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch git apply $cvePatches/CVE-2014-8160/^3.18/0002.patch git apply $cvePatches/CVE-2014-8173/3.9-^3.12/0001.patch git apply $cvePatches/CVE-2014-9781/ANY/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_moto_shamu.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_moto_shamu.sh index bfa9449c..d1dd2dd1 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_moto_shamu.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_moto_shamu.sh @@ -1,5 +1,16 @@ #!/bin/bash cd $base"kernel/moto/shamu" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0017.patch git apply $cvePatches/CVE-2014-8160/^3.18/0002.patch git apply $cvePatches/CVE-2014-8173/3.9-^3.12/0001.patch git apply $cvePatches/CVE-2014-9420/ANY/0001.patch @@ -32,7 +43,6 @@ git apply $cvePatches/CVE-2016-3857/ANY/0001.patch git apply $cvePatches/CVE-2016-3865/ANY/0001.patch git apply $cvePatches/CVE-2016-3865/ANY/0002.patch git apply $cvePatches/CVE-2016-3894/ANY/0001.patch -git apply $cvePatches/CVE-2016-5342/ANY/0001.patch git apply $cvePatches/CVE-2016-5870/ANY/0001.patch git apply $cvePatches/CVE-2016-6672/ANY/0001.patch git apply $cvePatches/CVE-2016-6695/ANY/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8916.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8916.sh index f93ecb0f..acf20ab0 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8916.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8916.sh @@ -1,5 +1,17 @@ #!/bin/bash cd $base"kernel/motorola/msm8916" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch git apply $cvePatches/CVE-2014-9420/ANY/0001.patch git apply $cvePatches/CVE-2014-9781/ANY/0001.patch git apply $cvePatches/CVE-2015-1593/ANY/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8992.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8992.sh index a7ef1f31..11e4e1d6 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8992.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8992.sh @@ -1,5 +1,18 @@ #!/bin/bash cd $base"kernel/motorola/msm8992" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch git apply $cvePatches/CVE-2013-7446/^4.3/0003.patch git apply $cvePatches/CVE-2014-9781/ANY/0001.patch git apply $cvePatches/CVE-2015-0573/ANY/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_nextbit_msm8992.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_nextbit_msm8992.sh index 03cb3fd7..ff9f3586 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_nextbit_msm8992.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_nextbit_msm8992.sh @@ -1,5 +1,18 @@ #!/bin/bash cd $base"kernel/nextbit/msm8992" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch git apply $cvePatches/CVE-2014-9904/ANY/0001.patch git apply $cvePatches/CVE-2016-6672/ANY/0001.patch git apply $cvePatches/CVE-2016-6693/ANY/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_jf.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_jf.sh index f0ac1e2f..7416a21e 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_jf.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_jf.sh @@ -25,8 +25,6 @@ git apply $cvePatches/CVE-2017-0751/ANY/0001.patch git apply $cvePatches/CVE-2017-0786/ANY/0001.patch git apply $cvePatches/CVE-2017-0791/ANY/0001.patch git apply $cvePatches/CVE-2017-1000380/^4.11/0001.patch -git apply $cvePatches/CVE-2017-11015/prima/0001.patch -git apply $cvePatches/CVE-2017-11015/prima/0002.patch git apply $cvePatches/CVE-2017-11089/ANY/0001.patch git apply $cvePatches/CVE-2017-11090/ANY/0001.patch git apply $cvePatches/CVE-2017-12153/3.2-^3.16/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_universal8890.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_universal8890.sh index 7dab6320..146e0734 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_universal8890.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_universal8890.sh @@ -1,5 +1,24 @@ #!/bin/bash cd $base"kernel/samsung/universal8890" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0018.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0020.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0021.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0022.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0024.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0025.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0026.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0027.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0030.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0031.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0033.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0034.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0035.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0037.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0040.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0042.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0044.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0045.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0049.patch git apply $cvePatches/CVE-2013-7446/^4.3/0003.patch git apply $cvePatches/CVE-2014-9900/ANY/0001.patch git apply $cvePatches/CVE-2014-9940/ANY/0001.patch diff --git a/Scripts/LineageOS-14.1/Patch.sh b/Scripts/LineageOS-14.1/Patch.sh index cd4ea01c..0f626dc2 100755 --- a/Scripts/LineageOS-14.1/Patch.sh +++ b/Scripts/LineageOS-14.1/Patch.sh @@ -146,6 +146,7 @@ rm core/res/res/values/config.xml.orig core/res/res/values/strings.xml.orig enter "frameworks/opt/net/wifi" #Fix an issue when permision review is enabled that prevents using the Wi-Fi quick tile #See https://github.com/CopperheadOS/platform_frameworks_opt_net_wifi/commit/c2a2f077a902226093b25c563e0117e923c7495b +sed -i 's/boolean mPermissionReviewRequired/boolean mPermissionReviewRequired = false/' service/java/com/android/server/wifi/WifiServiceImpl.java; awk -i inplace '!/mPermissionReviewRequired = Build.PERMISSIONS_REVIEW_REQUIRED/' service/java/com/android/server/wifi/WifiServiceImpl.java; awk -i inplace '!/\|\| context.getResources\(\).getBoolean\(/' service/java/com/android/server/wifi/WifiServiceImpl.java; awk -i inplace '!/com.android.internal.R.bool.config_permissionReviewRequired/' service/java/com/android/server/wifi/WifiServiceImpl.java;