From 97d0b239d526de037cb566cc619c03b8d77baa25 Mon Sep 17 00:00:00 2001 From: Tad Date: Fri, 5 Nov 2021 08:54:08 -0400 Subject: [PATCH] Small tweaks Signed-off-by: Tad --- Scripts/Common/Enable_Verity.sh | 6 +++--- Scripts/LineageOS-14.1/Patch.sh | 5 +++++ 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/Scripts/Common/Enable_Verity.sh b/Scripts/Common/Enable_Verity.sh index 71822321..b6c7d3df 100644 --- a/Scripts/Common/Enable_Verity.sh +++ b/Scripts/Common/Enable_Verity.sh @@ -45,10 +45,10 @@ export -f enableAVB; #Device Changes enableVerity "device/essential/mata"; -enableVerity "device/google/dragon"; +#enableVerity "device/google/dragon"; #XXX: non-standard enableVerity "device/google/marlin"; enableVerity "device/google/sailfish"; -enableVerity "device/htc/flounder"; +#enableVerity "device/htc/flounder"; #XXX: no boot enableVerity "device/huawei/angler"; enableVerity "device/lge/bullhead"; enableVerity "device/moto/shamu"; @@ -99,7 +99,7 @@ enableAVB "device/xiaomi/vayu"; #Kernel Changes sed -i 's/slotselect/slotselect,verify/' kernel/essential/msm8998/arch/arm64/boot/dts/essential/msm8998-mata-lineage.dtsi &>/dev/null || true; #/vendor -sed -i 's/wait/wait,verify/g' kernel/htc/flounder/arch/arm64/boot/dts/tegra132.dtsi &>/dev/null || true; #/system +#sed -i 's/wait/wait,verify/g' kernel/htc/flounder/arch/arm64/boot/dts/tegra132.dtsi &>/dev/null || true; #/system #XXX: no boot sed -i 's/wait/wait,verify/g' kernel/moto/shamu/arch/arm/boot/dts/qcom/apq8084.dtsi &>/dev/null || true; #/system sed -i 's/wait/wait,verify/g' kernel/oneplus/msm8996/arch/arm/boot/dts/qcom/15801/msm8996-mtp.dtsi &>/dev/null || true; #/system sed -i 's/wait/wait,verify/g' kernel/oneplus/msm8998/arch/arm/boot/dts/qcom/cheeseburger.dtsi &>/dev/null || true; #/system and /vendor diff --git a/Scripts/LineageOS-14.1/Patch.sh b/Scripts/LineageOS-14.1/Patch.sh index 18cdc0a2..8476cdb3 100644 --- a/Scripts/LineageOS-14.1/Patch.sh +++ b/Scripts/LineageOS-14.1/Patch.sh @@ -342,6 +342,11 @@ fi; if enterAndClear "device/motorola/clark"; then sed -i 's/0xA04D/0xA04D|0xA052/' board-info.txt; #Allow installing on Nougat bootloader, assume the user is running the correct modem rm board-info.txt; #Never restrict installation +echo "recovery_only('" >> sepolicy/recovery.te; #304224: Allow recovery to unzip and chmod modem firmware +echo " allow firmware_file labeledfs:filesystem associate;" >> sepolicy/recovery.te; +echo " allow recovery firmware_file:dir rw_dir_perms;" >> sepolicy/recovery.te; +echo " allow recovery firmware_file:file create_file_perms;" >> sepolicy/recovery.te; +echo "')" >> sepolicy/recovery.te; fi; if enterAndClear "device/samsung/exynos5420-common"; then