mirror of
https://github.com/Divested-Mobile/DivestOS-Build.git
synced 2024-10-01 01:35:54 -04:00
Prevent Qualcomm location stack from reading chipset serial number
The deblobber already removes xtra-daemon which is what actually performs the requests. This is just extra sanctity. Signed-off-by: Tad <tad@spotco.us>
This commit is contained in:
parent
366b4eb5ef
commit
c544c28b94
@ -14,10 +14,10 @@ Change-Id: Ic01c97d6ceac8d324609763973639b41b4581a76
|
||||
6 files changed, 59 deletions(-)
|
||||
|
||||
diff --git a/AndroidManifest.xml b/AndroidManifest.xml
|
||||
index 19bbbb8..042d969 100644
|
||||
index 5762dc3..e4e1608 100644
|
||||
--- a/AndroidManifest.xml
|
||||
+++ b/AndroidManifest.xml
|
||||
@@ -225,31 +225,6 @@
|
||||
@@ -240,31 +240,6 @@
|
||||
android:resource="@string/summary_empty" />
|
||||
</activity-alias>
|
||||
|
||||
|
@ -492,6 +492,14 @@ volteOverride() {
|
||||
}
|
||||
export -f volteOverride;
|
||||
|
||||
hardenLocationSepolicy() {
|
||||
#Prevent Qualcomm location stack from reading chipset serial number
|
||||
find device -name "hal_gnss*.te" -type f -exec sh -c "awk -i inplace '!/sysfs_soc/' {}" \;
|
||||
find device -name "location.te" -type f -exec sh -c "awk -i inplace '!/sysfs_soc/' {}" \;
|
||||
echo "Removed serial number access to Qualcomm location stacks";
|
||||
}
|
||||
export -f hardenLocationSepolicy;
|
||||
|
||||
hardenLocationConf() {
|
||||
local gpsConfig=$1;
|
||||
#Debugging: adb logcat -b all | grep -i -e locsvc -e izat -e gps -e gnss -e location -e xtra
|
||||
|
@ -591,6 +591,7 @@ find "kernel" -maxdepth 2 -mindepth 2 -type d -print0 | xargs -0 -n 1 -P 8 -I {}
|
||||
cd "$DOS_BUILD_BASE";
|
||||
deblobAudio;
|
||||
removeBuildFingerprints;
|
||||
hardenLocationSepolicy || true;
|
||||
changeDefaultDNS; #Change the default DNS servers
|
||||
|
||||
#Tweaks for <2GB RAM devices
|
||||
|
@ -502,6 +502,7 @@ find "kernel" -maxdepth 2 -mindepth 2 -type d -print0 | xargs -0 -n 1 -P 8 -I {}
|
||||
cd "$DOS_BUILD_BASE";
|
||||
deblobAudio;
|
||||
removeBuildFingerprints;
|
||||
hardenLocationSepolicy || true;
|
||||
changeDefaultDNS; #Change the default DNS servers
|
||||
|
||||
#Tweaks for <2GB RAM devices
|
||||
|
@ -412,6 +412,7 @@ if [ "$DOS_GRAPHENE_EXEC" = true ]; then find "device" -maxdepth 2 -mindepth 2 -
|
||||
cd "$DOS_BUILD_BASE";
|
||||
deblobAudio;
|
||||
removeBuildFingerprints;
|
||||
hardenLocationSepolicy || true;
|
||||
changeDefaultDNS; #Change the default DNS servers
|
||||
fixupCarrierConfigs || true; #Remove silly carrier restrictions
|
||||
cd "$DOS_BUILD_BASE";
|
||||
|
@ -555,6 +555,7 @@ if [ "$DOS_GRAPHENE_EXEC" = true ]; then find "device" -maxdepth 2 -mindepth 2 -
|
||||
cd "$DOS_BUILD_BASE";
|
||||
deblobAudio;
|
||||
removeBuildFingerprints;
|
||||
hardenLocationSepolicy || true;
|
||||
enableAutoVarInit || true;
|
||||
changeDefaultDNS; #Change the default DNS servers
|
||||
fixupCarrierConfigs || true; #Remove silly carrier restrictions
|
||||
|
@ -561,6 +561,7 @@ if [ "$DOS_GRAPHENE_EXEC" = true ]; then find "device" -maxdepth 2 -mindepth 2 -
|
||||
cd "$DOS_BUILD_BASE";
|
||||
deblobAudio;
|
||||
removeBuildFingerprints;
|
||||
hardenLocationSepolicy || true;
|
||||
enableAutoVarInit || true;
|
||||
changeDefaultDNS; #Change the default DNS servers
|
||||
fixupCarrierConfigs || true; #Remove silly carrier restrictions
|
||||
|
@ -450,6 +450,7 @@ if [ "$DOS_GRAPHENE_EXEC" = true ]; then find "device" -maxdepth 2 -mindepth 2 -
|
||||
cd "$DOS_BUILD_BASE";
|
||||
deblobAudio;
|
||||
removeBuildFingerprints;
|
||||
hardenLocationSepolicy || true;
|
||||
enableAutoVarInit || true;
|
||||
changeDefaultDNS; #Change the default DNS servers
|
||||
fixupCarrierConfigs || true; #Remove silly carrier restrictions
|
||||
|
@ -504,6 +504,7 @@ if [ "$DOS_GRAPHENE_EXEC" = true ]; then find "device" -maxdepth 2 -mindepth 2 -
|
||||
cd "$DOS_BUILD_BASE";
|
||||
deblobAudio;
|
||||
removeBuildFingerprints;
|
||||
hardenLocationSepolicy || true;
|
||||
enableAutoVarInit || true;
|
||||
changeDefaultDNS; #Change the default DNS servers
|
||||
fixupCarrierConfigs || true; #Remove silly carrier restrictions
|
||||
|
Loading…
Reference in New Issue
Block a user