mirror of
https://github.com/Divested-Mobile/DivestOS-Build.git
synced 2025-07-24 15:15:26 -04:00
Certificate Authority store updates
- Remove some untrustworthy CAs - Update CA store for all branches to aosp/e302aa968334b3c3fc9cd709a7c7661e0cf534eb Signed-off-by: Tad <tad@spotco.us>
This commit is contained in:
parent
41e2669884
commit
cda898f141
138 changed files with 11880 additions and 2 deletions
|
@ -470,6 +470,11 @@ applyPatch "$DOS_PATCHES/android_system_bt/242134.patch"; #avrc_bld_get_attrs_rs
|
|||
applyPatch "$DOS_PATCHES/android_system_bt/0001-NO_READENCRKEYSIZE.patch"; #Add an option to let devices opt-out of the HCI_READ_ENCR_KEY_SIZE_SUPPORTED assert (DivestOS)
|
||||
fi;
|
||||
|
||||
if enterAndClear "system/ca-certificates"; then
|
||||
rm -rf files; #Remove old certs
|
||||
cp -r "$DOS_PATCHES_COMMON/android_system_ca-certificates/files" .; #Copy the new ones into place
|
||||
fi;
|
||||
|
||||
if enterAndClear "system/core"; then
|
||||
applyPatch "$DOS_PATCHES/android_system_core/332457.patch"; #n-asb-2022-06 Backport of Win-specific suppression of potentially rogue construct that can engage
|
||||
if [ "$DOS_HOSTS_BLOCKING" = true ]; then cat "$DOS_HOSTS_FILE" >> rootdir/etc/hosts; fi; #Merge in our HOSTS file
|
||||
|
@ -615,6 +620,7 @@ deblobAudio;
|
|||
removeBuildFingerprints;
|
||||
hardenLocationSerials || true;
|
||||
changeDefaultDNS; #Change the default DNS servers
|
||||
removeUntrustedCerts || true;
|
||||
|
||||
#Tweaks for <2GB RAM devices
|
||||
enableLowRam "device/asus/grouper";
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue