mirror of
https://github.com/Divested-Mobile/DivestOS-Build.git
synced 2024-09-27 19:56:32 +00:00
0c4db149e1
This revokes the permissions to all user installed apps on update. Likely an expected quirk of being on 20.0 without the permission. 19.1 upgrades and new 20.0 installs should be fine. TODO: update 19.1 with the SpecialRuntimePermAppUtils too Signed-off-by: Tad <tad@spotco.us>
126 lines
4.4 KiB
Bash
126 lines
4.4 KiB
Bash
#!/bin/bash
|
|
#DivestOS: A privacy focused mobile distribution
|
|
#Copyright (c) 2017-2021 Divested Computing Group
|
|
#
|
|
#This program is free software: you can redistribute it and/or modify
|
|
#it under the terms of the GNU General Public License as published by
|
|
#the Free Software Foundation, either version 3 of the License, or
|
|
#(at your option) any later version.
|
|
#
|
|
#This program is distributed in the hope that it will be useful,
|
|
#but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
#GNU General Public License for more details.
|
|
#
|
|
#You should have received a copy of the GNU General Public License
|
|
#along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
umask 0022;
|
|
|
|
#Last verified: 2021-10-16
|
|
|
|
patchAllKernels() {
|
|
startPatcher "kernel_cyanogen_msm8916 kernel_motorola_msm8916 kernel_motorola_msm8992 kernel_motorola_msm8996 kernel_oneplus_msm8994 kernel_oneplus_sm7250 kernel_samsung_universal9810 kernel_xiaomi_sm6150 kernel_yandex_sdm660";
|
|
}
|
|
export -f patchAllKernels;
|
|
|
|
scanWorkspaceForMalware() {
|
|
local scanQueue="$DOS_BUILD_BASE/android $DOS_BUILD_BASE/art $DOS_BUILD_BASE/bionic $DOS_BUILD_BASE/bootable $DOS_BUILD_BASE/build $DOS_BUILD_BASE/dalvik $DOS_BUILD_BASE/device $DOS_BUILD_BASE/hardware $DOS_BUILD_BASE/libcore $DOS_BUILD_BASE/libnativehelper $DOS_BUILD_BASE/packages $DOS_BUILD_BASE/pdk $DOS_BUILD_BASE/platform_testing $DOS_BUILD_BASE/sdk $DOS_BUILD_BASE/system";
|
|
scanQueue=$scanQueue" $DOS_BUILD_BASE/lineage-sdk $DOS_BUILD_BASE/vendor/lineage";
|
|
scanForMalware true "$scanQueue";
|
|
}
|
|
export -f scanWorkspaceForMalware;
|
|
|
|
buildDevice() {
|
|
cd "$DOS_BUILD_BASE";
|
|
export OTA_KEY_OVERRIDE_DIR="$DOS_SIGNING_KEYS/$1";
|
|
breakfast "lineage_$1-user" && mka target-files-package otatools && processRelease $1 true $2;
|
|
}
|
|
export -f buildDevice;
|
|
|
|
buildDeviceDebug() {
|
|
cd "$DOS_BUILD_BASE";
|
|
unset OTA_KEY_OVERRIDE_DIR;
|
|
brunch "lineage_$1-eng";
|
|
}
|
|
export -f buildDeviceDebug;
|
|
|
|
buildAll() {
|
|
umask 0022;
|
|
cd "$DOS_BUILD_BASE";
|
|
if [ "$DOS_MALWARE_SCAN_ENABLED" = true ]; then scanWorkspaceForMalware; fi;
|
|
#SD410
|
|
buildDevice crackling;
|
|
buildDevice harpia;
|
|
buildDevice merlin;
|
|
buildDevice osprey;
|
|
buildDevice surnia;
|
|
#SD808
|
|
buildDevice clark;
|
|
#SD810
|
|
buildDevice oneplus2;
|
|
#SD820
|
|
buildDevice griffin;
|
|
#SD730
|
|
buildDevice davinci avb; #broken - missing deps
|
|
#SD660
|
|
buildDevice Amber verity;
|
|
#SD765
|
|
buildDevice avicii avb;
|
|
#Exynos
|
|
#buildDevice starlte; #broken - error: memremap.c:(.text+0xd248): relocation truncated to fit: R_AARCH64_CALL26 against undefined symbol `sl_softirq_entry'
|
|
#buildDevice star2lte;
|
|
}
|
|
export -f buildAll;
|
|
|
|
patchWorkspace() {
|
|
umask 0022;
|
|
cd "$DOS_BUILD_BASE$1";
|
|
touch DOS_PATCHED_FLAG;
|
|
if [ "$DOS_MALWARE_SCAN_ENABLED" = true ]; then scanForMalware false "$DOS_PREBUILT_APPS $DOS_BUILD_BASE/build $DOS_BUILD_BASE/device $DOS_BUILD_BASE/vendor/lineage"; fi;
|
|
verifyAllPlatformTags;
|
|
gpgVerifyGitTag "$DOS_BUILD_BASE/external/hardened_malloc";
|
|
gpgVerifyGitHead "$DOS_BUILD_BASE/external/chromium-webview";
|
|
|
|
#source build/envsetup.sh;
|
|
#repopick -it ten-firewall;
|
|
|
|
sh "$DOS_SCRIPTS/Patch.sh";
|
|
sh "$DOS_SCRIPTS_COMMON/Enable_Verity.sh";
|
|
sh "$DOS_SCRIPTS_COMMON/Copy_Keys.sh";
|
|
sh "$DOS_SCRIPTS/Defaults.sh";
|
|
sh "$DOS_SCRIPTS/Rebrand.sh";
|
|
sh "$DOS_SCRIPTS_COMMON/Optimize.sh";
|
|
sh "$DOS_SCRIPTS_COMMON/Deblob.sh";
|
|
sh "$DOS_SCRIPTS_COMMON/Patch_CVE.sh";
|
|
sh "$DOS_SCRIPTS_COMMON/Post.sh";
|
|
source build/envsetup.sh;
|
|
}
|
|
export -f patchWorkspace;
|
|
|
|
enableDexPreOpt() {
|
|
cd "$DOS_BUILD_BASE$1";
|
|
if [ -f BoardConfig.mk ]; then
|
|
echo "WITH_DEXPREOPT := true" >> BoardConfig.mk;
|
|
echo "WITH_DEXPREOPT_DEBUG_INFO := false" >> BoardConfig.mk;
|
|
if [ "$1" != "device/htc/m8" ]; then
|
|
echo "WITH_DEXPREOPT_BOOT_IMG_AND_SYSTEM_SERVER_ONLY := false" >> BoardConfig.mk;
|
|
echo "Enabled full dexpreopt for $1";
|
|
else
|
|
echo "WITH_DEXPREOPT_BOOT_IMG_AND_SYSTEM_SERVER_ONLY := true" >> BoardConfig.mk;
|
|
echo "Enabled core dexpreopt for $1";
|
|
fi;
|
|
fi;
|
|
cd "$DOS_BUILD_BASE";
|
|
}
|
|
export -f enableDexPreOpt;
|
|
|
|
enableLowRam() {
|
|
cd "$DOS_BUILD_BASE$1";
|
|
if [ -f lineage_$2.mk ]; then echo -e '\n$(call inherit-product, vendor/divested/build/target/product/lowram.mk)' >> lineage_$2.mk; fi;
|
|
if [ -f BoardConfig.mk ]; then echo 'MALLOC_SVELTE := true' >> BoardConfig.mk; fi;
|
|
if [ -f BoardConfigCommon.mk ]; then echo 'MALLOC_SVELTE := true' >> BoardConfigCommon.mk; fi;
|
|
echo "Enabled lowram for $1";
|
|
cd "$DOS_BUILD_BASE";
|
|
}
|
|
export -f enableLowRam;
|