-
Notifications
You must be signed in to change notification settings - Fork 13
/
fixes.sh
137 lines (97 loc) · 6.56 KB
/
fixes.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
#!/sbin/sh
# Recherche la date du patch de securite dans l'image du kernel ou du boot
fixSPL() {
img="$(find /dev/block -type l -name kernel"$(getprop ro.boot.slot_suffix)" | grep by-name | head -n 1)"
[ -z "$img" ] && img="$(find /dev/block -type l -name boot"$(getprop ro.boot.slot_suffix)" | grep by-name | head -n 1)"
if [ -n "$img" ]; then
#Rewrite SPL version if needed
vendordate="$(getSPL "$img" spl)"
echo "ro.vendor.build.security_patch=$vendordate" >> /system/etc/prop.default;
fi
}
# Specific Huawei rw-system.sh
chmod 755 /system/bin/rw-system.sh
chown root:shell /system/bin/rw-system.sh
chcon -v u:object_r:phhsu_exec:s0 /system/bin/rw-system.sh
# Fix app crashes
echo "(allow appdomain vendor_file (file (read getattr execute open)))" >> /system/etc/selinux/plat_sepolicy.cil;
# Fix instagram denied
echo "(allow untrusted_app dalvikcache_data_file (file (execmod)))" >> /system/etc/selinux/plat_sepolicy.cil;
echo "(allow untrusted_app proc_zoneinfo (file (read open)))" >> /system/etc/selinux/plat_sepolicy.cil;
# Fix Google GMS denied
echo "(allow gmscore_app splash2_data_file (filesystem (getattr)))" >> /system/etc/selinux/plat_sepolicy.cil;
echo "(allow gmscore_app teecd_data_file (filesystem (getattr)))" >> /system/etc/selinux/plat_sepolicy.cil;
echo "(allow gmscore_app modem_fw_file (filesystem (getattr)))" >> /system/etc/selinux/plat_sepolicy.cil;
echo "(allow gmscore_app modem_nv_file (filesystem (getattr)))" >> /system/etc/selinux/plat_sepolicy.cil;
################### System IMG
# fix it
#echo "(/data/system_ce(/.*)? u:object_r:system_data_file:s0" >> /system/etc/selinux/plat_file_contexts
#echo "(/data/system_de(/.*)? u:object_r:system_data_file:s0" >> /system/etc/selinux/plat_file_contexts
# Add system install
echo "(allow system_server system_data_root_file (dir (write)))" >> /system/etc/selinux/plat_sepolicy.cil
echo "(allow system_server unlabeled (dir (remove_name create setattr search write read add_name)))" >> /system/etc/selinux/plat_sepolicy.cil
echo "(allow system_server unlabeled (file (create unlink read write)))" >> /system/etc/selinux/plat_sepolicy.cil
echo "(allow system_server unlabeled (sock_file (create)))" >> /system/etc/selinux/plat_sepolicy.cil
# Add system installd
echo "(allow installd unlabeled (dir (create setattr search write read add_name)))" >> /system/etc/selinux/plat_sepolicy.cil
echo "(allow installd unlabeled (file (create unlink read write)))" >> /system/etc/selinux/plat_sepolicy.cil
# Add zygote
echo "(allow zygote unlabeled (dir (search)))" >> /system/etc/selinux/plat_sepolicy.cil
# Add gatekeeperd
echo "(allow gatekeeperd unlabeled (dir (search)))" >> /system/etc/selinux/plat_sepolicy.cil
# Add credstore,keystore,netd
echo "(allow netd unlabeled (dir (search)))" >> /system/etc/selinux/plat_sepolicy.cil
echo "(allow credstore unlabeled (dir (search)))" >> /system/etc/selinux/plat_sepolicy.cil
echo "(allow keystore unlabeled (dir (search)))" >> /system/etc/selinux/plat_sepolicy.cil
# Add to enable file encryption (vold) - Fix permission on folder /data/unencrypted and /data/*/0
echo "(allow vold system_data_root_file (file (create unlink read write)))" >> etc/selinux/plat_sepolicy.cil
echo "(allow vold unlabeled (dir (create write add_name)))" >> etc/selinux/plat_sepolicy.cil
echo "(allow vold_prepare_subdirs system_data_file (dir (create setattr search write read add_name)))" >> etc/selinux/plat_sepolicy.cil
echo "(allow vold_prepare_subdirs unlabeled (dir (create setattr search write read add_name)))" >> etc/selinux/plat_sepolicy.cil
echo "(allow vold_prepare_subdirs vold_prepare_subdirs (capability (fsetid)))" >> etc/selinux/plat_sepolicy.cil
echo "(allow vold_prepare_subdirs system_data_root_file (dir (create setattr search write read add_name)))" >> etc/selinux/plat_sepolicy.cil
# ADB
echo "(allow init rootfs (file (mounton)))" >> /system/etc/selinux/plat_sepolicy.cil;
echo "(allow init splash2_data_file (filesystem (getattr)))" >> /system/etc/selinux/plat_sepolicy.cil;
echo "(allow init device (chr_file (write)))" >> /system/etc/selinux/plat_sepolicy.cil;
# Fix init
echo "(allow init system_file (dir (relabelfrom setattr write read)))" >> /system/etc/selinux/plat_sepolicy.cil;
echo "(allow init system_file (file (relabelfrom)))" >> /system/etc/selinux/plat_sepolicy.cil;
echo "(allow init sysfs_zram_uevent (file (relabelfrom)))" >> /system/etc/selinux/plat_sepolicy.cil;
echo "(allow init cust_block_device (lnk_file (relabelto)))" >> /system/etc/selinux/plat_sepolicy.cil;
# e2fsck
echo "(allow fsck block_device (blk_file (open read write ioctl)))" >> etc/selinux/plat_sepolicy.cil;
# Cust
echo "(allow cust rootfs (file (execute)))" >> etc/selinux/plat_sepolicy.cil;
# Dirty hack to show build properties
# To get productid : sed -nE 's/.*productid=([0-9xa-f]*).*/\1/p' /proc/cmdline
MODEL=$( cat /sys/firmware/devicetree/base/boardinfo/normal_product_name | tr -d '\n')
PROP="ro.product.model"
echo "#" >> /system/etc/prop.default;
echo "## Adding build props" >> /system/etc/prop.default;
echo "#" >> /system/etc/prop.default;
cat /system/build.prop | grep "." >> /system/etc/prop.default;
echo "#" >> /system/etc/prop.default;
echo "## Adding hi6250 props" >> /system/etc/prop.default;
echo "#" >> /system/etc/prop.default;
sed -i "/ro.product.model/d" /system/etc/prop.default;
sed -i "/ro.product.system.model/d" /system/etc/prop.default;
echo "ro.product.manufacturer=HUAWEI" >> /system/etc/prop.default;
echo "ro.product.system.model=hi6250" >> /system/etc/prop.default;
echo "$PROP=$MODEL" >> /system/etc/prop.default;
echo "persist.sys.usb.config=hisuite,mtp,mass_storage" >> /system/etc/prop.default;
echo "sys.usb.config=mtp" >> /system/etc/prop.default;
echo "sys.usb.configfs=1" >> /system/etc/prop.default;
echo "sys.usb.controller=hisi-usb-otg" >> /system/etc/prop.default;
echo "sys.usb.ffs.aio_compat=true" >> /system/etc/prop.default;
echo "sys.usb.ffs.ready=0" >> /system/etc/prop.default;
echo "sys.usb.ffs_hdb.ready=0" >> /system/etc/prop.default;
echo "sys.usb.state=mtp" >> /system/etc/prop.default;
echo "debug.sf.latch_unsignaled=1" >> /system/build.prop;
echo "ro.surface_flinger.running_without_sync_framework=true" >> /system/build.prop;
echo "persist.sys.sf.native_mode=1" >> /system/etc/prop.default;
echo "persist.sys.sf.color_mode=1.0" >> /system/etc/prop.default;
echo "persist.sys.sf.color_saturation=1.1" >> /system/etc/prop.default;
# LMK - for Android Kernel that support it
echo "ro.lmk.debug=true" >> /system/etc/prop.default;
exit 0;