More small fixes
This commit is contained in:
parent
2675404f86
commit
a6a59309ed
@ -94,6 +94,7 @@
|
|||||||
<project path="external/stlport" name="LineageOS/android_external_stlport" remote="github" />
|
<project path="external/stlport" name="LineageOS/android_external_stlport" remote="github" />
|
||||||
<project path="kernel/google/msm" name="LineageOS/android_kernel_google_msm" remote="github" />
|
<project path="kernel/google/msm" name="LineageOS/android_kernel_google_msm" remote="github" />
|
||||||
<project path="packages/apps/FlipFlap" name="LineageOS/android_packages_apps_FlipFlap" remote="github" />
|
<project path="packages/apps/FlipFlap" name="LineageOS/android_packages_apps_FlipFlap" remote="github" />
|
||||||
|
<project path="device/lineage/atv" name="LineageOS/android_device_lineage_atv" remote="github" />
|
||||||
|
|
||||||
<!-- Asus Zenfone 2 Laser (Z00T) -->
|
<!-- Asus Zenfone 2 Laser (Z00T) -->
|
||||||
<project path="device/asus/msm8916-common" name="LineageOS/android_device_asus_msm8916-common" remote="github" />
|
<project path="device/asus/msm8916-common" name="LineageOS/android_device_asus_msm8916-common" remote="github" />
|
||||||
|
@ -100,6 +100,7 @@
|
|||||||
<project path="hardware/sony/timekeep" name="LineageOS/android_hardware_sony_timekeep" remote="github" />
|
<project path="hardware/sony/timekeep" name="LineageOS/android_hardware_sony_timekeep" remote="github" />
|
||||||
<project path="kernel/google/msm" name="LineageOS/android_kernel_google_msm" remote="github" />
|
<project path="kernel/google/msm" name="LineageOS/android_kernel_google_msm" remote="github" />
|
||||||
<project path="packages/apps/FlipFlap" name="LineageOS/android_packages_apps_FlipFlap" remote="github" />
|
<project path="packages/apps/FlipFlap" name="LineageOS/android_packages_apps_FlipFlap" remote="github" />
|
||||||
|
<project path="device/lineage/atv" name="LineageOS/android_device_lineage_atv" remote="github" />
|
||||||
|
|
||||||
<!-- Asus ZenFone 3 (zenfone3) -->
|
<!-- Asus ZenFone 3 (zenfone3) -->
|
||||||
<project path="device/asus/zenfone3" name="LineageOS/android_device_asus_zenfone3" remote="github" />
|
<project path="device/asus/zenfone3" name="LineageOS/android_device_asus_zenfone3" remote="github" />
|
||||||
|
@ -96,6 +96,7 @@
|
|||||||
<project path="hardware/sony/thermanager" name="LineageOS/android_hardware_sony_thermanager" remote="github" />
|
<project path="hardware/sony/thermanager" name="LineageOS/android_hardware_sony_thermanager" remote="github" />
|
||||||
<!--<project path="hardware/sony/timekeep" name="LineageOS/android_hardware_sony_timekeep" remote="github" />-->
|
<!--<project path="hardware/sony/timekeep" name="LineageOS/android_hardware_sony_timekeep" remote="github" />-->
|
||||||
<project path="kernel/google/msm" name="LineageOS/android_kernel_google_msm" remote="github" />
|
<project path="kernel/google/msm" name="LineageOS/android_kernel_google_msm" remote="github" />
|
||||||
|
<project path="device/lineage/atv" name="LineageOS/android_device_lineage_atv" remote="github" />
|
||||||
|
|
||||||
<!-- Essential PH-1 (mata) -->
|
<!-- Essential PH-1 (mata) -->
|
||||||
<project path="device/essential/mata" name="LineageOS/android_device_essential_mata" remote="github" />
|
<project path="device/essential/mata" name="LineageOS/android_device_essential_mata" remote="github" />
|
||||||
|
@ -1,13 +1,13 @@
|
|||||||
From 22342a49f43d2d7613d12603ec99d75dc2ceb6eb Mon Sep 17 00:00:00 2001
|
From edd233257b7a76ff0e1f6251339caccbc7c5afbd Mon Sep 17 00:00:00 2001
|
||||||
From: Daniel Micay <danielmicay@gmail.com>
|
From: Daniel Micay <danielmicay@gmail.com>
|
||||||
Date: Wed, 28 Jun 2017 07:54:49 -0400
|
Date: Wed, 28 Jun 2017 07:54:49 -0400
|
||||||
Subject: [PATCH] Harden
|
Subject: [PATCH] Harden
|
||||||
|
|
||||||
Change-Id: I46e3fc4ac896a509ab8ca90ae4ce09b820da434b
|
Change-Id: I46e3fc4ac896a509ab8ca90ae4ce09b820da434b
|
||||||
---
|
---
|
||||||
init/init.cpp | 6 +++---
|
init/init.cpp | 6 +++---
|
||||||
rootdir/init.rc | 8 ++++++++
|
rootdir/init.rc | 12 ++++++++++++
|
||||||
2 files changed, 11 insertions(+), 3 deletions(-)
|
2 files changed, 15 insertions(+), 3 deletions(-)
|
||||||
|
|
||||||
diff --git a/init/init.cpp b/init/init.cpp
|
diff --git a/init/init.cpp b/init/init.cpp
|
||||||
index 7a370596e..35bf44a7b 100755
|
index 7a370596e..35bf44a7b 100755
|
||||||
@ -27,9 +27,11 @@ index 7a370596e..35bf44a7b 100755
|
|||||||
}
|
}
|
||||||
|
|
||||||
// We must have some place other than / to create the device nodes for
|
// We must have some place other than / to create the device nodes for
|
||||||
|
diff --git a/rootdir/init.rc b/rootdir/init.rc
|
||||||
|
index 40a36402e..0ee5f3e67 100644
|
||||||
--- a/rootdir/init.rc
|
--- a/rootdir/init.rc
|
||||||
+++ b/rootdir/init.rc
|
+++ b/rootdir/init.rc
|
||||||
@@ -126,7 +126,18 @@ on init
|
@@ -126,6 +126,18 @@ on init
|
||||||
write /proc/sys/kernel/sched_child_runs_first 0
|
write /proc/sys/kernel/sched_child_runs_first 0
|
||||||
|
|
||||||
write /proc/sys/kernel/randomize_va_space 2
|
write /proc/sys/kernel/randomize_va_space 2
|
||||||
@ -49,5 +51,5 @@ index 7a370596e..35bf44a7b 100755
|
|||||||
write /proc/sys/vm/mmap_min_addr 32768
|
write /proc/sys/vm/mmap_min_addr 32768
|
||||||
write /proc/sys/net/ipv4/ping_group_range "0 2147483647"
|
write /proc/sys/net/ipv4/ping_group_range "0 2147483647"
|
||||||
--
|
--
|
||||||
2.21.0
|
2.26.2
|
||||||
|
|
||||||
|
@ -115,7 +115,6 @@ export -f buildAll;
|
|||||||
patchWorkspace() {
|
patchWorkspace() {
|
||||||
if [ "$DOS_MALWARE_SCAN_ENABLED" = true ]; then scanForMalware false "$DOS_PREBUILT_APPS $DOS_BUILD_BASE/build $DOS_BUILD_BASE/device $DOS_BUILD_BASE/vendor/cm"; fi;
|
if [ "$DOS_MALWARE_SCAN_ENABLED" = true ]; then scanForMalware false "$DOS_PREBUILT_APPS $DOS_BUILD_BASE/build $DOS_BUILD_BASE/device $DOS_BUILD_BASE/vendor/cm"; fi;
|
||||||
source build/envsetup.sh;
|
source build/envsetup.sh;
|
||||||
#repopick 214125; #spellchecker: enable more wordlists
|
|
||||||
repopick -it n_asb_09-2018-qcom;
|
repopick -it n_asb_09-2018-qcom;
|
||||||
repopick -it ibss-mode-nougat;
|
repopick -it ibss-mode-nougat;
|
||||||
repopick -i 280667 280668 280669; #n-asb-2020-07
|
repopick -i 280667 280668 280669; #n-asb-2020-07
|
||||||
|
@ -184,7 +184,7 @@ patch -p1 < "$DOS_PATCHES/android_system_core/0001-Harden.patch"; #Harden mounts
|
|||||||
if [ "$DOS_GRAPHENE_MALLOC" = true ]; then patch -p1 < "$DOS_PATCHES_COMMON/android_system_core/0001-HM-Increase_vm_mmc.patch"; fi; #(GrapheneOS)
|
if [ "$DOS_GRAPHENE_MALLOC" = true ]; then patch -p1 < "$DOS_PATCHES_COMMON/android_system_core/0001-HM-Increase_vm_mmc.patch"; fi; #(GrapheneOS)
|
||||||
|
|
||||||
enterAndClear "system/netd";
|
enterAndClear "system/netd";
|
||||||
git am "$DOS_PATCHES/android_system_netd/*.patch"; #n-netd
|
git am $DOS_PATCHES/android_system_netd/*.patch; #n-netd
|
||||||
|
|
||||||
enterAndClear "system/sepolicy";
|
enterAndClear "system/sepolicy";
|
||||||
patch -p1 < "$DOS_PATCHES/android_system_sepolicy/248600.patch"; #restrict access to timing information in /proc
|
patch -p1 < "$DOS_PATCHES/android_system_sepolicy/248600.patch"; #restrict access to timing information in /proc
|
||||||
|
Loading…
x
Reference in New Issue
Block a user