|
@@ -181,7 +181,8 @@ jobs:
|
|
|
cp "$KERNEL_PATCHES/samsung/${{ inputs.branch }}/"* ./
|
|
cp "$KERNEL_PATCHES/samsung/${{ inputs.branch }}/"* ./
|
|
|
patch -p1 < fix_namespace.patch
|
|
patch -p1 < fix_namespace.patch
|
|
|
patch -p1 < fix_base.patch
|
|
patch -p1 < fix_base.patch
|
|
|
- elif [[ "${{ inputs.branch }}" == "SM-A546B-Oneui7" ]]; then
|
|
|
|
|
|
|
+ patch -p1 < fix_exec.patch
|
|
|
|
|
+ elif [[ "${{ inputs.branch }}" == "SM-A546B-Oneui7" || "${{ inputs.branch }}" == "SM-A546E-Oneui7"]]; then
|
|
|
cp "$KERNEL_PATCHES/samsung/${{ inputs.branch }}/"* ./
|
|
cp "$KERNEL_PATCHES/samsung/${{ inputs.branch }}/"* ./
|
|
|
patch -p1 < fix_namespace.patch
|
|
patch -p1 < fix_namespace.patch
|
|
|
patch -p1 < fix_base.patch
|
|
patch -p1 < fix_base.patch
|
|
@@ -195,6 +196,7 @@ jobs:
|
|
|
cp "$KERNEL_PATCHES/samsung/${{ inputs.branch }}/"* ./
|
|
cp "$KERNEL_PATCHES/samsung/${{ inputs.branch }}/"* ./
|
|
|
patch -p1 < fix_namespace.patch
|
|
patch -p1 < fix_namespace.patch
|
|
|
patch -p1 < fix_base.patch
|
|
patch -p1 < fix_base.patch
|
|
|
|
|
+ patch -p1 < fix_exec.patch
|
|
|
elif [[ "${{ inputs.branch }}" == "SM-S926B-Oneui8" ]]; then
|
|
elif [[ "${{ inputs.branch }}" == "SM-S926B-Oneui8" ]]; then
|
|
|
cp "$KERNEL_PATCHES/samsung/${{ inputs.branch }}/"* ./
|
|
cp "$KERNEL_PATCHES/samsung/${{ inputs.branch }}/"* ./
|
|
|
patch -p1 < fix_namespace.patch
|
|
patch -p1 < fix_namespace.patch
|
|
@@ -218,34 +220,39 @@ jobs:
|
|
|
CONFIG_KSU=y
|
|
CONFIG_KSU=y
|
|
|
CONFIG_KSU_SUSFS=y
|
|
CONFIG_KSU_SUSFS=y
|
|
|
|
|
|
|
|
- # KPatch Next Support
|
|
|
|
|
- CONFIG_KALLSYMS=y
|
|
|
|
|
- CONFIG_KALLSYMS_ALL=y
|
|
|
|
|
- # CONFIG_KALLSYMS_BASE_RELATIVE is not set
|
|
|
|
|
- # CONFIG_KALLSYMS_ABSOLUTE_PERCPU is not set
|
|
|
|
|
- CONFIG_KALLSYMS_UNCOMPRESSED=y
|
|
|
|
|
-
|
|
|
|
|
# Mountify Support
|
|
# Mountify Support
|
|
|
CONFIG_TMPFS_XATTR=y
|
|
CONFIG_TMPFS_XATTR=y
|
|
|
CONFIG_TMPFS_POSIX_ACL=y
|
|
CONFIG_TMPFS_POSIX_ACL=y
|
|
|
|
|
|
|
|
# nuke root protection
|
|
# nuke root protection
|
|
|
- # CONFIG_UH is not set
|
|
|
|
|
- # CONFIG_UH_RKP is not set
|
|
|
|
|
- # CONFIG_UH_LKMAUTH is not set
|
|
|
|
|
- # CONFIG_UH_LKM_BLOCK is not set
|
|
|
|
|
- # CONFIG_RKP_CFP_JOPP is not set
|
|
|
|
|
- # CONFIG_RKP_CFP is not set
|
|
|
|
|
- # CONFIG_PROCA is not set
|
|
|
|
|
- # CONFIG_FIVE is not set
|
|
|
|
|
- # CONFIG_SECURITY_DEFEX is not set
|
|
|
|
|
- # CONFIG_SECURITY_DEFEX_USER is not set
|
|
|
|
|
- # CONFIG_SECURITY_DEFEX_IMR_V2 is not set
|
|
|
|
|
- # CONFIG_PROCA is not set
|
|
|
|
|
- # CONFIG_PROCA_FS is not set
|
|
|
|
|
- # CONFIG_PROCA_S_OS is not set
|
|
|
|
|
- # CONFIG_PROCA_GKI_10 is not set
|
|
|
|
|
- # CONFIG_PROCA_CERTIFICATES_DB is not set
|
|
|
|
|
|
|
+ CONFIG_UH=n
|
|
|
|
|
+ CONFIG_UH_RKP=n
|
|
|
|
|
+ CONFIG_UH_LKMAUTH=n
|
|
|
|
|
+ CONFIG_UH_LKM_BLOCK=n
|
|
|
|
|
+ CONFIG_RKP_CFP_JOPP=n
|
|
|
|
|
+ CONFIG_RKP_CFP=n
|
|
|
|
|
+ CONFIG_SECURITY_DEFEX=n
|
|
|
|
|
+ CONFIG_PROCA=n
|
|
|
|
|
+ CONFIG_FIVE=n
|
|
|
|
|
+ EOF
|
|
|
|
|
+
|
|
|
|
|
+ if [[ "${{ inputs.branch }}" == "SM-A546B-Oneui7" || "${{ inputs.branch }}" == "SM-A546E-Oneui7" ]]; then
|
|
|
|
|
+ cat >> "$DEFCONFIG" << 'EOF'
|
|
|
|
|
+ #Force Load Kernel Modules
|
|
|
|
|
+ CONFIG_MODULES=y
|
|
|
|
|
+ CONFIG_MODULE_FORCE_LOAD=y
|
|
|
|
|
+ CONFIG_MODULE_UNLOAD=y
|
|
|
|
|
+ CONFIG_MODULE_FORCE_UNLOAD=y
|
|
|
|
|
+ CONFIG_MODVERSIONS=y
|
|
|
|
|
+ CONFIG_MODULE_SRCVERSION_ALL=n
|
|
|
|
|
+ CONFIG_MODULE_SIG=n
|
|
|
|
|
+ CONFIG_MODULE_COMPRESS=n
|
|
|
|
|
+ CONFIG_TRIM_UNUSED_KSYMS=n
|
|
|
|
|
+ EOF
|
|
|
|
|
+
|
|
|
|
|
+ # Modify CONFIG_LSM line to insert baseband_guard
|
|
|
|
|
+ sed -i '/^CONFIG_LSM=/ s/lockdown,/lockdown,baseband_guard,/' "$DEFCONFIG"
|
|
|
|
|
+ fi
|
|
|
|
|
|
|
|
# Remove check_defconfig
|
|
# Remove check_defconfig
|
|
|
sed -i 's/check_defconfig//' ./build.config.gki
|
|
sed -i 's/check_defconfig//' ./build.config.gki
|