name: add configs
description: add configs and disabling securities
inputs:
 branch:
   description: 'which device kernel'
   required: true

runs:
 using: composite
 steps:
  - name: add mountify support
    shell: bash
    run: |
     cat >> "$GKI_DEFCONFIG" << 'EOF'
     # Mountify Support
     CONFIG_OVERLAY_FS=y
     CONFIG_TMPFS_XATTR=y
     CONFIG_TMPFS_POSIX_ACL=y
     EOF

  - name: increase log buffer size for showing bbg on ksu manager homepage
    shell: bash
    run: |
     cat >> "$GKI_DEFCONFIG" << 'EOF'
     # increase log buffer size to show bbg version in wksu homepage
     CONFIG_LOG_BUF_SHIFT=20
     EOF

  - name: nuke securities for root access
    shell: bash
    run: |
     if [[ "${{ inputs.branch }}" == "SM-S938B-Oneui7" || "${{ inputs.branch }}" == "SM-S931B-Oneui8" ]]; then
     echo "nothing to see here moving on"
          
     elif [[ ${{ inputs.branch }} == SM-S926B* ]]; then
     cat >> "$COMMON/arch/arm64/configs/s5e9945-bazel_defconfig" << 'EOF'
     # nuke root protection
     CONFIG_UH=n
     CONFIG_UH_RKP=n
     CONFIG_UH_LKMAUTH=n
     CONFIG_UH_LKM_BLOCK=n
     CONFIG_RKP_CFP_JOPP=n
     CONFIG_RKP_CFP=n
     CONFIG_SECURITY_DEFEX=n
     CONFIG_PROCA=n
     CONFIG_FIVE=n
     CONFIG_RKP=n
     CONFIG_KDP_NS=n
     CONFIG_KDP=n
     EOF

     elif [[ ${{ inputs.branch }} == SM-A556* ]]; then
     cat >> "$COMMON/arch/arm64/configs/s5e8845-bazel_defconfig" << 'EOF'
     # nuke root protection
     CONFIG_UH=n
     CONFIG_UH_RKP=n
     CONFIG_UH_LKMAUTH=n
     CONFIG_UH_LKM_BLOCK=n
     CONFIG_RKP_CFP_JOPP=n
     CONFIG_RKP_CFP=n
     CONFIG_SECURITY_DEFEX=n
     CONFIG_PROCA=n
     CONFIG_FIVE=n
     CONFIG_RKP=n
     CONFIG_KDP_NS=n
     CONFIG_KDP=n
     EOF

     else
     cat >> "$GKI_DEFCONFIG" << 'EOF'
     # nuke root protection
     CONFIG_UH=n
     CONFIG_UH_RKP=n
     CONFIG_UH_LKMAUTH=n
     CONFIG_UH_LKM_BLOCK=n
     CONFIG_RKP_CFP_JOPP=n
     CONFIG_RKP_CFP=n
     CONFIG_SECURITY_DEFEX=n
     CONFIG_PROCA=n
     CONFIG_FIVE=n
     CONFIG_RKP=n  
     CONFIG_KDP_NS=n
     CONFIG_KDP=n
     EOF
     fi
  - name: remove check_defconfig
    shell: bash
    run: |
     cd "$COMMON"
     # Remove check_defconfig
     sed -i 's/check_defconfig//' ./build.config.gki