| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091 |
- name: add configs
- description: add configs and disabling securities
- inputs:
- branch:
- description: 'which device kernel'
- required: true
- runs:
- using: composite
- steps:
- - name: add mountify support
- shell: bash
- run: |
- cat >> "$GKI_DEFCONFIG" << 'EOF'
- # Mountify Support
- CONFIG_OVERLAY_FS=y
- CONFIG_TMPFS_XATTR=y
- CONFIG_TMPFS_POSIX_ACL=y
- EOF
- - name: increase log buffer size for showing bbg on ksu manager homepage
- shell: bash
- run: |
- cat >> "$GKI_DEFCONFIG" << 'EOF'
- # increase log buffer size to show bbg version in wksu homepage
- CONFIG_LOG_BUF_SHIFT=20
- EOF
- - name: nuke securities for root access
- shell: bash
- run: |
- if [[ "${{ inputs.branch }}" == "SM-S938B-Oneui7" || "${{ inputs.branch }}" == "SM-S931B-Oneui8" ]]; then
- echo "nothing to see here moving on"
-
- elif [[ ${{ inputs.branch }} == SM-S926B* ]]; then
- cat >> "$COMMON/arch/arm64/configs/s5e9945-bazel_defconfig" << 'EOF'
- # nuke root protection
- CONFIG_UH=n
- CONFIG_UH_RKP=n
- CONFIG_UH_LKMAUTH=n
- CONFIG_UH_LKM_BLOCK=n
- CONFIG_RKP_CFP_JOPP=n
- CONFIG_RKP_CFP=n
- CONFIG_SECURITY_DEFEX=n
- CONFIG_PROCA=n
- CONFIG_FIVE=n
- CONFIG_RKP=n
- CONFIG_KDP_NS=n
- CONFIG_KDP=n
- EOF
- elif [[ ${{ inputs.branch }} == SM-A556* ]]; then
- cat >> "$COMMON/arch/arm64/configs/s5e8845-bazel_defconfig" << 'EOF'
- # nuke root protection
- CONFIG_UH=n
- CONFIG_UH_RKP=n
- CONFIG_UH_LKMAUTH=n
- CONFIG_UH_LKM_BLOCK=n
- CONFIG_RKP_CFP_JOPP=n
- CONFIG_RKP_CFP=n
- CONFIG_SECURITY_DEFEX=n
- CONFIG_PROCA=n
- CONFIG_FIVE=n
- CONFIG_RKP=n
- CONFIG_KDP_NS=n
- CONFIG_KDP=n
- EOF
- else
- cat >> "$GKI_DEFCONFIG" << 'EOF'
- # nuke root protection
- CONFIG_UH=n
- CONFIG_UH_RKP=n
- CONFIG_UH_LKMAUTH=n
- CONFIG_UH_LKM_BLOCK=n
- CONFIG_RKP_CFP_JOPP=n
- CONFIG_RKP_CFP=n
- CONFIG_SECURITY_DEFEX=n
- CONFIG_PROCA=n
- CONFIG_FIVE=n
- CONFIG_RKP=n
- CONFIG_KDP_NS=n
- CONFIG_KDP=n
- EOF
- fi
- - name: remove check_defconfig
- shell: bash
- run: |
- cd "$COMMON"
- # Remove check_defconfig
- sed -i 's/check_defconfig//' ./build.config.gki
|