| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869 |
- name: add configs
- description: add configs and disabling securities
- runs:
- using: composite
- steps:
- - name: add mountify support
- shell: bash
- run: |
- "$COMMON/scripts/config" --file "$GKI_DEFCONFIG" --enable CONFIG_OVERLAY_FS
- "$COMMON/scripts/config" --file "$GKI_DEFCONFIG" --enable CONFIG_TMPFS_XATTR
- "$COMMON/scripts/config" --file "$GKI_DEFCONFIG" --enable CONFIG_TMPFS_POSIX_ACL
-
- - name: enable KPM support
- shell: bash
- run: |
- "$COMMON/scripts/config" --file "$GKI_DEFCONFIG" --enable CONFIG_KALLSYMS
- "$COMMON/scripts/config" --file "$GKI_DEFCONFIG" --enable CONFIG_KALLSYMS_ALL
- "$COMMON/scripts/config" --file "$GKI_DEFCONFIG" --enable CONFIG_KPM
-
- - name: nuke securities for root access
- shell: bash
- run: |
- # 1. Determine which defconfig file needs to be patched based on the branch
- target_config=""
-
- if [[ $BRANCH == SM-S938B* || "$BRANCH" == "SM-S931B-Oneui8" ]]; then
- echo "Nothing to see here, moving on..."
- elif [[ $BRANCH == SM-S926B* ]]; then
- target_config="$COMMON/arch/arm64/configs/s5e9945-bazel_defconfig"
- elif [[ $BRANCH == SM-A556* ]]; then
- target_config="$COMMON/arch/arm64/configs/s5e8845-bazel_defconfig"
- elif [[ $BRANCH == SM-A055* ]]; then
- target_config="$CONFIG/kernel/kernel_device_modules-6.6/arch/arm64/configs/mediatek-bazel_defconfig"
- elif [[ $BRANCH == SM-A075* ]]; then
- target_config="$COMMON/arch/arm64/configs/a07_00_defconfig"
- else
- target_config="$GKI_DEFCONFIG"
- fi
-
- # 2. Apply the nuke modifications exactly once if a target file was assigned
- if [ -n "$target_config" ]; then
- echo "Nuking Samsung Knox/Root protection in: $target_config"
-
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_UH
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_UH_RKP
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_UH_LKMAUTH
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_UH_LKM_BLOCK
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_RKP
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_RKP_CFP_JOPP
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_RKP_CFP_ROPP
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_RKP_CFP
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_SECURITY_DEFEX
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_PROCA
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_FIVE
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_KDP
- "$COMMON/scripts/config" --file "$target_config" --disable CONFIG_KDP_NS
- #"$COMMON/scripts/config" --file "$target_config" --disable CONFIG_KNOX
- #"$COMMON/scripts/config" --file "$target_config" --disable CONFIG_KNOX_NCM
- #"$COMMON/scripts/config" --file "$target_config" --disable CONFIG_KNOX_KAP
- fi
- - name: remove check_defconfig
- shell: bash
- run: |
- cd "$COMMON"
- # Remove check_defconfig
- sed -i 's/check_defconfig//' ./build.config.gki
|
