feat(install): drop default security_patch.txt at install
Out-of-box install seeds /data/adb/tricky_store/security_patch.txt with system=prop so TEESimulator passively mirrors live device props. ConfigurationManager auto-forces boot=prop+vendor=prop when system=prop (ConfigurationManager.kt:253-256), giving full coverage with one line. Eliminates Chunqiu code 26 (Tampered Attestation Key) on out-of-box installs without requiring the Tricky-Addon-Update-Target-List companion module.
This commit is contained in:
@@ -92,6 +92,17 @@ if [ ! -f "$CONFIG_DIR/target.txt" ]; then
|
|||||||
install_file "target.txt" "$CONFIG_DIR"
|
install_file "target.txt" "$CONFIG_DIR"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
if [ ! -f "$CONFIG_DIR/security_patch.txt" ]; then
|
||||||
|
ui_print "- Adding default security patch config (mirror device props)"
|
||||||
|
printf '%s\n' \
|
||||||
|
'# TEESimulator default: mirror live device props.' \
|
||||||
|
'# system=prop reads ro.build.version.security_patch at cert-gen time;' \
|
||||||
|
'# boot and vendor are auto-forced to prop too (ConfigurationManager.kt:253-256).' \
|
||||||
|
'# Override with explicit YYYY-MM-DD dates if you want active spoofing.' \
|
||||||
|
'system=prop' > "$CONFIG_DIR/security_patch.txt"
|
||||||
|
chmod 644 "$CONFIG_DIR/security_patch.txt"
|
||||||
|
fi
|
||||||
|
|
||||||
rm -f "$CONFIG_DIR/tee_status.txt"
|
rm -f "$CONFIG_DIR/tee_status.txt"
|
||||||
|
|
||||||
if [ ! -f "$CONFIG_DIR/hbk" ]; then
|
if [ ! -f "$CONFIG_DIR/hbk" ]; then
|
||||||
|
|||||||
Reference in New Issue
Block a user