From fe211061517ccd3f0c822af7e43db78c8490bedc Mon Sep 17 00:00:00 2001 From: Enginex0 Date: Tue, 19 May 2026 03:53:53 +0100 Subject: [PATCH] feat(install): drop default security_patch.txt at install Out-of-box install seeds /data/adb/tricky_store/security_patch.txt with system=prop so TEESimulator passively mirrors live device props. ConfigurationManager auto-forces boot=prop+vendor=prop when system=prop (ConfigurationManager.kt:253-256), giving full coverage with one line. Eliminates Chunqiu code 26 (Tampered Attestation Key) on out-of-box installs without requiring the Tricky-Addon-Update-Target-List companion module. --- module/customize.sh | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/module/customize.sh b/module/customize.sh index a4ce5a5..ec48cd8 100644 --- a/module/customize.sh +++ b/module/customize.sh @@ -92,6 +92,17 @@ if [ ! -f "$CONFIG_DIR/target.txt" ]; then install_file "target.txt" "$CONFIG_DIR" fi +if [ ! -f "$CONFIG_DIR/security_patch.txt" ]; then + ui_print "- Adding default security patch config (mirror device props)" + printf '%s\n' \ + '# TEESimulator default: mirror live device props.' \ + '# system=prop reads ro.build.version.security_patch at cert-gen time;' \ + '# boot and vendor are auto-forced to prop too (ConfigurationManager.kt:253-256).' \ + '# Override with explicit YYYY-MM-DD dates if you want active spoofing.' \ + 'system=prop' > "$CONFIG_DIR/security_patch.txt" + chmod 644 "$CONFIG_DIR/security_patch.txt" +fi + rm -f "$CONFIG_DIR/tee_status.txt" if [ ! -f "$CONFIG_DIR/hbk" ]; then