BulletinPoller fetches the Pixel security bulletin index page on its own HandlerThread with 5s/30s/2m/10m/30m bootstrap backoff, then 24h steady cadence. The first <td>YYYY-MM-DD</td> match is the latest published patch; newer-than-current dates flow through PatchLevelManager.updateTo for validation + atomic write + resetprop. Persists the last 10 attempts to last_bulletin_fetch.json (atomic rename) with status, http_code, parsed_date, applied, and error fields so operators can audit history without logcat. Sepolicy rule appends TCP-socket allow rules for both ksu and magisk source domains so HttpsURLConnection survives SELinux enforcement on either root provider. Uninstall.sh cleans the three new artifacts.
14 lines
455 B
Bash
14 lines
455 B
Bash
#!/system/bin/sh
|
|
MODDIR=${0%/*}
|
|
CONFIG_DIR=/data/adb/tricky_store
|
|
|
|
# Kill daemon and supervisor
|
|
for pid in $(pidof TEESimulator) $(pidof supervisor) $(pidof daemon); do
|
|
kill -9 "$pid" 2>/dev/null
|
|
done
|
|
|
|
rm -rf "$CONFIG_DIR/persistent_keys"
|
|
rm -f "$CONFIG_DIR/tee_status.txt"
|
|
rm -f "$CONFIG_DIR/boot_hash.bin" "$CONFIG_DIR/boot_key.bin"
|
|
rm -f "$CONFIG_DIR/security_patch.txt" "$CONFIG_DIR/security_patch.txt.next" "$CONFIG_DIR/last_bulletin_fetch.json"
|