Comments (3)
I would like to build A14 based roms with signature spoofing support;
LineageOS made changes to their code, so that they now support 'restricted` signature spoofing (i.e. only microG is allowed to spoof signature) - see this change
however I am at a loss at how the patches located here (https://github.com/lineageos4microg/docker-lineage-cicd/tree/lineage-21/src/signature_spoofing_patches) need to be modified.
If you need to allow other apps to spoof signature ( the equivalent of SIGNATURE_SPOOFING=yes
in LineageOS for microG then check the code
Note that LineageOS for microG no longer make their official builds using those patches, they rely on the upstream LOS code. The patches were created - and received a limited amount of testing - before LOS 's change of heart on signature spoofing being 'lying about security features. They are kept in case anyone does rely on them to build ROMs which allow unrestricted spoofing, but that unctionality has not had a lot of testing
from android_vendor_extendrom.
@2lucem2 extendrom's way of patching for signature spoofing goes way further then the Lineage OS or lineageos4microg one so the suggestion of @petefoth is just one part of what extendrom provides.. extendrom adds a toggle and manually pre-cautions to actually enable signature spoofing. i.e even when the patches are integrated the user always has the choice to enable or disable it at any time.
besides that extendrom supports this also in user
builds while LOS supports that only for eng
and userdebug
builds (stupid decision but..)
If the "LOS way" is enough for your needs go ahead with them, ofc. but if you want to help porting the extendrom way read on.
basically I implement it like that:
applying the "official" sig patches - in this case for A14:
- https://github.com/lineageos4microg/docker-lineage-cicd/blob/lineage-21/src/signature_spoofing_patches/packages_modules_Permission-Android14.patch
- https://github.com/lineageos4microg/docker-lineage-cicd/blob/lineage-21/src/signature_spoofing_patches/android_frameworks_base-Android14.patch
They prefer to have a single diff for all paths within one dir but as I need to support multiple OS I split the all-in-one diffs to per-file diffs. This is a bit of work (cut + paste) but it makes it easier if something needs to be adapted for other OS later.
For A14 I would copy everything from here:
- https://github.com/sfX-android/android_vendor_extendrom/tree/main/config/sigspoof/lineage/A13
to anA14
dir and then adjust the diffs one by one with those from the lineageos4microg repo.
note: I plan to do the above anyways but I cannot tell when
from android_vendor_extendrom.
applying the "official" sig patches - in this case for A14:
* https://github.com/lineageos4microg/docker-lineage-cicd/blob/lineage-21/src/signature_spoofing_patches/packages_modules_Permission-Android14.patch * https://github.com/lineageos4microg/docker-lineage-cicd/blob/lineage-21/src/signature_spoofing_patches/android_frameworks_base-Android14.patch
Just to let you that for future Android versions, los4microg will not be implementing signature spoofing patches, because LineageOS now support the level of signature spoofing that we need for microG to work
from android_vendor_extendrom.
Related Issues (20)
- F-DroidPrivelegedExtension adds F-Droid into Makefile HOT 1
- fdroid: add new threema repo
- Clarification needed for mkbootimg.mk instructions HOT 3
- Extendrom tries to run even if disabled HOT 1
- Problems building LOS20 that I couldn't fix in code HOT 21
- Changes needed in 'Phonesky' for LOS 20.0 HOT 5
- LOS 19.1 extendrom builds fail due to `--enforce-uses-libraries` HOT 12
- Allow combinations of additional F-Droid repos HOT 3
- Lawnchair-latest is broken HOT 5
- Change the split repos implementation... HOT 1
- kernelsu support
- magisk: cannot find patch file HOT 5
- Magisk: build fails when including Magisk in vendorsetup.sh HOT 23
- magisk: patch file does not apply correctly on A9 HOT 22
- [FR] add OS/Apps key signing setup
- MicrogGmsCore doesnt work. HOT 2
- [FR] pass safetynet
- [FR] Lineage 21 / Android 14 support HOT 3
- [FR] Patch call-record-allowed-flags for all countries to true HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from android_vendor_extendrom.