Add AOSP software keybox to pass MEETS_DEVICE_INTEGRITY by default

* Add AOSP software keybox to pass MEETS_DEVICE_INTEGRITY by default

* Tweak README further

spoof_build_vars can be used to help pass DEVICE integrity with the default AOSP sw keybox, or help to pass STRONG integrity with an unrevoked hw keybox
This commit is contained in:
Chris Renshaw
2024-07-23 23:09:06 -03:00
committed by GitHub
parent b124f81f9b
commit 0a52c2b4a0
3 changed files with 126 additions and 7 deletions

View File

@@ -93,9 +93,14 @@ CONFIG_DIR=/data/adb/tricky_store
if [ ! -d "$CONFIG_DIR" ]; then
ui_print "- Creating configuration directory"
mkdir -p "$CONFIG_DIR"
if [ ! -f "$CONFIG_DIR/target.txt" ]; then
ui_print "- Adding default scope"
extract "$ZIPFILE" 'target.txt' "$TMPDIR"
mv "$TMPDIR/target.txt" "$CONFIG_DIR/target.txt"
fi
fi
if [ ! -f "$CONFIG_DIR/keybox.xml" ]; then
ui_print "- Adding default software keybox"
extract "$ZIPFILE" 'keybox.xml' "$TMPDIR"
mv "$TMPDIR/keybox.xml" "$CONFIG_DIR/keybox.xml"
fi
if [ ! -f "$CONFIG_DIR/target.txt" ]; then
ui_print "- Adding default target scope"
extract "$ZIPFILE" 'target.txt' "$TMPDIR"
mv "$TMPDIR/target.txt" "$CONFIG_DIR/target.txt"
fi