sunfish-admin
deaaf42caa
Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding, bundled apps, and AXP-class product surface docs/scripts.
1.7 KiB
1.7 KiB
008 call-rec + FLAG_SECURE patches
Idempotent apply for LOS 23.2 on rom-dev01.
python3 vendor/sunfish-a16/patches/008-call-rec-flag-secure/apply_008_call_rec_flag_secure.py
Attribution
- Call recording: EXTENDROM
er.shF_CALLREC / AXP GOLDEN (extendrom_call_recording). steadfasterX EXTENDROM. - FLAG_SECURE: AOSP
Settings.Secure.DISABLE_SECURE_WINDOWS+ DO preferenceallow_flag_secure_override. Stock WMS only applies the setting whenro.debuggable=1; we remove that gate viaapply_wms_disable_secure_debuggable_gate.pyso ship images keepro.debuggable=0while the toggle still works.
Touched paths
| Area | Path under /srv/rom/src/lineage/ |
|---|---|
| Secure call-rec | frameworks/base/core/java/android/provider/Settings.java (ER_ALLOW_ANY_CALL_REC) |
| Dialer gate | packages/apps/Dialer/java/com/android/incallui/call/CallRecorder.java |
| Dialer config | already call_recording_enabled=true / audio 4 (verified) |
| Settings controllers | …/ER_CallRec*.java, …/FlagSecureOverride*.java |
| Settings DO XML + strings | res/xml/development_settings.xml, res/values/strings.xml |
| Dashboard | DevelopmentSettingsDashboardFragment.java |
| Capture path | WMS updateDisableSecureWindows() — no ro.debuggable gate |
| WMS apply | apply_wms_disable_secure_debuggable_gate.py |
python3 vendor/sunfish-a16/patches/008-call-rec-flag-secure/apply_wms_disable_secure_debuggable_gate.py
Backups: /srv/rom/artifacts/008-call-rec-flag-secure/bak-snapshots/
Markers: SUNFISH_A16_008_CALL_REC_FLAG_SECURE,
SUNFISH_A16_008_WMS_DISABLE_SECURE_NO_DEBUGGABLE_GATE
See docs/008-call-rec-flag-secure-runbook.md.