sunfish-admin
deaaf42caa
Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding, bundled apps, and AXP-class product surface docs/scripts.
1.3 KiB
1.3 KiB
Contract: FLAG_SECURE / screenshot surface
Feature: 008-call-rec-flag-secure
Consumers: LAB validation (quickstart.md)
Secure setting
| Item | Value |
|---|---|
| Key | Settings.Secure.disable_secure_windows (AOSP DISABLE_SECURE_WINDOWS) |
| Values | null/0 = stock FLAG_SECURE; 1 = global capture override |
| Readback | adb shell settings get secure disable_secure_windows |
| UI preference key | allow_flag_secure_override (writes the Secure key above) |
| Scope | Global (all apps); per-app lists not planned |
| Note | Stock AOSP gated WMS on ro.debuggable; project removes that gate (SUNFISH_A16_008_WMS_DISABLE_SECURE_NO_DEBUGGABLE_GATE) so ro.debuggable stays 0 |
Capture behaviour
| Condition | Expected |
|---|---|
Setting 0, secure window |
System screenshot / screen record blocked as stock |
Setting 1, same window |
System screenshot / screen record succeeds |
Setting 1, DRM/HW buffer edge cases |
May still fail — document if observed |
UI
- Developer Options switch; short summary that this weakens app privacy.
- Reset to
0when Developer Options master is disabled.
Evidence
- Setting readback 0/1.
- Before/after screenshots (or failure toast) stored under
/srv/rom/artifacts/008-call-rec-flag-secure/flag-secure/.