1.去掉系统提取odex
device/mediatek/common/BoardConfig.mk
+WITH_DEXPREOPT := false
2.selinux改为permissive
- ifneq (,$(filter userdebug eng,$(TARGET_BUILD_VARIANT)))
+ ifneq (,$(filter user userdebug eng,$(TARGET_BUILD_VARIANT)))
init_options += -DALLOW_LOCAL_PROP_OVERRIDE=1 -DALLOW_PERMISSIVE_SELINUX=1
init_options += -DINIT_ENG_BUILD
else
static bool selinux_is_enforcing(void)
{
+ return false;
if (ALLOW_PERMISSIVE_SELINUX) {
return selinux_status_from_cmdline() == SELINUX_ENFORCING;
}
vendor/mediatek/proprietary/bootable/bootloader/lk/platform/mtxxxx/rules.mk
MMC_SLOT := 1
# choose one of following value -> 1: disabled/ 2: permissive /3: enforcing
- SELINUX_STATUS := 3
+ SELINUX_STATUS := 2
# set kernel decompress size limit (200MB)
KERNEL_DECOMPRESS_SIZE := 0x0c800000
vendor/mediatek/proprietary/system/core/multi_init/Android.mk
- ifneq (,$(filter userdebug eng,$(TARGET_BUILD_VARIANT)))
+ ifneq (,$(filter user userdebug eng,$(TARGET_BUILD_VARIANT)))
init_options += -DALLOW_LOCAL_PROP_OVERRIDE=1 -DALLOW_PERMISSIVE_SELINUX=1
init_options += -DINIT_ENG_BUILD
else
3.adb root
else # !enable_target_debugging
# Target is less debuggable and adbd is off by default
- ADDITIONAL_DEFAULT_PROPERTIES += ro.debuggable=0
+ ADDITIONAL_DEFAULT_PROPERTIES += ro.debuggable=1
endif # !enable_target_debugging
@mkdir -p $(dir $@)
$(hide) m4 $(PRIVATE_ADDITIONAL_M4DEFS) \
-D mls_num_sens=$(PRIVATE_MLS_SENS) -D mls_num_cats=$(PRIVATE_MLS_CATS) \
- -D target_build_variant=$(TARGET_BUILD_VARIANT) \
+ -D target_build_variant=eng \
-s $^ > $@
$(hide) sed '/dontaudit/d' $@ > $@.dontaudit
@@ -103,7 +103,7 @@ $(LOCAL_BUILT_MODULE): $(sepolicy_policy.conf)
$(HOST_OUT_EXECUTABLES)/checkpoli
$(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $@.tmp $<
$(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $(dir
$<)/$(notdir $@).dontaudit $<.dontaudit
$(hide) $(HOST_OUT_EXECUTABLES)/sepolicy-analyze $@.tmp permissive >
$@.permissivedomains
- $(hide) if [ "$(TARGET_BUILD_VARIANT)" = "user" -a -s $@.permissivedomains ]; then
\
+ $(hide) if [ "eng" = "user" -a -s $@.permissivedomains ]; then \
echo "==========" 1>&2; \
echo "ERROR: permissive domains not allowed in user builds" 1>&2; \
echo "List of invalid domains:" 1>&2; \