Enginex0
6b84c76f10
The release build is meant to nuke any debug NDJSON directory on install, but the sweep never ran. customize.sh keyed the debug vs release decision on unzip's exit code: if unzip -qqjo "$ZIPFILE" "diag.sh" ...; then ... Info-ZIP returns 11 when the entry is absent, but the busybox/toybox unzip in the Magisk/KSU install environment exits 0, so on a release ZIP (which correctly omits diag.sh) the branch was wrongly taken and the rm -rf in else never fired. Detect presence by the extracted file instead: run unzip, then test [ -f "$MODPATH/diag.sh" ]. Robust to any unzip implementation.
126 lines
3.9 KiB
Bash
126 lines
3.9 KiB
Bash
# shellcheck disable=SC2034
|
|
SKIPUNZIP=1
|
|
MIN_SDK=29
|
|
CONFIG_DIR=/data/adb/tricky_store
|
|
|
|
# --- Installation Context Check ---
|
|
if [ "$BOOTMODE" != true ]; then
|
|
ui_print "! Please install in Magisk Manager or KernelSU Manager"
|
|
abort "! Install from recovery is NOT supported"
|
|
fi
|
|
|
|
if [ "$KSU" = true ] && [ "$KSU_VER_CODE" -lt 10670 ]; then
|
|
abort "! Please update your KernelSU and KernelSU Manager"
|
|
fi
|
|
|
|
# --- Version Info ---
|
|
VERSION=$(grep_prop version "${TMPDIR}/module.prop")
|
|
ui_print "- Installing TEESimulator-RS $VERSION"
|
|
ui_print ""
|
|
|
|
# --- Architecture Handling ---
|
|
case "$ARCH" in
|
|
arm64) ABI_DIR="arm64-v8a" ;;
|
|
arm) ABI_DIR="armeabi-v7a" ;;
|
|
x64) ABI_DIR="x86_64" ;;
|
|
x86) ABI_DIR="x86" ;;
|
|
*) abort "! Unsupported architecture: $ARCH" ;;
|
|
esac
|
|
|
|
ui_print "- Device platform: $ARCH"
|
|
ui_print "- Using ABI dir: $ABI_DIR"
|
|
|
|
# --- SDK Check ---
|
|
if [ "$API" -lt "$MIN_SDK" ]; then
|
|
abort "! Unsupported SDK: $API. Minimum required is $MIN_SDK"
|
|
else
|
|
ui_print "- Device SDK: $API"
|
|
fi
|
|
ui_print ""
|
|
|
|
# --- Helper to install files ---
|
|
install_file() {
|
|
if ! unzip -qqjo "$ZIPFILE" "$1" -d "$2"; then
|
|
abort "! Failed to extract $1"
|
|
fi
|
|
ui_print "- Extracted $1"
|
|
}
|
|
|
|
# --- Installation ---
|
|
ui_print "- Extracting module files"
|
|
for file in customize.sh module.prop service.sh sepolicy.rule daemon action.sh action_i18n.sh uninstall.sh; do
|
|
install_file "$file" "$MODPATH"
|
|
done
|
|
|
|
# Handle service.apk or classes.dex
|
|
if unzip -l "$ZIPFILE" | grep -q "service.apk"; then
|
|
install_file "service.apk" "$MODPATH"
|
|
elif unzip -l "$ZIPFILE" | grep -q "classes.dex"; then
|
|
install_file "classes.dex" "$MODPATH"
|
|
else
|
|
abort "! Neither service.apk nor classes.dex found"
|
|
fi
|
|
|
|
chmod 755 "$MODPATH/daemon"
|
|
ui_print ""
|
|
|
|
ui_print "- Extracting $ARCH libraries"
|
|
install_file "lib/$ABI_DIR/libTEESimulator.so" "$MODPATH"
|
|
install_file "lib/$ABI_DIR/libinject.so" "$MODPATH"
|
|
install_file "lib/$ABI_DIR/libsupervisor.so" "$MODPATH"
|
|
install_file "lib/$ABI_DIR/libcertgen.so" "$MODPATH"
|
|
ui_print ""
|
|
|
|
mv "$MODPATH/libinject.so" "$MODPATH/inject"
|
|
mv "$MODPATH/libsupervisor.so" "$MODPATH/supervisor"
|
|
chmod 755 "$MODPATH/inject"
|
|
chmod 755 "$MODPATH/supervisor"
|
|
|
|
# Debug builds carry diag.sh (the diagnostic plane); release builds do not. Extract it when
|
|
# present; otherwise sweep any external-storage diagnostics a prior debug install left behind,
|
|
# since the release keystore domain has no grant to remove them itself.
|
|
# Detect presence by the extracted FILE, not unzip's exit code: the busybox/toybox unzip in
|
|
# the install environment exits 0 even when the entry is absent, so the sweep never ran.
|
|
unzip -qqjo "$ZIPFILE" "diag.sh" -d "$MODPATH" 2>/dev/null
|
|
if [ -f "$MODPATH/diag.sh" ]; then
|
|
chmod 644 "$MODPATH/diag.sh"
|
|
ui_print "- Debug diagnostic plane enabled"
|
|
else
|
|
rm -rf /data/media/0/TEESimulator /data/local/tmp/teesim
|
|
ui_print "- Release build: swept stale diagnostics"
|
|
fi
|
|
|
|
# --- Configuration Files ---
|
|
if [ ! -d "$CONFIG_DIR" ]; then
|
|
ui_print "- Creating configuration directory"
|
|
mkdir -p "$CONFIG_DIR"
|
|
fi
|
|
|
|
if [ ! -f "$CONFIG_DIR/keybox.xml" ]; then
|
|
ui_print "- Adding AOSP software keybox"
|
|
install_file "keybox.xml" "$CONFIG_DIR"
|
|
fi
|
|
|
|
if [ ! -f "$CONFIG_DIR/target.txt" ]; then
|
|
ui_print "- Adding default target scope"
|
|
install_file "target.txt" "$CONFIG_DIR"
|
|
fi
|
|
|
|
if [ ! -f "$CONFIG_DIR/security_patch.txt" ]; then
|
|
ui_print "- Adding default security patch config (mirror device props)"
|
|
printf '%s\n' \
|
|
'# TEESimulator default: mirror live device props.' \
|
|
'# system=prop reads ro.build.version.security_patch at cert-gen time;' \
|
|
'# boot and vendor are auto-forced to prop too (ConfigurationManager.kt:253-256).' \
|
|
'# Override with explicit YYYY-MM-DD dates if you want active spoofing.' \
|
|
'system=prop' > "$CONFIG_DIR/security_patch.txt"
|
|
chmod 644 "$CONFIG_DIR/security_patch.txt"
|
|
fi
|
|
|
|
rm -f "$CONFIG_DIR/tee_status.txt"
|
|
|
|
if [ ! -f "$CONFIG_DIR/hbk" ]; then
|
|
ui_print "- Generating device-unique hardware-bound key seed"
|
|
head -c 32 /dev/random > "$CONFIG_DIR/hbk"
|
|
fi
|