Piteball/android_kernel_google_msm
1
0
Fork 0
mirror of https://github.com/followmsi/android_kernel_google_msm.git synced 2024-11-06 23:17:41 +00:00
Code Issues Projects Releases Wiki Activity

proc: Remove verifiedbootstate flag from /proc/cmdline

Browse source 
Userspace parses this and sets the ro.boot.verifiedbootstate prop
according to the value that this flag has. When ro.boot.verifiedbootstate
is not 'green', SafetyNet is tripped and fails the CTS test.

Hide verifiedbootstate from /proc/cmdline in order to fix the failed
SafetyNet CTS check.

Change-Id: I530a1d1abb8f24c5a84dc423367715c353e005d3
Signed-off-by: Sultanxda <sultanxda@gmail.com>
This commit is contained in:
Sultanxda 2016-10-21 01:37:16 -07:00 committed by followmsi
parent b84ec752b0
commit c844bdf21a
1 changed files with 27 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
fs/proc/cmdline.c
View file

@ -2,10 +2,13 @@
#include <linux/init.h>
#include <linux/proc_fs.h>
#include <linux/seq_file.h>
#include <asm/setup.h>
static char new_command_line[COMMAND_LINE_SIZE];
static int cmdline_proc_show(struct seq_file *m, void *v)
{
seq_printf(m, "%s\n", saved_command_line);
seq_printf(m, "%s\n", new_command_line);
return 0;
}
@ -23,6 +26,29 @@ static const struct file_operations cmdline_proc_fops = {
static int __init proc_cmdline_init(void)
{
char *offset_addr, *cmd = new_command_line;
strcpy(cmd, saved_command_line);
/*
* Remove 'androidboot.verifiedbootstate' flag from command line seen
* by userspace in order to pass SafetyNet CTS check.
*/
offset_addr = strstr(cmd, "androidboot.verifiedbootstate=");
if (offset_addr) {
size_t i, len, offset;
len = strlen(cmd);
offset = offset_addr - cmd;
for (i = 1; i < (len - offset); i++) {
if (cmd[offset + i] == ' ')
break;
}
memmove(offset_addr, &cmd[offset + i + 1], len - i - offset);
}
proc_create("cmdline", 0, NULL, &cmdline_proc_fops);
return 0;
}