安卓6.0 root -安卓 7.1 手机 root 手动 root权限 添加方法

admin

安卓6.0 -7.1 手动root权限 添加方法

launch_daemonsu.sh

1. #!/system/bin/sh
   
2. 
   
3. MODE=$1
   
4. 
   
5. log_print() {
   
6.   echo "($MODE) $1"
   
7.   echo "($MODE) $1" >> /dev/.launch_daemonsu.log
   
8.   log -p i -t launch_daemonsu "($MODE) $1"
   
9. }
   
10. 
    
11. log_print "start"
    
12. 
    
13. if [ `mount | grep " /data " >/dev/null 2>&1; echo $?` -ne 0 ]; then
    
14.   # /data not mounted yet, we will be called again later
    
15.   log_print "abort: /data not mounted #1"
    
16.   exit
    
17. fi
    
18. 
    
19. if [ `mount | grep " /data " | grep "tmpfs" >/dev/null 2>&1; echo $?` -eq 0 ]; then
    
20.   # /data not mounted yet, we will be called again later
    
21.   log_print "abort: /data not mounted #2"
    
22.   exit
    
23. fi
    
24. 
    
25. if [ `cat /proc/mounts | grep /su >/dev/null 2>&1; echo $?` -eq 0 ]; then
    
26.   if [ -d "/su/bin" ]; then
    
27.     if [ `ps | grep -v "launch_daemonsu.sh" | grep "daemonsu" >/dev/null 2>&1; echo $?` -eq 0 ]; then
    
28.       # nothing to do here
    
29.       log_print "abort: daemonsu already running"
    
30.       exit
    
31.     fi
    
32.   fi
    
33. fi
    
34. 
    
35. setprop sukernel.daemonsu.launch $MODE
    
36. 
    
37. loopsetup() {
    
38.   LOOPDEVICE=
    
39.   for DEV in $(ls /dev/block/loop*); do
    
40.     if [ `losetup $DEV $1 >/dev/null 2>&1; echo $?` -eq 0 ]; then
    
41.       LOOPDEVICE=$DEV
    
42.       break
    
43.     fi
    
44.   done
    
45. 
    
46.   log_print "loopsetup($1): $LOOPDEVICE"
    
47. }
    
48. 
    
49. resize() {
    
50.   if [ `ls  -l /data/su.img | grep " 33554432 " >/dev/null 2>&1; echo $?` -eq 0 ]; then
    
51.     log_print "resizing /data/su.img from 32M to 96M"
    
52.     e2fsck -p -f /data/su.img
    
53.     resize2fs /data/su.img 96M
    
54.   fi
    
55. }
    
56. 
    
57. if [ ! -d "/su/bin" ]; then
    
58.   log_print "/su not mounted yet"
    
59. 
    
60.   # not mounted yet, do our thing
    
61.   REBOOT=false
    
62. 
    
63.   # copy boot image backups
    
64.   log_print "copying boot image backups from /cache to /data"
    
65.   cp -f /cache/stock_boot_* /data/. 2>/dev/null
    
66. 
    
67.   if [ -f "/data/su.img" ]; then
    
68.     log_print "/data/su.img found"
    
69.     e2fsck -p -f /data/su.img
    
70. 
    
71.     # make sure the image is the right size
    
72.     resize
    
73.   fi
    
74. 
    
75.   # newer image in /cache ?
    
76.   # only used if recovery couldn't mount /data
    
77.   if [ -f "/cache/su.img" ]; then
    
78.     log_print "/cache/su.img found"
    
79.     e2fsck -p -f /cache/su.img
    
80.     OVERWRITE=true
    
81. 
    
82.     if [ -f "/data/su.img" ]; then
    
83.       # attempt merge, this will fail pre-M
    
84.       # will probably also fail with /system installed busybox,
    
85.       # but then again, is there anything busybox doesn't break?
    
86.       # falls back to overwrite
    
87. 
    
88.       log_print "/data/su.img found"
    
89.       log_print "attempting merge"
    
90. 
    
91.       mkdir /cache/data_img
    
92.       mkdir /cache/cache_img
    
93. 
    
94.       # setup loop devices
    
95. 
    
96.       loopsetup /data/su.img
    
97.       LOOPDATA=$LOOPDEVICE
    
98.       log_print "$LOOPDATA /data/su.img"
    
99. 
    
100.       loopsetup /cache/su.img
     
101.       LOOPCACHE=$LOOPDEVICE
     
102.       log_print "$LOOPCACHE /cache/su.img"
     
103. 
     
104.       if [ ! -z "$LOOPDATA" ]; then
     
105.         if [ ! -z "$LOOPCACHE" ]; then
     
106.           # if loop devices have been setup, mount images
     
107.           OK=true
     
108. 
     
109.           if [ `mount -t ext4 -o rw,noatime $LOOPDATA /cache/data_img >/dev/null 2>&1; echo $?` -ne 0 ]; then
     
110.             OK=false
     
111.           fi
     
112. 
     
113.           if [ `mount -t ext4 -o rw,noatime $LOOPCACHE /cache/cache_img >/dev/null 2>&1; echo $?` -ne 0 ]; then
     
114.             OK=false
     
115.           fi
     
116. 
     
117.           if ($OK); then
     
118.             # if mounts have succeeded, merge the images
     
119.             if [ `cp -af /cache/cache_img/. /cache/data_img >/dev/null 2>&1; echo $?` -eq 0 ]; then
     
120.               log_print "merge complete"
     
121.               OVERWRITE=false
     
122.             fi
     
123.           fi
     
124. 
     
125.           umount /cache/data_img
     
126.           umount /cache/cache_img
     
127.         fi
     
128.       fi
     
129. 
     
130.       losetup -d $LOOPDATA
     
131.       losetup -d $LOOPCACHE
     
132. 
     
133.       rmdir /cache/data_img
     
134.       rmdir /cache/cache_img
     
135.     fi
     
136. 
     
137.     if ($OVERWRITE); then
     
138.       # no /data/su.img or merge failed, replace
     
139.       log_print "replacing /data/su.img with /cache/su.img"
     
140.       mv /cache/su.img /data/su.img
     
141. 
     
142.       # make sure the new image is the right size
     
143.       resize
     
144.     fi
     
145. 
     
146.     rm /cache/su.img
     
147.   fi
     
148. 
     
149.   # do we have an APK to install ?
     
150.   if [ -f "/cache/SuperSU.apk" ]; then
     
151.     cp /cache/SuperSU.apk /data/SuperSU.apk
     
152.     rm /cache/SuperSU.apk
     
153.   fi
     
154.   if [ -f "/data/SuperSU.apk" ]; then
     
155.     log_print "installing SuperSU APK in /data"
     
156. 
     
157.     APKPATH=eu.chainfire.supersu-1
     
158.     for i in `ls /data/app | grep eu.chainfire.supersu- | grep -v eu.chainfire.supersu.pro`; do
     
159.       if [ `cat /data/system/packages.xml | grep $i >/dev/null 2>&1; echo $?` -eq 0 ]; then
     
160.         APKPATH=$i
     
161.         break;
     
162.       fi
     
163.     done
     
164.     rm -rf /data/app/eu.chainfire.supersu-*
     
165. 
     
166.     log_print "target path: /data/app/$APKPATH"
     
167. 
     
168.     mkdir /data/app/$APKPATH
     
169.     chown 1000.1000 /data/app/$APKPATH
     
170.     chmod 0755 /data/app/$APKPATH
     
171.     chcon u:object_r:apk_data_file:s0 /data/app/$APKPATH
     
172. 
     
173.     cp /data/SuperSU.apk /data/app/$APKPATH/base.apk
     
174.     chown 1000.1000 /data/app/$APKPATH/base.apk
     
175.     chmod 0644 /data/app/$APKPATH/base.apk
     
176.     chcon u:object_r:apk_data_file:s0 /data/app/$APKPATH/base.apk
     
177. 
     
178.     rm /data/SuperSU.apk
     
179. 
     
180.     sync
     
181. 
     
182.     # just in case
     
183.     REBOOT=true
     
184.   fi
     
185. 
     
186.   # sometimes we need to reboot, make it so
     
187.   if ($REBOOT); then
     
188.     log_print "rebooting"
     
189.     if [ "$MODE" = "post-fs-data" ]; then
     
190.       # avoid device freeze (reason unknown)
     
191.       sh -c "sleep 5; reboot" &
     
192.     else
     
193.       reboot
     
194.     fi
     
195.     exit
     
196.   fi
     
197. 
     
198.   # losetup is unreliable pre-M
     
199.   if [ `cat /proc/mounts | grep /su >/dev/null 2>&1; echo $?` -ne 0 ]; then
     
200.     loopsetup /data/su.img
     
201.     if [ ! -z "$LOOPDEVICE" ]; then
     
202.       mount -t ext4 -o rw,noatime $LOOPDEVICE /su
     
203.     fi
     
204.   fi
     
205. 
     
206.   # trigger mount, should also work pre-M, but on post-fs-data trigger may
     
207.   # be processed only after this script runs, causing a fallback to service launch
     
208.   if [ `cat /proc/mounts | grep /su >/dev/null 2>&1; echo $?` -ne 0 ]; then
     
209.     chcon u:object_r:system_data_file:s0 /data/su.img
     
210.     chmod 0600 /data/su.img
     
211.     setprop sukernel.mount 1
     
212.     sleep 1
     
213.   fi
     
214. 
     
215.   # exit if all mount attempts have failed, script is likely to be called again
     
216.   if [ `cat /proc/mounts | grep /su >/dev/null 2>&1; echo $?` -ne 0 ]; then
     
217.     log_print "abort: mount failed"
     
218.     exit
     
219.   fi
     
220. 
     
221.   # if other su binaries exist, route them to ours
     
222.   mount -o bind /su/bin/su /sbin/su 2>/dev/null
     
223.   mount -o bind /su/bin/su /system/bin/su 2>/dev/null
     
224.   mount -o bind /su/bin/su /system/xbin/su 2>/dev/null
     
225. 
     
226.   # poor man's overlay on /system/xbin
     
227.   if [ -d "/su/xbin_bind" ]; then
     
228.     cp -f -a /system/xbin/. /su/xbin_bind
     
229.     rm -rf /su/xbin_bind/su
     
230.     ln -s /su/bin/su /su/xbin_bind/su
     
231.     mount -o bind /su/xbin_bind /system/xbin
     
232.   fi
     
233. fi
     
234. 
     
235. # start daemon
     
236. if [ "$MODE" != "post-fs-data" ]; then
     
237.   # if launched by service, replace this process (exec)
     
238.   log_print "exec daemonsu"
     
239.   exec /su/bin/daemonsu --auto-daemon
     
240. else
     
241.   # if launched by exec, fork (non-exec) and wait for su.d to complete executing
     
242.   log_print "fork daemonsu"
     
243.   /su/bin/daemonsu --auto-daemon
     
244. 
     
245.   # wait for a while for su.d to complete
     
246.   if [ -d "/su/su.d" ]; then
     
247.     log_print "waiting for su.d"
     
248.     for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16; do
     
249.       # su.d finished ?
     
250.       if [ -f "/dev/.su.d.complete" ]; then
     
251.         break
     
252.       fi
     
253. 
     
254.       for j in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16; do
     
255.         # su.d finished ?
     
256.         if [ -f "/dev/.su.d.complete" ]; then
     
257.           break
     
258.         fi
     
259. 
     
260.         # sleep 240ms if usleep supported, warm up the CPU if not
     
261.         # 16*16*240ms=60s maximum if usleep supported, else much shorter
     
262.         usleep 240000
     
263.       done
     
264.     done
     
265.   fi
     
266.   log_print "end"
     
267. fi
     

复制代码

update-binary

1. #!/sbin/sh
   
2. #
   
3. # SuperSU installer ZIP
   
4. # Copyright (c) 2012-2016 - Chainfire
   
5. #
   
6. # ----- GENERIC INFO ------
   
7. #
   
8. # The following su binary versions are included in the full package. Each
   
9. # should be installed only if the system has the same or newer API level
   
10. # as listed. The script may fall back to a different binary on older API
    
11. # levels. supolicy are all ndk/pie/19+ for 32 bit, ndk/pie/20+ for 64 bit.
    
12. #
    
13. # binary        ARCH/path   build type      API
    
14. #
    
15. # arm-v5te      arm         ndk non-pie     7+
    
16. # x86           x86         ndk non-pie     7+
    
17. #
    
18. # x86           x86         ndk pie         17+   (su.pie, naming exception)
    
19. # arm-v7a       armv7       ndk pie         17+
    
20. # mips          mips        ndk pie         17+
    
21. #
    
22. # arm64-v8a     arm64       ndk pie         20+
    
23. # mips64        mips64      ndk pie         20+
    
24. # x86_64        x64         ndk pie         20+
    
25. #
    
26. # Non-static binaries are supported to be PIE (Position Independent
    
27. # Executable) from API level 16, and required from API level 20 (which will
    
28. # refuse to execute non-static non-PIE).
    
29. #
    
30. # The script performs several actions in various ways, sometimes
    
31. # multiple times, due to different recoveries and firmwares behaving
    
32. # differently, and it thus being required for the correct result.
    
33. #
    
34. # Overridable variables (shell):
    
35. #   BIN - Location of architecture specific files (native folder)
    
36. #   COM - Location of common files (APK folder)
    
37. #   LESSLOGGING - Reduce ui_print logging (true/false)
    
38. #   NOOVERRIDE - Do not read variables from /system/.supersu or
    
39. #                /data/.supersu
    
40. #
    
41. # Overridable variables (shell, /system/.supersu, /cache/.supersu,
    
42. # /data/.supersu):
    
43. #   SYSTEMLESS - Do a system-less install? (true/false, 6.0+ only)
    
44. #   PATCHBOOTIMAGE - Automatically patch boot image? (true/false,
    
45. #                    SYSTEMLESS only)
    
46. #   BOOTIMAGE - Boot image location (PATCHBOOTIMAGE only)
    
47. #   STOCKBOOTIMAGE - Stock boot image location (PATCHBOOTIMAGE only)
    
48. #   BINDSYSTEMXBIN - Poor man's overlay on /system/xbin (true/false,
    
49. #                    SYSTEMLESS only)
    
50. #   PERMISSIVE - Set sepolicy to fake-permissive (true/false, PATCHBOOTIMAGE
    
51. #                only)
    
52. #   KEEPVERITY - Do not remove dm-verity (true/false, PATCHBOOTIMAGE only)
    
53. #   KEEPFORCEENCRYPT - Do not replace forceencrypt with encryptable (true/
    
54. #                      false, PATCHBOOTIMAGE only)
    
55. # Shell overrides all, /data/.supersu overrides /cache/.supersu overrides
    
56. # /system/.supersu
    
57. #
    
58. # Note that if SELinux is set to enforcing, the daemonsu binary expects
    
59. # to be run at startup (usually from install-recovery.sh, 99SuperSUDaemon,
    
60. # or app_process) from u:r:init:s0 or u:r:kernel:s0 contexts. Depending
    
61. # on the current policies, it can also deal with u:r:init_shell:s0 and
    
62. # u:r:toolbox:s0 contexts. Any other context will lead to issues eventually.
    
63. #
    
64. # ----- "SYSTEM" INSTALL -----
    
65. #
    
66. # "System" install puts all the files needed in /system and does not need
    
67. # any boot image modifications. Default install method pre-Android-6.0
    
68. # (excluding Samsung-5.1).
    
69. #
    
70. # Even on Android-6.0+, the script attempts to detect if the current
    
71. # firmware is compatible with a system-only installation (see the
    
72. # "detect_systemless_required" function), and will prefer that
    
73. # (unless the SYSTEMLESS variable is set) if so. This will catch the
    
74. # case of several custom ROMs that users like to use custom boot images
    
75. # with - SuperSU will not need to patch these. It can also catch some
    
76. # locked bootloader cases that do allow security policy updates.
    
77. #
    
78. # To install SuperSU properly, aside from cleaning old versions and
    
79. # other superuser-type apps from the system, the following files need to
    
80. # be installed:
    
81. #
    
82. # API   source                        target                              chmod   chcon                       required
    
83. #
    
84. # 7-19  common/Superuser.apk          /system/app/Superuser.apk           0644    u:object_r:system_file:s0   gui
    
85. # 20+   common/Superuser.apk          /system/app/SuperSU/SuperSU.apk     0644    u:object_r:system_file:s0   gui
    
86. #
    
87. # 17+   common/install-recovery.sh    /system/etc/install-recovery.sh     0755    *1                          required
    
88. # 17+                                 /system/bin/install-recovery.sh     (symlink to /system/etc/...)        required
    
89. # *1: same as /system/bin/toolbox: u:object_r:system_file:s0 if API < 20, u:object_r:toolbox_exec:s0 if API >= 20
    
90. #
    
91. # 7+    ARCH/su *2                    /system/xbin/su                     *3      u:object_r:system_file:s0   required
    
92. # 7+                                  /system/bin/.ext/.su                *3      u:object_r:system_file:s0   gui
    
93. # 17+                                 /system/xbin/daemonsu               0755    u:object_r:system_file:s0   required
    
94. # 17-21                               /system/xbin/sugote                 0755    u:object_r:zygote_exec:s0   required
    
95. # *2: su.pie for 17+ x86(_32) only
    
96. # *3: 06755 if API < 18, 0755 if API >= 18
    
97. #
    
98. # 19+   ARCH/supolicy                 /system/xbin/supolicy               0755    u:object_r:system_file:s0   required
    
99. # 19+   ARCH/libsupol.so              /system/lib(64)/libsupol.so         0644    u:object_r:system_file:s0   required
    
100. #
     
101. # 17-21 /system/bin/sh or mksh *4     /system/xbin/sugote-mksh            0755    u:object_r:system_file:s0   required
     
102. # *4: which one (or both) are available depends on API
     
103. #
     
104. # 21+   /system/bin/app_process32 *5  /system/bin/app_process32_original  0755    u:object_r:zygote_exec:s0   required
     
105. # 21+   /system/bin/app_process64 *5  /system/bin/app_process64_original  0755    u:object_r:zygote_exec:s0   required
     
106. # 21+   /system/bin/app_processXX *5  /system/bin/app_process_init        0755    u:object_r:system_file:s0   required
     
107. # 21+                                 /system/bin/app_process             (symlink to /system/xbin/daemonsu)  required
     
108. # 21+                             *5  /system/bin/app_process32           (symlink to /system/xbin/daemonsu)  required
     
109. # 21+                             *5  /system/bin/app_process64           (symlink to /system/xbin/daemonsu)  required
     
110. # *5: Only do this for the relevant bits. On a 64 bits system, leave the 32 bits files alone, or dynamic linker errors
     
111. #     will prevent the system from fully working in subtle ways. The bits of the su binary must also match!
     
112. #
     
113. # 17+   common/99SuperSUDaemon *6     /system/etc/init.d/99SuperSUDaemon  0755    u:object_r:system_file:s0   optional
     
114. # *6: only place this file if /system/etc/init.d is present
     
115. #
     
116. # 17+   'echo 1 >' or 'touch' *7      /system/etc/.installed_su_daemon    0644    u:object_r:system_file:s0   optional
     
117. # *7: the file just needs to exist or some recoveries will nag you. Even with it there, it may still happen.
     
118. #
     
119. # It may seem some files are installed multiple times needlessly, but
     
120. # it only seems that way. Installing files differently or symlinking
     
121. # instead of copying (unless specified) will lead to issues eventually.
     
122. #
     
123. # After installation, run '/system/xbin/su --install', which may need to
     
124. # perform some additional installation steps. Ideally, at one point,
     
125. # a lot of this script will be moved there.
     
126. #
     
127. # The included chattr(.pie) binaries are used to remove ext2's immutable
     
128. # flag on some files. This flag is no longer set by SuperSU's OTA
     
129. # survival since API level 18, so there is no need for the 64 bit versions.
     
130. # Note that chattr does not need to be installed to the system, it's just
     
131. # used by this script, and not supported by the busybox used in older
     
132. # recoveries.
     
133. #
     
134. # ----- "SYSTEM-LESS" INSTALL -----
     
135. #
     
136. # "System-less" install requires a modified boot image (the script can patch
     
137. # many boot images on-the-fly), but does not touch /system at all. Instead
     
138. # it keeps all the needed files in an image (/data/su.img) which is mounted
     
139. # to /su. Default install method on all Android-6.0+ and Samsung-5.1+
     
140. # devices.
     
141. #
     
142. # Note that even on 6.0+, system compatibility is checked. See the "SYSTEM"
     
143. # install section above.
     
144. #
     
145. # An ext4 image is created as /data/su.img, or /cache/su.img if /data could
     
146. # not be mounted. Similarly, the APK is placed as either /data/SuperSU.apk
     
147. # or /cache/SuperSU.apk. This is so we are not dependent on /data decryption
     
148. # working in recovery, which in the past has proved an issue on brand-new
     
149. # Android versions and devices.
     
150. #
     
151. # /sbin/launch_daemonsu.sh, which is added a service to init.rc, will mount
     
152. # the image at /su, and launch daemonsu from /su/bin/daemonsu. But before it
     
153. # does that, it will try to merge /data/su.img and /cache/su.img (leading),
     
154. # if both are present. It will also try to install the SuperSU APK.
     
155. #
     
156. # Files are expected at the following places (/su being the mountpoint of
     
157. # the ext4 image):
     
158. #
     
159. # API   source                        target                              chmod   chcon                       required
     
160. #
     
161. # 22+   common/Superuser.apk          /[data|cache]/SuperSU.apk           0644    u:object_r:system_file:s0   gui
     
162. #
     
163. # 22+   ARCH/su *1                    /su/bin/su                          0755    u:object_r:system_file:s0   required
     
164. # 22+                                 /su/bin/daemonsu                    0755    u:object_r:system_file:s0   required
     
165. # *1: su.pie for 17+ x86(_32) only
     
166. #
     
167. # 22+   ARCH/supolicy                 /su/bin/supolicy_wrapped            0755    u:object_r:system_file:s0   required
     
168. # 22+   /su/bin/su (symlink) *2       /su/bin/supolicy                    0755    u:object_r:system_file:s0   required
     
169. # 22+   ARCH/libsupol.so              /su/lib/libsupol.so                 0644    u:object_r:system_file:s0   required
     
170. # *2: when called this way, su sets the correct LD_LIBRARY_PATH and calls supolicy_wrapped
     
171. #
     
172. # 22+   ARCH/sukernel                 /su/bin/sukernel                    0755    u:object_r:system_file:s0   required
     
173. #
     
174. # These files are automatically created on launch by daemonsu as needed:
     
175. # 22+   /system/bin/sh                /su/bin/sush                        0755    u:object_r:system_file:s0   required
     
176. # 22+   /system/bin/app_process[64]   /su/bin/app_process                 0755    u:object_r:system_file:s0   required
     
177. #
     
178. # These files are injected into the boot image ramdisk:
     
179. # 22+   common/launch_daemonsu.sh     /sbin/launch_daemonsu.sh            0700    u:object_r:rootfs:s0        required
     
180. #
     
181. # The automated boot image patcher included makes the following modifications
     
182. # to the ramdisk:
     
183. #
     
184. # - Uses the supolicy tool to patch the sepolicy file
     
185. # - Injects /sbin/launch_daemon.sh
     
186. # - Creates /su
     
187. # - Removes /verity_key
     
188. # - Patches /*fstab*
     
189. # --- Removes support_scfs and verify flags
     
190. # --- Changes forceencrypt/forcefdeorfbe into encryptable
     
191. # --- Set ro mounts to use noatime
     
192. # - Patches /init.rc
     
193. # --- Removes 'setprop selinux.reload_policy' occurences
     
194. # --- Adds a SuperSU:PATCH marker with the version of the sukernel tool
     
195. # --- Adds a SuperSU:STOCK marker listed the SHA1 of the original boot image
     
196. # - Adds /init.supersu.rc
     
197. # --- Adds a sukernel.mount property trigger that mounts /data/su.img to /su
     
198. # --- Adds the daemonsu service that launches /sbin/launch_daemon.sh
     
199. # --- Adds exec /sbin/launch_daemonsu.sh on post-fs-data
     
200. # - Patches /init.environ.rc
     
201. # --- Adds PATH variable if it does not exist
     
202. # --- Prepends /su/bin to the PATH variable
     
203. # - Patches /file_contexts[.bin]
     
204. # --- Adds a default context for file existing in the /su mount
     
205. #
     
206. # In case this documentation becomes outdated, please note that the sukernel
     
207. # tool is very chatty, and its output tells you exactly what it is doing
     
208. # and how. In TWRP, you can view this output by catting /tmp/recovery.log
     
209. # after flashing the ZIP.
     
210. #
     
211. # The boot image patcher creates a backup of the boot image it patches, for
     
212. # future restoration. It cannot re-patch a patched boot image, it will restore
     
213. # the previous boot image first. /[data|cache]/stock_boot_*.gz
     
214. #
     
215. # The boot image patcher currently only supports GZIP compressed ramdisks, and
     
216. # boot images in the standard Android boot image format.
     
217. #
     
218. # During boot image patch, /data/custom_ramdisk_patch.sh will be called,
     
219. # with the name of the ramdisk cpio file as parameter. The script must
     
220. # replace the input file and return a 0 exit code.
     
221. #
     
222. # Just before flashing, the boot image patcher will call
     
223. # /data/custom_boot_image_patch.sh with the name of the patched boot image
     
224. # as parameter. A device-specific patcher can further patch the boot image
     
225. # if needed. It must replace the input file and return a 0 exit code.
     
226. 
     
227. OUTFD=$2
     
228. ZIP=$3
     
229. 
     
230. getvar() {
     
231.   local VARNAME=$1
     
232.   local VALUE=$(eval echo \[        DISCUZ_CODE_1        ]quot;$VARNAME");
     
233.   for FILE in /data/.supersu /cache/.supersu /system/.supersu; do
     
234.     if [ -z "$VALUE" ]; then
     
235.       LINE=$(cat $FILE 2>/dev/null | grep "$VARNAME=")
     
236.       if [ ! -z "$LINE" ]; then
     
237.         VALUE=${LINE#*=}
     
238.       fi
     
239.     fi
     
240.   done
     
241.   eval $VARNAME=\$VALUE
     
242. }
     
243. 
     
244. readlink /proc/$/fd/$OUTFD 2>/dev/null | grep /tmp >/dev/null
     
245. if [ "$?" -eq "0" ]; then
     
246.   # rerouted to log file, we don't want our ui_print commands going there
     
247.   OUTFD=0
     
248. 
     
249.   # we are probably running in embedded mode, see if we can find the right fd
     
250.   # we know the fd is a pipe and that the parent updater may have been started as
     
251.   # 'update-binary 3 fd zipfile'
     
252.   for FD in `ls /proc/$/fd`; do
     
253.     readlink /proc/$/fd/$FD 2>/dev/null | grep pipe >/dev/null
     
254.     if [ "$?" -eq "0" ]; then
     
255.       ps | grep " 3 $FD " | grep -v grep >/dev/null
     
256.       if [ "$?" -eq "0" ]; then
     
257.         OUTFD=$FD
     
258.         break
     
259.       fi
     
260.     fi
     
261.   done
     
262. fi
     
263. 
     
264. ui_print_always() {
     
265.   echo -n -e "ui_print $1\n" >> /proc/self/fd/$OUTFD
     
266.   echo -n -e "ui_print\n" >> /proc/self/fd/$OUTFD
     
267. }
     
268. 
     
269. if [ -z "$LESSLOGGING" ]; then
     
270.   LESSLOGGING=false
     
271. fi
     
272. 
     
273. UI_PRINT_LAST=""
     
274. 
     
275. ui_print() {
     
276.   if (! $LESSLOGGING); then
     
277.     UI_PRINT_LAST="$1"
     
278.     ui_print_always "$1"
     
279.   fi
     
280. }
     
281. 
     
282. ui_print_less() {
     
283.   if ($LESSLOGGING); then
     
284.     ui_print_always "$1"
     
285.   fi
     
286. }
     
287. 
     
288. ch_con() {
     
289.   LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/toybox chcon -h u:object_r:system_file:s0 $1 1>/dev/null 2>/dev/null
     
290.   LD_LIBRARY_PATH=$SYSTEMLIB /system/toolbox chcon -h u:object_r:system_file:s0 $1 1>/dev/null 2>/dev/null
     
291.   LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/toolbox chcon -h u:object_r:system_file:s0 $1 1>/dev/null 2>/dev/null
     
292.   chcon -h u:object_r:system_file:s0 $1 1>/dev/null 2>/dev/null
     
293.   LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/toybox chcon u:object_r:system_file:s0 $1 1>/dev/null 2>/dev/null
     
294.   LD_LIBRARY_PATH=$SYSTEMLIB /system/toolbox chcon u:object_r:system_file:s0 $1 1>/dev/null 2>/dev/null
     
295.   LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/toolbox chcon u:object_r:system_file:s0 $1 1>/dev/null 2>/dev/null
     
296.   chcon u:object_r:system_file:s0 $1 1>/dev/null 2>/dev/null
     
297. }
     
298. 
     
299. ch_con_ext() {
     
300.   LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/toybox chcon $2 $1 1>/dev/null 2>/dev/null
     
301.   LD_LIBRARY_PATH=$SYSTEMLIB /system/toolbox chcon $2 $1 1>/dev/null 2>/dev/null
     
302.   LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/toolbox chcon $2 $1 1>/dev/null 2>/dev/null
     
303.   chcon $2 $1 1>/dev/null 2>/dev/null
     
304. }
     
305. 
     
306. ln_con() {
     
307.   LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/toybox ln -s $1 $2 1>/dev/null 2>/dev/null
     
308.   LD_LIBRARY_PATH=$SYSTEMLIB /system/toolbox ln -s $1 $2 1>/dev/null 2>/dev/null
     
309.   LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/toolbox ln -s $1 $2 1>/dev/null 2>/dev/null
     
310.   ln -s $1 $2 1>/dev/null 2>/dev/null
     
311.   ch_con $2 1>/dev/null 2>/dev/null
     
312. }
     
313. 
     
314. set_perm() {
     
315.   chown $1.$2 $4
     
316.   chown $1:$2 $4
     
317.   chmod $3 $4
     
318.   ch_con $4
     
319.   ch_con_ext $4 $5
     
320. }
     
321. 
     
322. cp_perm() {
     
323.   rm $5
     
324.   if [ -f "$4" ]; then
     
325.     cat $4 > $5
     
326.     set_perm $1 $2 $3 $5 $6
     
327.   fi
     
328. }
     
329. 
     
330. is_mounted() {
     
331.   if [ ! -z "$2" ]; then
     
332.     cat /proc/mounts | grep $1 | grep $2, >/dev/null
     
333.   else
     
334.     cat /proc/mounts | grep $1 >/dev/null
     
335.   fi
     
336.   return $?
     
337. }
     
338. 
     
339. toolbox_mount() {
     
340.   RW=rw
     
341.   if [ ! -z "$2" ]; then
     
342.     RW=$2
     
343.   fi
     
344. 
     
345.   DEV=
     
346.   POINT=
     
347.   FS=
     
348.   for i in `cat /etc/fstab | grep "$1"`; do
     
349.     if [ -z "$DEV" ]; then
     
350.       DEV=$i
     
351.     elif [ -z "$POINT" ]; then
     
352.       POINT=$i
     
353.     elif [ -z "$FS" ]; then
     
354.       FS=$i
     
355.       break
     
356.     fi
     
357.   done
     
358.   if (! is_mounted $1 $RW); then mount -t $FS -o $RW $DEV $POINT; fi
     
359.   if (! is_mounted $1 $RW); then mount -t $FS -o $RW,remount $DEV $POINT; fi
     
360. 
     
361.   DEV=
     
362.   POINT=
     
363.   FS=
     
364.   for i in `cat /etc/recovery.fstab | grep "$1"`; do
     
365.     if [ -z "$POINT" ]; then
     
366.       POINT=$i
     
367.     elif [ -z "$FS" ]; then
     
368.       FS=$i
     
369.     elif [ -z "$DEV" ]; then
     
370.       DEV=$i
     
371.       break
     
372.     fi
     
373.   done
     
374.   if [ "$FS" = "emmc" ]; then
     
375.     if (! is_mounted $1 $RW); then mount -t ext4 -o $RW $DEV $POINT; fi
     
376.     if (! is_mounted $1 $RW); then mount -t ext4 -o $RW,remount $DEV $POINT; fi
     
377.     if (! is_mounted $1 $RW); then mount -t f2fs -o $RW $DEV $POINT; fi
     
378.     if (! is_mounted $1 $RW); then mount -t f2fs -o $RW,remount $DEV $POINT; fi
     
379.   else
     
380.     if (! is_mounted $1 $RW); then mount -t $FS -o $RW $DEV $POINT; fi
     
381.     if (! is_mounted $1 $RW); then mount -t $FS -o $RW,remount $DEV $POINT; fi
     
382.   fi
     
383. }
     
384. 
     
385. remount_system_rw() {
     
386.   if (! is_mounted /system rw); then mount -o rw,remount /system; fi
     
387.   if (! is_mounted /system rw); then mount -o rw,remount /system /system; fi
     
388.   if (! is_mounted /system rw); then toolbox_mount /system; fi
     
389. }
     
390. 
     
391. # 'readlink -f' is not reliable across devices/recoveries, this works for our case
     
392. resolve_link() {
     
393.   local RESOLVE=$1
     
394.   local RESOLVED=
     
395.   while (true); do
     
396.     RESOLVED=$(readlink $RESOLVE || echo $RESOLVE)
     
397.     if [ "$RESOLVE" = "$RESOLVED" ]; then
     
398.       echo $RESOLVE
     
399.       break
     
400.     else
     
401.       RESOLVE=$RESOLVED
     
402.     fi
     
403.   done
     
404. }
     
405. 
     
406. wipe_system_files_if_present() {
     
407.   GO=false
     
408.   SYSTEMFILES="
     
409.     /system/xbin/daemonsu
     
410.     /system/xbin/sugote
     
411.     /system/xbin/sugote-mksh
     
412.     /system/xbin/supolicy
     
413.     /system/xbin/ku.sud
     
414.     /system/xbin/.ku
     
415.     /system/xbin/.su
     
416.     /system/lib/libsupol.so
     
417.     /system/lib64/libsupol.so
     
418.     /system/bin/.ext/.su
     
419.     /system/etc/init.d/99SuperSUDaemon
     
420.     /system/etc/.installed_su_daemon
     
421.     /system/app/Superuser.apk
     
422.     /system/app/Superuser.odex
     
423.     /system/app/Superuser
     
424.     /system/app/SuperUser.apk
     
425.     /system/app/SuperUser.odex
     
426.     /system/app/SuperUser
     
427.     /system/app/superuser.apk
     
428.     /system/app/superuser.odex
     
429.     /system/app/superuser
     
430.     /system/app/Supersu.apk
     
431.     /system/app/Supersu.odex
     
432.     /system/app/Supersu
     
433.     /system/app/SuperSU.apk
     
434.     /system/app/SuperSU.odex
     
435.     /system/app/SuperSU
     
436.     /system/app/supersu.apk
     
437.     /system/app/supersu.odex
     
438.     /system/app/supersu
     
439.     /system/app/VenomSuperUser.apk
     
440.     /system/app/VenomSuperUser.odex
     
441.     /system/app/VenomSuperUser
     
442.   "
     
443.   for FILE in $SYSTEMFILES; do
     
444.     if [ -d "$FILE" ]; then GO=true; fi
     
445.     if [ -f "$FILE" ]; then GO=true; fi
     
446.   done
     
447. 
     
448.   RMSU=false
     
449.   if (! $RWSYSTEM); then
     
450.     if [ -f "/system/xbin/su" ]; then
     
451.       # only remove /system/xbin/su if it's SuperSU. Could be firmware-included version, we
     
452.       # do not want to cause remount for that
     
453.       SUPERSU_CHECK=$(cat /system/xbin/su | grep SuperSU)
     
454.       if [ $? -eq 0 ]; then
     
455.         GO=true
     
456.         RMSU=true
     
457.       fi
     
458.     fi
     
459. 
     
460.     SPECIALSYSTEMFILES="
     
461.       /system/etc/install-recovery_original.sh
     
462.       /system/bin/install-recovery_original.sh
     
463.       /system/bin/app_process32_original
     
464.       /system/bin/app_process32_xposed
     
465.       /system/bin/app_process64_original
     
466.       /system/bin/app_process64_xposed
     
467.       /system/bin/app_process_init
     
468.     "
     
469.     for FILE in $SPECIALSYSTEMFILES; do
     
470.       if [ -d "$FILE" ]; then GO=true; fi
     
471.     done
     
472.   fi
     
473. 
     
474.   if ($GO); then
     
475.     if (! $RWSYSTEM); then
     
476.       ui_print "- Remounting system r/w :("
     
477.       remount_system_rw
     
478.     fi
     
479. 
     
480.     for FILE in $SYSTEMFILES; do
     
481.       if [ -d "$FILE" ]; then rm -rf $FILE; fi
     
482.       if [ -f "$FILE" ]; then rm -f $FILE; fi
     
483.     done
     
484. 
     
485.     if (! $RWSYSTEM); then
     
486.       # remove wrongly placed /system/xbin/su as well
     
487.       if ($RMSU); then
     
488.         rm -f /system/xbin/su
     
489.       fi
     
490. 
     
491.       # Restore install-recovery and app_process from system install
     
492.       # Otherwise, our system-less install will fail to boot
     
493.       if [ -f "/system/etc/install-recovery_original.sh" ]; then
     
494.         rm -f /system/etc/install-recovery.sh
     
495.         mv /system/etc/install-recovery_original.sh /system/etc/install-recovery.sh
     
496.       fi
     
497.       if [ -f "/system/bin/install-recovery_original.sh" ]; then
     
498.         rm -f /system/bin/install-recovery.sh
     
499.         mv /system/bin/install-recovery_original.sh /system/bin/install-recovery.sh
     
500.       fi
     
501.       if [ -f "/system/bin/app_process64_original" ]; then
     
502.         rm -f /system/bin/app_process64
     
503.         if [ -f "/system/bin/app_process64_xposed" ]; then
     
504.           ln -s /system/bin/app_process64_xposed /system/bin/app_process64
     
505.         else
     
506.           mv /system/bin/app_process64_original /system/bin/app_process64
     
507.         fi
     
508.       fi
     
509.       if [ -f "/system/bin/app_process32_original" ]; then
     
510.         rm -f /system/bin/app_process32
     
511.         if [ -f "/system/bin/app_process32_xposed" ]; then
     
512.           ln -s /system/bin/app_process32_xposed /system/bin/app_process32
     
513.         else
     
514.           mv /system/bin/app_process32_original /system/bin/app_process32
     
515.         fi
     
516.       fi
     
517.       if [ -f "/system/bin/app_process64" ]; then
     
518.         rm /system/bin/app_process
     
519.         ln -s /system/bin/app_process64 /system/bin/app_process
     
520.       elif [ -f "/system/bin/app_process32" ]; then
     
521.         rm /system/bin/app_process
     
522.         ln -s /system/bin/app_process32 /system/bin/app_process
     
523.       fi
     
524.       rm -f /system/bin/app_process_init
     
525.     fi
     
526.   fi
     
527. }
     
528. 
     
529. wipe_data_competitors_and_cache() {
     
530.   rm -f /data/dalvik-cache/*com.noshufou.android.su*
     
531.   rm -f /data/dalvik-cache/*/*com.noshufou.android.su*
     
532.   rm -f /data/dalvik-cache/*com.koushikdutta.superuser*
     
533.   rm -f /data/dalvik-cache/*/*com.koushikdutta.superuser*
     
534.   rm -f /data/dalvik-cache/*com.mgyun.shua.su*
     
535.   rm -f /data/dalvik-cache/*/*com.mgyun.shua.su*
     
536.   rm -f /data/dalvik-cache/*com.m0narx.su*
     
537.   rm -f /data/dalvik-cache/*/*com.m0narx.su*
     
538.   rm -f /data/dalvik-cache/*com.kingroot.kinguser*
     
539.   rm -f /data/dalvik-cache/*/*com.kingroot.kinguser*
     
540.   rm -f /data/dalvik-cache/*com.kingroot.master*
     
541.   rm -f /data/dalvik-cache/*/*com.kingroot.master*
     
542.   rm -f /data/dalvik-cache/*me.phh.superuser*
     
543.   rm -f /data/dalvik-cache/*/*me.phh.superuser*
     
544.   rm -f /data/dalvik-cache/*Superuser.apk*
     
545.   rm -f /data/dalvik-cache/*/*Superuser.apk*
     
546.   rm -f /data/dalvik-cache/*SuperUser.apk*
     
547.   rm -f /data/dalvik-cache/*/*SuperUser.apk*
     
548.   rm -f /data/dalvik-cache/*superuser.apk*
     
549.   rm -f /data/dalvik-cache/*/*superuser.apk*
     
550.   rm -f /data/dalvik-cache/*VenomSuperUser.apk*
     
551.   rm -f /data/dalvik-cache/*/*VenomSuperUser.apk*
     
552.   rm -f /data/dalvik-cache/*eu.chainfire.supersu*
     
553.   rm -f /data/dalvik-cache/*/*eu.chainfire.supersu*
     
554.   rm -f /data/dalvik-cache/*Supersu.apk*
     
555.   rm -f /data/dalvik-cache/*/*Supersu.apk*
     
556.   rm -f /data/dalvik-cache/*SuperSU.apk*
     
557.   rm -f /data/dalvik-cache/*/*SuperSU.apk*
     
558.   rm -f /data/dalvik-cache/*supersu.apk*
     
559.   rm -f /data/dalvik-cache/*/*supersu.apk*
     
560.   rm -f /data/dalvik-cache/*.oat
     
561.   rm -rf /data/app/com.noshufou.android.su*
     
562.   rm -rf /data/app/com.koushikdutta.superuser*
     
563.   rm -rf /data/app/com.mgyun.shua.su*
     
564.   rm -rf /data/app/com.m0narx.su*
     
565.   rm -rf /data/app/com.kingroot.kinguser*
     
566.   rm -rf /data/app/com.kingroot.master*
     
567.   rm -rf /data/app/me.phh.superuser*
     
568. }
     
569. 
     
570. # check_zero "progress_message" "success message" "failure message" "command"
     
571. check_zero() {
     
572.   if ($CONTINUE); then
     
573.     if [ ! -z "$1" ]; then ui_print "$1"; fi
     
574.     eval "$4"
     
575.     if [ $? -eq 0 ]; then
     
576.       if [ ! -z "$2" ]; then ui_print "$2"; fi
     
577.     else
     
578.       if [ ! -z "$3" ]; then
     
579.         if [ ! -z "$1" ]; then
     
580.           ui_print_less "$1"
     
581.         else
     
582.           ui_print_less "$UI_PRINT_LAST"
     
583.         fi
     
584.         ui_print_always "$3";
     
585.       fi
     
586.       CONTINUE=false
     
587.     fi
     
588.   fi
     
589. }
     
590. 
     
591. # check_zero_def "progress message" "command"
     
592. check_zero_def() {
     
593.   check_zero "$1" "" "--- Failure, aborting" "$2"
     
594. }
     
595. 
     
596. # find boot image partition if not set already
     
597. find_boot_image() {
     
598.   # expand the detection if we find more, instead of reading from fstab, because unroot
     
599.   # from the SuperSU APK doesn't have the fstab to read from
     
600.   if [ -z "$BOOTIMAGE" ]; then
     
601.     for PARTITION in kern-a KERN-A android_boot ANDROID_BOOT kernel KERNEL boot BOOT lnx LNX; do
     
602.       BOOTIMAGE=$(readlink /dev/block/by-name/$PARTITION || readlink /dev/block/platform/*/by-name/$PARTITION || readlink /dev/block/platform/*/*/by-name/$PARTITION)
     
603.       if [ ! -z "$BOOTIMAGE" ]; then break; fi
     
604.     done
     
605.   fi
     
606. }
     
607. 
     
608. # use only on 6.0+, tries to read current boot image and detect if we can do a system install
     
609. # without any boot image patching. Requirements:
     
610. # - /data readable
     
611. # - not pre-patched by SuperSU
     
612. # - dm-verity disabled
     
613. # - init loads from /data/security/current/sepolicy
     
614. # - sepolicy has init load_policy or permissive init
     
615. # It symlink/patches the relevant files to /data, and sets SYSTEMLESS variable if not already set
     
616. detect_systemless_required() {
     
617.   OLD_SYSTEMLESS=$SYSTEMLESS
     
618.   if [ "$OLD_SYSTEMLESS" = "detect" ]; then
     
619.     # we don't override a pre-set true/false value
     
620.     SYSTEMLESS=true
     
621.   fi
     
622. 
     
623.   # check /data mounted
     
624.   if (! is_mounted /data); then
     
625.     return
     
626.   fi
     
627. 
     
628.   # find boot image partition
     
629.   find_boot_image
     
630. 
     
631.   CONTINUE=true
     
632.   if [ -z "$BOOTIMAGE" ]; then
     
633.     # no boot image partition detected, abort
     
634.     return
     
635.   fi
     
636. 
     
637.   # extract ramdisk from boot image
     
638.   rm -rf /sutmp
     
639.   mkdir /sutmp
     
640. 
     
641.   check_zero "" "" "" "LD_LIBRARY_PATH=$RAMDISKLIB $BIN/sukernel --bootimg-extract-ramdisk $BOOTIMAGE /sutmp/ramdisk.packed"
     
642.   check_zero "" "" "" "LD_LIBRARY_PATH=$RAMDISKLIB $BIN/sukernel --ungzip /sutmp/ramdisk.packed /sutmp/ramdisk"
     
643.   if (! $CONTINUE); then return; fi
     
644. 
     
645.   # detect SuperSU patch
     
646.   LD_LIBRARY_PATH=$RAMDISKLIB $BIN/sukernel --patch-test /sutmp/ramdisk
     
647.   if [ $? -ne 0 ]; then
     
648.     return
     
649.   fi
     
650. 
     
651.   # detect dm-verity in use
     
652.   for i in `LD_LIBRARY_PATH=$RAMDISKLIB $BIN/sukernel --cpio-ls /sutmp/ramdisk | grep fstab`; do
     
653.     rm -f /sutmp/fstab
     
654. 
     
655.     check_zero "" "" "" "LD_LIBRARY_PATH=$RAMDISKLIB $BIN/sukernel --cpio-extract /sutmp/ramdisk $i /sutmp/fstab"
     
656.     if (! $CONTINUE); then return; fi
     
657. 
     
658.     VERIFY=$(cat /sutmp/fstab | grep verify | grep system)
     
659.     if [ $? -eq 0 ]; then
     
660.       # verify flag found, dm-verity probably enabled, modifying /system may prevent boot
     
661.       return
     
662.     fi
     
663.   done
     
664. 
     
665.   # detect init loading from /data/security/current/sepolicy
     
666.   check_zero "" "" "" "LD_LIBRARY_PATH=$RAMDISKLIB $BIN/sukernel --cpio-extract /sutmp/ramdisk init /sutmp/init"
     
667.   if (! $CONTINUE); then return; fi
     
668. 
     
669.   CURRENT=$(cat /sutmp/init | grep "/data/security/current/sepolicy")
     
670.   if [ $? -ne 0 ]; then
     
671.     # this init doesn't load from the default sepolicy override location
     
672.     return
     
673.   fi
     
674. 
     
675.   # extract sepolicy
     
676.   check_zero "" "" "" "LD_LIBRARY_PATH=$RAMDISKLIB $BIN/sukernel --cpio-extract /sutmp/ramdisk sepolicy /sutmp/sepolicy"
     
677.   if (! $CONTINUE); then return; fi
     
678. 
     
679.   GO=false
     
680. 
     
681.   # detect init permissive
     
682.   if (! $GO); then
     
683.     INIT_PERMISSIVE=$(LD_LIBRARY_PATH=$RAMDISKLIB $BIN/supolicy --dumpav /sutmp/sepolicy | grep "[TYPE]" | grep " init (PERMISSIVE) ")
     
684.     if [ $? -eq 0 ]; then
     
685.       GO=true
     
686.     fi
     
687.   fi
     
688. 
     
689.   # detect init load_policy
     
690.   if (! $GO); then
     
691.     INIT_LOAD_POLICY=$(LD_LIBRARY_PATH=$RAMDISKLIB $BIN/supolicy --dumpav /sutmp/sepolicy | grep "[AV]" | grep " ALLOW " | grep " init-->kernel (security) " | grep "load_policy")
     
692.     if [ $? -eq 0 ]; then
     
693.       GO=true
     
694.     fi
     
695.   fi
     
696. 
     
697.   # copy files to /data
     
698.   if (! $GO); then return; fi
     
699. 
     
700.   rm -rf /data/security/*
     
701.   mkdir /data/security/current
     
702.   set_perm 1000 1000 0755 /data/security/current u:object_r:security_file:s0
     
703. 
     
704.   LD_LIBRARY_PATH=$RAMDISKLIB $BIN/supolicy --file /sutmp/sepolicy /data/security/current/sepolicy
     
705.   set_perm 1000 1000 0644 /data/security/current/sepolicy u:object_r:security_file:s0
     
706. 
     
707.   for i in seapp_contexts file_contexts file_contexts.bin property_contexts service_contexts selinux_version; do
     
708.     ln -s /$i /data/security/current/$i
     
709.   done
     
710. 
     
711.   ln -s /system/etc/security/mac_permissions.xml /data/security/current/mac_permissions.xml
     
712. 
     
713.   # if we reach this point, we can do a system install
     
714.   if [ "$OLD_SYSTEMLESS" = "detect" ]; then
     
715.     # we don't override a pre-set true/false value
     
716.     SYSTEMLESS=false
     
717.   fi
     
718. }
     
719. 
     
720. ui_print " "
     
721. ui_print        "*****************"
     
722. ui_print_always "SuperSU installer"
     
723. ui_print        "*****************"
     
724. 
     
725. ui_print "- Mounting /system, /data and rootfs"
     
726. 
     
727. mount -o ro /system
     
728. toolbox_mount /system ro
     
729. mount /data
     
730. toolbox_mount /data
     
731. mount -o rw,remount /
     
732. mount -o rw,remount / /
     
733. 
     
734. if [ -z "$BIN" ]; then
     
735.   # TWRP went full retard
     
736.   if [ ! -f "/sbin/unzip" ]; then
     
737.     ui_print "- BAD RECOVERY DETECTED, NO UNZIP, ABORTING"
     
738.     exit 1
     
739.   fi
     
740. fi
     
741. 
     
742. if [ -z "$NOOVERRIDE" ]; then
     
743.   # read override variables
     
744.   getvar SYSTEMLESS
     
745.   getvar PATCHBOOTIMAGE
     
746.   getvar BOOTIMAGE
     
747.   getvar STOCKBOOTIMAGE
     
748.   getvar BINDSYSTEMXBIN
     
749.   getvar PERMISSIVE
     
750.   getvar KEEPVERITY
     
751.   getvar KEEPFORCEENCRYPT
     
752. fi
     
753. if [ -z "$SYSTEMLESS" ]; then
     
754.   # detect if we need systemless, based on Android version and boot image
     
755.   SYSTEMLESS=detect
     
756. fi
     
757. if [ -z "$PATCHBOOTIMAGE" ]; then
     
758.   # only if we end up doing a system-less install
     
759.   PATCHBOOTIMAGE=true
     
760. fi
     
761. if [ -z "$BINDSYSTEMXBIN" ]; then
     
762.   # causes launch_daemonsu to bind over /system/xbin, disabled by default
     
763.   BINDSYSTEMXBIN=false
     
764. fi
     
765. if [ -z "$PERMISSIVE" ]; then
     
766.   # don't make everything fake-permissive
     
767.   PERMISSIVE=false
     
768. fi
     
769. if [ -z "$KEEPVERITY" ]; then
     
770.   # we don't keep dm-verity by default
     
771.   KEEPVERITY=false
     
772. fi
     
773. if [ -z "$KEEPFORCEENCRYPT" ]; then
     
774.   # we don't keep forceencrypt by default
     
775.   KEEPFORCEENCRYPT=false
     
776. fi
     
777. 
     
778. API=$(cat /system/build.prop | grep "ro.build.version.sdk=" | dd bs=1 skip=21 count=2)
     
779. ABI=$(cat /system/build.prop /default.prop | grep -m 1 "ro.product.cpu.abi=" | dd bs=1 skip=19 count=3)
     
780. ABILONG=$(cat /system/build.prop /default.prop | grep -m 1 "ro.product.cpu.abi=" | dd bs=1 skip=19)
     
781. ABI2=$(cat /system/build.prop /default.prop | grep -m 1 "ro.product.cpu.abi2=" | dd bs=1 skip=20 count=3)
     
782. SUMOD=06755
     
783. SUGOTE=false
     
784. SUPOLICY=false
     
785. INSTALL_RECOVERY_CONTEXT=u:object_r:system_file:s0
     
786. MKSH=/system/bin/mksh
     
787. PIE=
     
788. SU=su
     
789. ARCH=arm
     
790. APKFOLDER=false
     
791. APKNAME=/system/app/Superuser.apk
     
792. APPPROCESS=false
     
793. APPPROCESS64=false
     
794. SYSTEMLIB=/system/lib
     
795. RAMDISKLIB=$SYSTEMLIB
     
796. RWSYSTEM=true
     
797. 
     
798. if [ "$API" -le "21" ]; then
     
799.   # needed for some intermediate AOSP verions
     
800. 
     
801.   remount_system_rw
     
802. 
     
803.   cat /system/bin/toolbox > /system/toolbox
     
804.   chmod 0755 /system/toolbox
     
805.   ch_con /system/toolbox
     
806. fi
     
807. 
     
808. if [ "$ABI" = "x86" ]; then ARCH=x86; fi;
     
809. if [ "$ABI2" = "x86" ]; then ARCH=x86; fi;
     
810. if [ "$API" -eq "$API" ]; then
     
811.   if [ "$API" -ge "17" ]; then
     
812.     SUGOTE=true
     
813.     PIE=.pie
     
814.     if [ "$ARCH" = "x86" ]; then SU=su.pie; fi;
     
815.     if [ "$ABILONG" = "armeabi-v7a" ]; then ARCH=armv7; fi;
     
816.     if [ "$ABI" = "mip" ]; then ARCH=mips; fi;
     
817.     if [ "$ABILONG" = "mips" ]; then ARCH=mips; fi;
     
818.   fi
     
819.   if [ "$API" -ge "18" ]; then
     
820.     SUMOD=0755
     
821.   fi
     
822.   if [ "$API" -ge "20" ]; then
     
823.     if [ "$ABILONG" = "arm64-v8a" ]; then ARCH=arm64; SYSTEMLIB=/system/lib64; APPPROCESS64=true; fi;
     
824.     if [ "$ABILONG" = "mips64" ]; then ARCH=mips64; SYSTEMLIB=/system/lib64; APPPROCESS64=true; fi;
     
825.     if [ "$ABILONG" = "x86_64" ]; then ARCH=x64; SYSTEMLIB=/system/lib64; APPPROCESS64=true; fi;
     
826.     APKFOLDER=true
     
827.     APKNAME=/system/app/SuperSU/SuperSU.apk
     
828.   fi
     
829.   if [ "$API" -ge "19" ]; then
     
830.     SUPOLICY=true
     
831.     if [ "$(LD_LIBRARY_PATH=$SYSTEMLIB /system/toolbox ls -lZ /system/bin/toolbox | grep toolbox_exec > /dev/null; echo $?)" -eq "0" ]; then
     
832.       INSTALL_RECOVERY_CONTEXT=u:object_r:toolbox_exec:s0
     
833.     fi
     
834.   fi
     
835.   if [ "$API" -ge "21" ]; then
     
836.     APPPROCESS=true
     
837.   fi
     
838.   if [ "$API" -ge "22" ]; then
     
839.     SUGOTE=false
     
840.   fi
     
841. fi
     
842. if [ ! -f $MKSH ]; then
     
843.   MKSH=/system/bin/sh
     
844. fi
     
845. 
     
846. #ui_print "DBG [$API] [$ABI] [$ABI2] [$ABILONG] [$ARCH] [$MKSH]"
     
847. 
     
848. if [ -z "$BIN" ]; then
     
849.   ui_print "- Extracting files"
     
850. 
     
851.   cd /tmp
     
852.   mkdir supersu
     
853.   cd supersu
     
854. 
     
855.   unzip -o "$ZIP"
     
856. 
     
857.   BIN=/tmp/supersu/$ARCH
     
858.   COM=/tmp/supersu/common
     
859. fi
     
860. 
     
861. # execute binaries from ramdisk
     
862. chmod -R 0755 $BIN/*
     
863. RAMDISKLIB=$BIN:$SYSTEMLIB
     
864. 
     
865. if [ "$API" -ge "19" ]; then
     
866.   # 4.4+: permissive all teh things
     
867.   LD_LIBRARY_PATH=$RAMDISKLIB $BIN/supolicy --live "permissive *"
     
868. fi
     
869. 
     
870. SAMSUNG=false
     
871. if [ "$API" -eq "$API" ]; then
     
872.   SAMSUNG_CHECK=$(cat /system/build.prop | grep "ro.build.fingerprint=" | grep -i "samsung")
     
873.   if [ $? -eq 0 ]; then
     
874.     SAMSUNG=true
     
875.   fi
     
876. 
     
877.   if [ "$API" -ge "23" ]; then
     
878.     # 6.0+
     
879.     ui_print "- Detecting system compatibility"
     
880.     detect_systemless_required
     
881. 
     
882.     if ($SYSTEMLESS); then
     
883.       RWSYSTEM=false
     
884.     fi
     
885.   elif [ "$API" -ge "22" ]; then
     
886.     if [ "$SYSTEMLESS" = "detect" ]; then
     
887.       SYSTEMLESS=true
     
888.     fi
     
889. 
     
890.     # 5.1/Samsung
     
891.     if ($SYSTEMLESS); then
     
892.       if ($SAMSUNG); then
     
893.         RWSYSTEM=false
     
894.       fi
     
895.     fi
     
896.   fi
     
897. fi
     
898. 
     
899. # Do not use SYSTEMLESS after this point, but refer to RWSYSTEM
     
900. 
     
901. if ($RWSYSTEM); then
     
902.   ui_print "- System mode"
     
903. 
     
904.   remount_system_rw
     
905. 
     
906.   ui_print "- Disabling OTA survival"
     
907.   chmod 0755 $BIN/chattr$PIE
     
908.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/bin/su
     
909.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/xbin/su
     
910.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/bin/.ext/.su
     
911.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/sbin/su
     
912.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /vendor/sbin/su
     
913.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /vendor/bin/su
     
914.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /vendor/xbin/su
     
915.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/xbin/daemonsu
     
916.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/xbin/sugote
     
917.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/xbin/sugote_mksh
     
918.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/xbin/supolicy
     
919.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/xbin/ku.sud
     
920.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/xbin/.ku
     
921.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/xbin/.su
     
922.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/lib/libsupol.so
     
923.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/lib64/libsupol.so
     
924.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/etc/install-recovery.sh
     
925.   LD_LIBRARY_PATH=$SYSTEMLIB $BIN/chattr$PIE -ia /system/bin/install-recovery.sh
     
926. 
     
927.   ui_print "- Removing old files"
     
928. 
     
929.   if [ -f "/system/bin/install-recovery.sh" ]; then
     
930.     if [ ! -f "/system/bin/install-recovery_original.sh" ]; then
     
931.       mv /system/bin/install-recovery.sh /system/bin/install-recovery_original.sh
     
932.       ch_con /system/bin/install-recovery_original.sh
     
933.     fi
     
934.   fi
     
935.   if [ -f "/system/etc/install-recovery.sh" ]; then
     
936.     if [ ! -f "/system/etc/install-recovery_original.sh" ]; then
     
937.       mv /system/etc/install-recovery.sh /system/etc/install-recovery_original.sh
     
938.       ch_con /system/etc/install-recovery_original.sh
     
939.     fi
     
940.   fi
     
941. 
     
942.   # only wipe these files in /system install, so not part of the wipe_ functions
     
943. 
     
944.   rm -f /system/bin/install-recovery.sh
     
945.   rm -f /system/etc/install-recovery.sh
     
946. 
     
947.   rm -f /system/bin/su
     
948.   rm -f /system/xbin/su
     
949.   rm -f /system/sbin/su
     
950.   rm -f /vendor/sbin/su
     
951.   rm -f /vendor/bin/su
     
952.   rm -f /vendor/xbin/su
     
953. 
     
954.   rm -rf /data/app/eu.chainfire.supersu-*
     
955.   rm -rf /data/app/eu.chainfire.supersu.apk
     
956. 
     
957.   wipe_system_files_if_present
     
958.   wipe_data_competitors_and_cache
     
959. 
     
960.   rm /data/su.img
     
961.   rm /cache/su.img
     
962. 
     
963.   ui_print "- Creating space"
     
964.   if ($APKFOLDER); then
     
965.     if [ -f "/system/app/Maps/Maps.apk" ]; then
     
966.       cp /system/app/Maps/Maps.apk /Maps.apk
     
967.       rm /system/app/Maps/Maps.apk
     
968.     fi
     
969.     if [ -f "/system/app/GMS_Maps/GMS_Maps.apk" ]; then
     
970.       cp /system/app/GMS_Maps/GMS_Maps.apk /GMS_Maps.apk
     
971.       rm /system/app/GMS_Maps/GMS_Maps.apk
     
972.     fi
     
973.     if [ -f "/system/app/YouTube/YouTube.apk" ]; then
     
974.       cp /system/app/YouTube/YouTube.apk /YouTube.apk
     
975.       rm /system/app/YouTube/YouTube.apk
     
976.     fi
     
977.   else
     
978.     if [ -f "/system/app/Maps.apk" ]; then
     
979.       cp /system/app/Maps.apk /Maps.apk
     
980.       rm /system/app/Maps.apk
     
981.     fi
     
982.     if [ -f "/system/app/GMS_Maps.apk" ]; then
     
983.       cp /system/app/GMS_Maps.apk /GMS_Maps.apk
     
984.       rm /system/app/GMS_Maps.apk
     
985.     fi
     
986.     if [ -f "/system/app/YouTube.apk" ]; then
     
987.       cp /system/app/YouTube.apk /YouTube.apk
     
988.       rm /system/app/YouTube.apk
     
989.     fi
     
990.   fi
     
991. 
     
992.   ui_print "- Placing files"
     
993. 
     
994.   mkdir /system/bin/.ext
     
995.   set_perm 0 0 0777 /system/bin/.ext
     
996.   cp_perm 0 0 $SUMOD $BIN/$SU /system/bin/.ext/.su
     
997.   cp_perm 0 0 $SUMOD $BIN/$SU /system/xbin/su
     
998.   cp_perm 0 0 0755 $BIN/$SU /system/xbin/daemonsu
     
999.   if ($SUGOTE); then
     
1000.     cp_perm 0 0 0755 $BIN/$SU /system/xbin/sugote u:object_r:zygote_exec:s0
      
1001.     cp_perm 0 0 0755 $MKSH /system/xbin/sugote-mksh
      
1002.   fi
      
1003.   if ($SUPOLICY); then
      
1004.     cp_perm 0 0 0755 $BIN/supolicy /system/xbin/supolicy
      
1005.     cp_perm 0 0 0644 $BIN/libsupol.so $SYSTEMLIB/libsupol.so
      
1006.   fi
      
1007.   if ($APKFOLDER); then
      
1008.     mkdir /system/app/SuperSU
      
1009.     set_perm 0 0 0755 /system/app/SuperSU
      
1010.   fi
      
1011.   cp_perm 0 0 0644 $COM/Superuser.apk $APKNAME
      
1012.   cp_perm 0 0 0755 $COM/install-recovery.sh /system/etc/install-recovery.sh
      
1013.   ln_con /system/etc/install-recovery.sh /system/bin/install-recovery.sh
      
1014.   if ($APPPROCESS); then
      
1015.     rm /system/bin/app_process
      
1016.     ln_con /system/xbin/daemonsu /system/bin/app_process
      
1017.     if ($APPPROCESS64); then
      
1018.       if [ ! -f "/system/bin/app_process64_original" ]; then
      
1019.         mv /system/bin/app_process64 /system/bin/app_process64_original
      
1020.       else
      
1021.         rm /system/bin/app_process64
      
1022.       fi
      
1023.       ln_con /system/xbin/daemonsu /system/bin/app_process64
      
1024.       if [ ! -f "/system/bin/app_process_init" ]; then
      
1025.         cp_perm 0 2000 0755 /system/bin/app_process64_original /system/bin/app_process_init
      
1026.       fi
      
1027.     else
      
1028.       if [ ! -f "/system/bin/app_process32_original" ]; then
      
1029.         mv /system/bin/app_process32 /system/bin/app_process32_original
      
1030.       else
      
1031.         rm /system/bin/app_process32
      
1032.       fi
      
1033.       ln_con /system/xbin/daemonsu /system/bin/app_process32
      
1034.       if [ ! -f "/system/bin/app_process_init" ]; then
      
1035.         cp_perm 0 2000 0755 /system/bin/app_process32_original /system/bin/app_process_init
      
1036.       fi
      
1037.     fi
      
1038.   fi
      
1039.   cp_perm 0 0 0744 $COM/99SuperSUDaemon /system/etc/init.d/99SuperSUDaemon
      
1040.   echo 1 > /system/etc/.installed_su_daemon
      
1041.   set_perm 0 0 0644 /system/etc/.installed_su_daemon
      
1042. 
      
1043.   ui_print "- Restoring files"
      
1044.   if ($APKFOLDER); then
      
1045.     if [ -f "/Maps.apk" ]; then
      
1046.       cp_perm 0 0 0644 /Maps.apk /system/app/Maps/Maps.apk
      
1047.       rm /Maps.apk
      
1048.     fi
      
1049.     if [ -f "/GMS_Maps.apk" ]; then
      
1050.       cp_perm 0 0 0644 /GMS_Maps.apk /system/app/GMS_Maps/GMS_Maps.apk
      
1051.       rm /GMS_Maps.apk
      
1052.     fi
      
1053.     if [ -f "/YouTube.apk" ]; then
      
1054.       cp_perm 0 0 0644 /YouTube.apk /system/app/YouTube/YouTube.apk
      
1055.       rm /YouTube.apk
      
1056.     fi
      
1057.   else
      
1058.     if [ -f "/Maps.apk" ]; then
      
1059.       cp_perm 0 0 0644 /Maps.apk /system/app/Maps.apk
      
1060.       rm /Maps.apk
      
1061.     fi
      
1062.     if [ -f "/GMS_Maps.apk" ]; then
      
1063.       cp_perm 0 0 0644 /GMS_Maps.apk /system/app/GMS_Maps.apk
      
1064.       rm /GMS_Maps.apk
      
1065.     fi
      
1066.     if [ -f "/YouTube.apk" ]; then
      
1067.       cp_perm 0 0 0644 /YouTube.apk /system/app/YouTube.apk
      
1068.       rm /YouTube.apk
      
1069.     fi
      
1070.   fi
      
1071. 
      
1072.   ui_print "- Post-installation script"
      
1073.   rm /system/toybox
      
1074.   rm /system/toolbox
      
1075.   LD_LIBRARY_PATH=$SYSTEMLIB /system/xbin/su --install
      
1076. else
      
1077.   ui_print "- System-less mode, boot image support required"
      
1078. 
      
1079.   SUIMG=/data/su.img
      
1080.   HAVEDATA=true
      
1081.   if (! is_mounted /data); then
      
1082.     SUIMG=/cache/su.img
      
1083.     HAVEDATA=false
      
1084.   fi
      
1085. 
      
1086.   ui_print "- Creating image"
      
1087. 
      
1088.   # we want a 96M image, for SuperSU files and potential mods such as systemless xposed
      
1089.   # attempt smaller sizes on failure, and hope the launch_daemonsu.sh script succeeds
      
1090.   # in resizing to 96M later
      
1091.   for SUIMGSIZE in 96M 64M 32M 16M; do
      
1092.     if [ ! -f "$SUIMG" ]; then make_ext4fs -l $SUIMGSIZE -a /su -S $COM/file_contexts_image $SUIMG; fi
      
1093.     if [ ! -f "$SUIMG" ]; then LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/make_ext4fs -l $SUIMGSIZE -a /su -S $COM/file_contexts_image $SUIMG; fi
      
1094.   done
      
1095. 
      
1096.   if [ -f "$SUIMG" ]; then
      
1097.     LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/e2fsck -p -f $SUIMG
      
1098.   fi
      
1099. 
      
1100.   ui_print "- Mounting image"
      
1101. 
      
1102.   mkdir /su
      
1103. 
      
1104.   # 'losetup -f' is unreliable across devices/recoveries
      
1105.   LOOPDEVICE=
      
1106.   for LOOP in 0 1 2 3 4 5 6 7; do
      
1107.     if (! is_mounted /su); then
      
1108.       LOOPDEVICE=/dev/block/loop$LOOP
      
1109.       if [ ! -f "$LOOPDEVICE" ]; then
      
1110.         mknod $LOOPDEVICE b 7 $LOOP
      
1111.       fi
      
1112.       losetup $LOOPDEVICE $SUIMG
      
1113.       if [ "$?" -eq "0" ]; then
      
1114.         mount -t ext4 -o loop $LOOPDEVICE /su
      
1115.         if (! is_mounted /su); then
      
1116.           /system/bin/toolbox mount -t ext4 -o loop $LOOPDEVICE /su
      
1117.         fi
      
1118.         if (! is_mounted /su); then
      
1119.           /system/bin/toybox mount -t ext4 -o loop $LOOPDEVICE /su
      
1120.         fi
      
1121.       fi
      
1122.       if (is_mounted /su); then
      
1123.         break;
      
1124.       fi
      
1125.     fi
      
1126.   done
      
1127. 
      
1128.   ui_print "- Creating paths"
      
1129. 
      
1130.   mkdir /su/bin
      
1131.   set_perm 0 0 0751 /su/bin
      
1132.   mkdir /su/xbin
      
1133.   set_perm 0 0 0755 /su/xbin
      
1134.   mkdir /su/lib
      
1135.   set_perm 0 0 0755 /su/lib
      
1136.   mkdir /su/etc
      
1137.   set_perm 0 0 0755 /su/etc
      
1138.   mkdir /su/su.d
      
1139.   set_perm 0 0 0700 /su/su.d
      
1140. 
      
1141.   ui_print "- Removing old files"
      
1142. 
      
1143.   wipe_system_files_if_present
      
1144.   wipe_data_competitors_and_cache
      
1145. 
      
1146.   rm -rf /su/bin/app_process
      
1147.   rm -rf /su/bin/sush
      
1148.   rm -rf /su/bin/daemonsu
      
1149.   rm -rf /su/bin/daemonsu_*
      
1150.   rm -rf /su/bin/su
      
1151.   rm -rf /su/bin/su_*
      
1152.   rm -rf /su/bin/supolicy
      
1153.   rm -rf /su/bin/supolicy_*
      
1154.   rm -rf /su/lib/libsupol.so
      
1155.   rm -rf /su/lib/libsupol_*
      
1156.   rm -rf /su/bin/sukernel
      
1157. 
      
1158.   ui_print "- Placing files"
      
1159. 
      
1160.   # Copy binaries and utilities
      
1161.   cp_perm 0 0 0755 $BIN/$SU /su/bin/su
      
1162.   cp_perm 0 0 0755 $BIN/$SU /su/bin/daemonsu
      
1163.   ln_con /su/bin/su /su/bin/supolicy
      
1164.   cp_perm 0 0 0755 $BIN/supolicy /su/bin/supolicy_wrapped
      
1165.   cp_perm 0 0 0644 $BIN/libsupol.so /su/lib/libsupol.so
      
1166.   cp_perm 0 0 0755 $BIN/sukernel /su/bin/sukernel
      
1167. 
      
1168.   # Copy APK, installation is done by /sbin/launch_daemonsu.sh
      
1169.   if ($HAVEDATA); then
      
1170.     cp_perm 1000 1000 0600 $COM/Superuser.apk /data/SuperSU.apk
      
1171. 
      
1172.     # Wipe /data/security to prevent SELinux policy override
      
1173.     # Important to keep the folder itself
      
1174.     rm -rf /data/security/*
      
1175.   else
      
1176.     cp_perm 1000 1000 0600 $COM/Superuser.apk /cache/SuperSU.apk
      
1177.   fi
      
1178. 
      
1179.   # Fix Samsung deep sleep issue. Affects enough millions of users to include.
      
1180.   if ($SAMSUNG); then
      
1181.     cp_perm 0 0 0700 $COM/000000deepsleep /su/su.d/000000deepsleep
      
1182.   fi
      
1183. 
      
1184.   if ($BINDSYSTEMXBIN); then
      
1185.     mkdir /su/xbin_bind
      
1186.     set_perm 0 0 0755 /su/xbin_bind
      
1187.   else
      
1188.     rm -rf /su/xbin_bind
      
1189.   fi
      
1190. 
      
1191.   if ($PATCHBOOTIMAGE); then
      
1192.     ui_print " "
      
1193.     ui_print        "******************"
      
1194.     ui_print_always "Boot image patcher"
      
1195.     ui_print        "******************"
      
1196. 
      
1197.     ui_print "- Finding boot image"
      
1198.     find_boot_image
      
1199. 
      
1200.     CONTINUE=true
      
1201.     if [ -z "$BOOTIMAGE" ]; then
      
1202.       ui_print_less "$UI_PRINT_LAST"
      
1203.       ui_print_always "--- Boot image: not found, aborting"
      
1204.       CONTINUE=false
      
1205.     else
      
1206.       ui_print "--- Boot image: $BOOTIMAGE"
      
1207.     fi
      
1208. 
      
1209.     if [ -z "$STOCKBOOTIMAGE" ]; then
      
1210.       STOCKBOOTIMAGE=$BOOTIMAGE
      
1211.     fi
      
1212. 
      
1213.     rm -rf /sutmp
      
1214.     mkdir /sutmp
      
1215. 
      
1216.     IMAGETYPE=android
      
1217.     LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --bootimg-type $BOOTIMAGE
      
1218.     if [ $? -eq 2 ]; then
      
1219.       IMAGETYPE=chromeos
      
1220.     fi
      
1221. 
      
1222.     check_zero_def "- Extracting ramdisk" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --bootimg-extract-ramdisk $BOOTIMAGE /sutmp/ramdisk.packed"
      
1223.     check_zero_def "- Decompressing ramdisk" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --ungzip /sutmp/ramdisk.packed /sutmp/ramdisk"
      
1224. 
      
1225.     if ($CONTINUE); then
      
1226.       ui_print "- Checking patch status"
      
1227.       LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --patch-test /sutmp/ramdisk
      
1228.       if [ $? -ne 0 ]; then
      
1229.         ui_print "--- Already patched, attempting to find stock backup"
      
1230. 
      
1231.         if ($CONTINUE); then
      
1232.           LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --restore /sutmp/ramdisk /sutmp/stock_boot.img
      
1233.           if [ $? -ne 0 ]; then
      
1234.             ui_print_always "--- Stock restore failed, attempting ramdisk restore"
      
1235.             CONTINUE=false
      
1236.           else
      
1237.             ui_print "--- Stock backup restored"
      
1238.             STOCKBOOTIMAGE=/sutmp/stock_boot.img
      
1239.           fi
      
1240.         fi
      
1241. 
      
1242.         check_zero_def "- Extracting ramdisk" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --bootimg-extract-ramdisk /sutmp/stock_boot.img /sutmp/ramdisk.packed"
      
1243.         check_zero_def "- Decompressing ramdisk" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --ungzip /sutmp/ramdisk.packed /sutmp/ramdisk"
      
1244.         check_zero "- Checking patch status" "" "--- Already patched, attempting ramdisk restore" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --patch-test /sutmp/ramdisk"
      
1245. 
      
1246.         if (! $CONTINUE); then
      
1247.           LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --cpio-restore /sutmp/ramdisk /sutmp/ramdisk
      
1248.           if [ $? -ne 0 ]; then
      
1249.             ui_print_always "--- Ramdisk restore failed, aborting"
      
1250.           else
      
1251.             ui_print "--- Ramdisk backup restored (OTA impossible)"
      
1252.             CONTINUE=true
      
1253.           fi
      
1254.           check_zero "- Checking patch status" "" "--- Already patched, aborting" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --patch-test /sutmp/ramdisk"
      
1255.         fi
      
1256.       else
      
1257.         ui_print "- Creating backup"
      
1258.         rm /data/stock_boot_*.img
      
1259.         rm /data/stock_boot_*.img.gz
      
1260.         rm /cache/stock_boot_*.img
      
1261.         rm /cache/stock_boot_*.img.gz
      
1262.         LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --backup $BOOTIMAGE
      
1263.         if [ $? -ne 0 ]; then
      
1264.           ui_print "--- Backup failed"
      
1265.         fi
      
1266.       fi
      
1267.     fi
      
1268. 
      
1269.     if ($CONTINUE); then
      
1270.       cp_perm 0 0 0644 /sutmp/ramdisk /sutmp/ramdisk.original
      
1271. 
      
1272.       ui_print "- Patching sepolicy"
      
1273. 
      
1274.       check_zero_def "" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --cpio-extract /sutmp/ramdisk sepolicy /sutmp/sepolicy"
      
1275. 
      
1276.       if ($CONTINUE); then
      
1277.         if ($PERMISSIVE); then
      
1278.           LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/supolicy --file /sutmp/sepolicy /sutmp/sepolicy.patched "permissive *"
      
1279.         else
      
1280.           LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/supolicy --file /sutmp/sepolicy /sutmp/sepolicy.patched
      
1281.         fi
      
1282.         if [ ! -f "/sutmp/sepolicy.patched" ]; then
      
1283.           ui_print_less "$UI_PRINT_LAST"
      
1284.           ui_print_always "--- Failure, aborting"
      
1285.           CONTINUE=false
      
1286.         fi
      
1287.       fi
      
1288. 
      
1289.       check_zero_def "" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --cpio-add /sutmp/ramdisk /sutmp/ramdisk 644 sepolicy /sutmp/sepolicy.patched"
      
1290.     fi
      
1291. 
      
1292.     check_zero_def "- Adding daemon launcher" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --cpio-add /sutmp/ramdisk /sutmp/ramdisk 700 sbin/launch_daemonsu.sh $COM/launch_daemonsu.sh"
      
1293.     check_zero_def "- Adding init script" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --cpio-add /sutmp/ramdisk /sutmp/ramdisk 750 init.supersu.rc $COM/init.supersu.rc"
      
1294. 
      
1295.     check_zero_def "- Creating mount point" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --cpio-mkdir /sutmp/ramdisk /sutmp/ramdisk 755 su"
      
1296. 
      
1297.     COMMAND="LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --patch /sutmp/ramdisk /sutmp/ramdisk $STOCKBOOTIMAGE"
      
1298.     if ($KEEPVERITY); then
      
1299.       COMMAND="$COMMAND --keep-verity"
      
1300.     fi
      
1301.     if ($KEEPFORCEENCRYPT); then
      
1302.       COMMAND="$COMMAND --keep-forceencrypt"
      
1303.     fi
      
1304.     check_zero_def "- Patching init.*.rc, fstabs, file_contexts, dm-verity" "$COMMAND"
      
1305. 
      
1306.     if [ -f "/data/custom_ramdisk_patch.sh" ]; then
      
1307.         check_zero_def "- Calling user ramdisk patch script" "sh /data/custom_ramdisk_patch.sh /sutmp/ramdisk"
      
1308.     fi
      
1309. 
      
1310.     check_zero_def "- Creating ramdisk backup" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --cpio-backup /sutmp/ramdisk.original /sutmp/ramdisk /sutmp/ramdisk"
      
1311. 
      
1312.     check_zero_def "- Compressing ramdisk" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --gzip /sutmp/ramdisk /sutmp/ramdisk.packed"
      
1313. 
      
1314.     if [ "$IMAGETYPE" = "chromeos" ]; then
      
1315.       $BIN/chromeos/futility vbutil_kernel --get-vmlinuz $STOCKBOOTIMAGE --vmlinuz-out /sutmp/boot.chromeos.img
      
1316.       STOCKBOOTIMAGE=/sutmp/boot.chromeos.img
      
1317.     fi
      
1318. 
      
1319.     check_zero_def "- Creating boot image" "LD_LIBRARY_PATH=$SYSTEMLIB /su/bin/sukernel --bootimg-replace-ramdisk $STOCKBOOTIMAGE /sutmp/ramdisk.packed /sutmp/boot.img"
      
1320. 
      
1321.     if [ "$IMAGETYPE" = "chromeos" ]; then
      
1322.       ui_print "- Signing boot image"
      
1323.       $BIN/chromeos/futility vbutil_kernel --pack /sutmp/boot.img.signed --keyblock $COM/chromeos/kernel.keyblock --signprivate $COM/chromeos/kernel_data_key.vbprivk --version 1 --vmlinuz /sutmp/boot.img --config $COM/chromeos/kernel.config --arch arm --bootloader $COM/chromeos/kernel.bootloader --flags 0x1
      
1324.       if [ -f "/sutmp/boot.img.signed" ]; then
      
1325.         rm -rf /sutmp/boot.img
      
1326.         mv /sutmp/boot.img.signed /sutmp/boot.img
      
1327.       else
      
1328.         ui_print_less "$UI_PRINT_LAST"
      
1329.         ui_print_always "--- Failure, aborting"
      
1330.         $CONTINUE=false
      
1331.       fi
      
1332.     fi
      
1333. 
      
1334.     if ($CONTINUE); then
      
1335.         # might return 1 even if we do not want to abort
      
1336.         ui_print "- Applying hex patches"
      
1337.         /su/bin/sukernel --hexpatch $COM/hexpatch /sutmp/boot.img /sutmp/boot.img
      
1338.     fi
      
1339. 
      
1340.     if [ -f "/data/custom_boot_image_patch.sh" ]; then
      
1341.         check_zero_def "- Calling user boot image patch script" "sh /data/custom_boot_image_patch.sh /sutmp/boot.img"
      
1342.     fi
      
1343. 
      
1344.     if ($CONTINUE); then
      
1345.       DEV=$(echo `resolve_link $BOOTIMAGE` | grep /dev/block/)
      
1346.       if [ $? -eq 0 ]; then
      
1347.         ui_print "- Flashing boot image"
      
1348.         dd if=/dev/zero of=$BOOTIMAGE bs=4096
      
1349.       else
      
1350.         ui_print "- Saving boot image"
      
1351.       fi
      
1352. 
      
1353.       if ($SAMSUNG); then
      
1354.         # Prevent "KERNEL IS NOT SEANDROID ENFORCING"
      
1355.         SAMSUNG_CHECK=$(cat /sutmp/boot.img | grep SEANDROIDENFORCE)
      
1356.         if [ $? -ne 0 ]; then
      
1357.           echo -n "SEANDROIDENFORCE" >> /sutmp/boot.img
      
1358.         fi
      
1359.       fi
      
1360. 
      
1361.       dd if=/sutmp/boot.img of=$BOOTIMAGE bs=4096
      
1362.     fi
      
1363. 
      
1364.     rm -rf /sutmp
      
1365.   fi
      
1366. 
      
1367.   umount /su
      
1368.   losetup -d $LOOPDEVICE
      
1369. 
      
1370.   ui_print " "
      
1371.   ui_print "*************************"
      
1372.   ui_print "    IMPORTANT NOTICES    "
      
1373.   ui_print "*************************"
      
1374. 
      
1375.   TWRP2=$(cat /tmp/recovery.log | grep "ro.twrp.version=2");
      
1376.   if [ $? -eq 0 ]; then
      
1377.     ui_print "If TWRP offers to install"
      
1378.     ui_print "SuperSU, do *NOT* let it!"
      
1379.     ui_print "*************************"
      
1380.   fi
      
1381. 
      
1382.   ui_print "First reboot may take a  "
      
1383.   ui_print "few minutes. It can also "
      
1384.   ui_print "loop a few times. Do not "
      
1385.   ui_print "interrupt the process!   "
      
1386.   ui_print "*************************"
      
1387.   ui_print " "
      
1388. 
      
1389.   if (! $LESSLOGGING); then
      
1390.     sleep 5
      
1391.   fi
      
1392. fi
      
1393. 
      
1394. ui_print "- Unmounting /system"
      
1395. umount /system
      
1396. 
      
1397. ui_print_always "- Done !"
      
1398. exit 0
      

复制代码

xiamik1

学习学习，谢谢分享………………