@@ -15,7 +15,7 @@ sdk_version_number=$(expr "$sdk_version" + 0)
1515
1616# add logcat
1717LOG_PATH=" $MODDIR /install.log"
18- LOG_TAG=" iyue_MoveCertificate "
18+ LOG_TAG=" iyue "
1919
2020# Keep only one up-to-date log
2121echo " [$LOG_TAG ] Keep only one up-to-date log" > $LOG_PATH
@@ -25,40 +25,34 @@ print_log() {
2525}
2626
2727move_custom_cert () {
28- print_log " Backup user custom certificates"
2928 if [ " $( ls -A /data/local/tmp/cert) " ]; then
3029 cp -f /data/local/tmp/cert/* $MODDIR /certificates
3130 cp -f /data/local/tmp/cert/* /data/misc/user/0/cacerts-added/
3231 else
3332 print_log " The directory '/data/local/tmp/cert' is empty."
3433 fi
35- print_log " Backup user custom certificates status:$? "
34+ print_log " Install /data/local/tmp/cert status:$? "
3635}
3736
3837fix_user_permissions () {
3938 # "Fix permissions of the system certificate directory"
40- print_log " fix user permissions: /data/misc/user/0/cacerts-added/"
4139 chown -R root:root /data/misc/user/0/cacerts-added/
4240 chmod -R 666 /data/misc/user/0/cacerts-added/
4341 chown system:system /data/misc/user/0/cacerts-added
4442 chmod 755 /data/misc/user/0/cacerts-added
45- print_log " fix user permissions status:$? "
43+ print_log " fix user certificate permissions status:$? "
4644}
4745
4846fix_system_permissions () {
49- # diff
50- print_log " fix permissions /system/etc/security/cacerts"
5147 chown root:root /system/etc/security/cacerts
5248 chown -R root:root /system/etc/security/cacerts/
5349 chmod -R 644 /system/etc/security/cacerts/
5450 chmod 755 /system/etc/security/cacerts
5551 chcon u:object_r:system_file:s0 /system/etc/security/cacerts/*
56- print_log " move cert status:$? "
52+ print_log " fix permissions /system/etc/security/cacerts status:$? "
5753}
5854
5955fix_system_permissions14 () {
60- # diff
61- print_log " fix permissions: $1 "
6256 chown -R system:system " $1 "
6357 chown root:shell " $1 "
6458 chmod -R 644 " $1 "
@@ -82,22 +76,20 @@ set_selinux_context(){
8276if [ " $sdk_version_number " -le 33 ]; then
8377 print_log " start move cert !"
8478 print_log " current sdk version is $sdk_version_number "
85- print_log " Backup system certificates "
79+ print_log " Backup / system/etc/security/cacerts "
8680 cp -u /system/etc/security/cacerts/* $MODDIR /certificates
81+ print_log " Backup /data/misc/user/0/cacerts-added"
8782 cp -u /data/misc/user/0/cacerts-added/* $MODDIR /certificates/
8883 # Android 13 or lower versions perform
89- print_log " Backup user custom certificates"
9084 move_custom_cert
9185 fix_user_permissions
9286
93- print_log " mount: /system/etc/security/cacerts"
9487 selinux_context=$( ls -Zd /system/etc/security/cacerts | awk ' {print $1}' )
9588 mount -t tmpfs tmpfs /system/etc/security/cacerts
96- print_log " mount status:$? "
89+ print_log " mount /system/etc/security/cacerts status:$? "
9790
98- print_log " move cert: /system/etc/security/cacerts"
9991 cp -f $MODDIR /certificates/* /system/etc/security/cacerts
100- print_log " move cert status:$? "
92+ print_log " Install /system/etc/security/cacerts status:$? "
10193 fix_system_permissions
10294 print_log " certificates installed"
10395 [ " $( getenforce) " = " Enforcing" ] || return 0
@@ -111,11 +103,13 @@ else
111103
112104 print_log " start move cert !"
113105 print_log " current sdk version is $sdk_version_number "
114- print_log " Backup system certificates "
106+
115107 mount -t tmpfs tmpfs $MODDIR /certificates
108+ print_log " mount $MODDIR /certificates status:$? "
109+ print_log " Backup /apex/com.android.conscrypt/cacerts"
116110 cp -u /apex/com.android.conscrypt/cacerts/* $MODDIR /certificates
111+ print_log " Backup /data/misc/user/0/cacerts-added"
117112 cp -u /data/misc/user/0/cacerts-added/* $MODDIR /certificates
118- print_log " Backup user custom certificates"
119113 move_custom_cert
120114 fix_user_permissions
121115 fix_system_permissions14 $MODDIR /certificates
127121 set_selinux_context /apex/com.android.conscrypt/cacerts $MODDIR /certificates
128122 # These two directories are mapped to the same block
129123 mount -o bind $MODDIR /certificates /apex/com.android.conscrypt/cacerts
124+ print_log " mount bind $MODDIR /certificates /apex/com.android.conscrypt/cacerts status:$? "
130125 mount -o bind $MODDIR /certificates $apex_dir /cacerts
126+ print_log " mount bind $MODDIR /certificates $apex_dir /cacerts status:$? "
131127 print_log " certificates installed"
132128fi
0 commit comments