tree a673645c92a5ee13607841c0e840f46fc0a9aa98
parent 87dabc941a0cb533ca789ccb7db88605c9e78b62
author Danny Lin <danny@kdrag0n.dev> 1602055494 -0700
committer Tim Zimmermann <tim@linux4.de> 1711259058 +0100
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEEuwYxAyE4TRnuhLgPbcIaY/gZxe8FAmX/vbIACgkQbcIaY/gZ
 xe8N2A/8CAsU/ZB+G/VijTFkFel/0Ecnd5y7zFq5ilN/0JlII8WVt/dcTytlh4Z7
 lEBfycLrF27Eg0f/OjygdWAlt97zIeBf7GLTTT9W8AC51BeVDxcEC2KqV69ESeTT
 UfM3xBGeH1gg0cZv/CUEAxys60vA4jIIB+ej/rbcKQRP1TN23lfrlzkyNvRt41+W
 ZniDc61AMr/PCk2L8pBl2tQrmONdbJXvX1EWNQr+mEc/hFVjxwFMxcsv+nRV/A8D
 bMfJoM3NVtRv9fJTLXAkWrBHvgf/XOZVhO0tPRywJDWZ+XdBRVgutpq+y6C863db
 xjuSKfPwXf8zMGF++TS2YrcytJQAR+76oxdezeoc20dzyzgz4tk9biJqY7appwwp
 IpRMmUEBKqm2XrjP3GOG2UsHnKlC9d/vxSQGlTJqhLEH+BQ/FTrzcE1QQqX38xKO
 gPCFIbH50siamCymxHXwFVYnkTQp3XWW2moTbf1Tha9pj89taJBMB+ZmNJgq7sMj
 Vo0Xt8HA6srxYMbQ8KUPjlkEwzoaK3k9nnTje9ZzHMrP9fYgZykzy8TpTxOZu7hy
 WSqITm4mjroVesc7QjmDSO2hbg3qTywQyStU56Hn16EV/aGWYLccj8LvlAYrAxur
 NVYRLc5JOybe91By1dNcOx2DSXVacjkPtQVXiaiZjM3Wezr1nNc=
 =7dfq
 -----END PGP SIGNATURE-----

init: Report valid verified boot for SafetyNet checks

Google's SafetyNet attestation includes checks for the integrity of the
verified boot chain, as reported by some ro.boot.* properties normally
passed by the bootloader. Reporting successful, valid values helps pass
SafetyNet checks, as long as other system state is intact.

However, the real prop values must be retained in recovery/fastbootd in
order for fastbootd to allow/deny flashing correctly based on the
bootloader lock state. This is accomplished a simple build time conditional,
to have the code bail out early when built for recovery. This is more reliable
and works across all OEMs rather than androidboot.mode

Given that CalyxOS is meant for usage with a locked bootloader, we only
need to spoof the value of verified boot state from yellow to green.
The other values are already acceptable, so we don't touch them

Co-authored-by: Chirayu Desai <chirayudesai1@gmail.com>
Co-authored-by: Michael Bestas <mkbestas@gmail.com>
Change-Id: I66d23fd91d82906b00d5eb020668f01ae83ec31f