@@ -276,161 +276,165 @@ EOF
276276
277277# # android GID
278278# a list of all android groups
279- AID_GROUPS=" AID_ROOT :0
280- AID_DAEMON :1
281- AID_BIN :2
282- AID_SYS :3
283- AID_SYSTEM :1000
284- AID_RADIO :1001
285- AID_BLUETOOTH :1002
286- AID_GRAPHICS :1003
287- AID_INPUT :1004
288- AID_AUDIO :1005
289- AID_CAMERA :1006
290- AID_LOG :1007
291- AID_COMPASS :1008
292- AID_MOUNT :1009
293- AID_WIFI :1010
294- AID_ADB :1011
295- AID_INSTALL :1012
296- AID_MEDIA :1013
297- AID_DHCP :1014
298- AID_SDCARD_RW :1015
299- AID_VPN :1016
300- AID_KEYSTORE :1017
301- AID_USB :1018
302- AID_DRM :1019
303- AID_MDNSR :1020
304- AID_GPS :1021
305- AID_UNUSED1 :1022
306- AID_MEDIA_RW :1023
307- AID_MTP :1024
308- AID_UNUSED2 :1025
309- AID_DRMRPC :1026
310- AID_NFC :1027
311- AID_SDCARD_R :1028
312- AID_CLAT :1029
313- AID_LOOP_RADIO :1030
314- AID_MEDIA_DRM :1031
315- AID_PACKAGE_INFO :1032
316- AID_SDCARD_PICS :1033
317- AID_SDCARD_AV :1034
318- AID_SDCARD_ALL :1035
319- AID_LOGD :1036
320- AID_SHARED_RELRO :1037
321- AID_DBUS :1038
322- AID_TLSDATE :1039
323- AID_MEDIA_EX :1040
324- AID_AUDIOSERVER :1041
325- AID_METRICS_COLL :1042
326- AID_METRICSD :1043
327- AID_WEBSERV :1044
328- AID_DEBUGGERD :1045
329- AID_MEDIA_CODEC :1046
330- AID_CAMERASERVER :1047
331- AID_FIREWALL :1048
332- AID_TRUNKS :1049
333- AID_NVRAM :1050
334- AID_DNS :1051
335- AID_DNS_TETHER :1052
336- AID_WEBVIEW_ZYGOTE :1053
337- AID_VEHICLE_NETWORK :1054
338- AID_MEDIA_AUDIO :1055
339- AID_MEDIA_VIDEO :1056
340- AID_MEDIA_IMAGE :1057
341- AID_TOMBSTONED :1058
342- AID_MEDIA_OBB :1059
343- AID_ESE :1060
344- AID_OTA_UPDATE :1061
345- AID_AUTOMOTIVE_EVS :1062
346- AID_LOWPAN :1063
347- AID_HSM :1064
348- AID_RESERVED_DISK :1065
349- AID_STATSD :1066
350- AID_INCIDENTD :1067
351- AID_SECURE_ELEMENT :1068
352- AID_LMKD :1069
353- AID_LLKD :1070
354- AID_IORAPD :1071
355- AID_GPU_SERVICE :1072
356- AID_NETWORK_STACK :1073
357- AID_GSID :1074
358- AID_FSVERITY_CERT :1075
359- AID_CREDSTORE :1076
360- AID_EXTERNAL_STORAGE :1077
361- AID_EXT_DATA_RW :1078
362- AID_EXT_OBB_RW :1079
363- AID_CONTEXT_HUB :1080
364- AID_VIRTUALIZATIONSERVICE :1081
365- AID_ARTD :1082
366- AID_UWB :1083
367- AID_THREAD_NETWORK :1084
368- AID_DICED :1085
369- AID_DMESGD :1086
370- AID_JC_WEAVER :1087
371- AID_JC_STRONGBOX :1088
372- AID_JC_IDENTITYCRED :1089
373- AID_SDK_SANDBOX :1090
374- AID_SECURITY_LOG_WRITER :1091
375- AID_PRNG_SEEDER :1092
376- AID_SHELL :2000
377- AID_CACHE :2001
378- AID_DIAG :2002
379- AID_NET_BT_ADMIN :3001
380- AID_NET_BT :3002
381- AID_INET :3003
382- AID_NET_RAW :3004
383- AID_NET_ADMIN :3005
384- AID_NET_BW_STATS :3006
385- AID_NET_BW_ACCT :3007
386- AID_READPROC :3009
387- AID_WAKELOCK :3010
388- AID_UHID :3011
389- AID_READTRACEFS :3012
390- AID_OEM_RESERVED_2_START :5000
391- AID_OEM_RESERVED_2_END :5999
392- AID_SYSTEM_RESERVED_START :6000
393- AID_SYSTEM_RESERVED_END :6499
394- AID_ODM_RESERVED_START :6500
395- AID_ODM_RESERVED_END :6999
396- AID_PRODUCT_RESERVED_START :7000
397- AID_PRODUCT_RESERVED_END :7499
398- AID_SYSTEM_EXT_RESERVED_START :7500
399- AID_SYSTEM_EXT_RESERVED_END :7999
400- AID_EVERYBODY :9997
401- AID_MISC :9998
402- AID_NOBODY :9999
403- AID_APP :10000
404- AID_APP_START :10000
405- AID_APP_END :19999
406- AID_CACHE_GID_START :20000
407- AID_CACHE_GID_END :29999
408- AID_EXT_GID_START :30000
409- AID_EXT_GID_END :39999
410- AID_EXT_CACHE_GID_START :40000
411- AID_EXT_CACHE_GID_END :49999
412- AID_SHARED_GID_START :50000
413- AID_SHARED_GID_END :59999
414- AID_OVERFLOWUID :65534
415- AID_SDK_SANDBOX_PROCESS_START :20000
416- AID_SDK_SANDBOX_PROCESS_END :29999
417- AID_ISOLATED_START :90000
418- AID_ISOLATED_END :99999
419- AID_USER :100000
420- AID_USER_OFFSET :100000
421- AID_A400 :50400
422- AID_u0_a400_cache :20400
279+ AID_GROUPS=" aid_ROOT :0
280+ aid_DAEMON :1
281+ aid_BIN :2
282+ aid_SYS :3
283+ aid_SYSTEM :1000
284+ aid_RADIO :1001
285+ aid_BLUETOOTH :1002
286+ aid_GRAPHICS :1003
287+ aid_INPUT :1004
288+ aid_AUDIO :1005
289+ aid_CAMERA :1006
290+ aid_LOG :1007
291+ aid_COMPASS :1008
292+ aid_MOUNT :1009
293+ aid_WIFI :1010
294+ aid_ADB :1011
295+ aid_INSTALL :1012
296+ aid_MEDIA :1013
297+ aid_DHCP :1014
298+ aid_SDCARD_RW :1015
299+ aid_VPN :1016
300+ aid_KEYSTORE :1017
301+ aid_USB :1018
302+ aid_DRM :1019
303+ aid_MDNSR :1020
304+ aid_GPS :1021
305+ aid_UNUSED1 :1022
306+ aid_MEDIA_RW :1023
307+ aid_MTP :1024
308+ aid_UNUSED2 :1025
309+ aid_DRMRPC :1026
310+ aid_NFC :1027
311+ aid_SDCARD_R :1028
312+ aid_CLAT :1029
313+ aid_LOOP_RADIO :1030
314+ aid_MEDIA_DRM :1031
315+ aid_PACKAGE_INFO :1032
316+ aid_SDCARD_PICS :1033
317+ aid_SDCARD_AV :1034
318+ aid_SDCARD_ALL :1035
319+ aid_LOGD :1036
320+ aid_SHARED_RELRO :1037
321+ aid_DBUS :1038
322+ aid_TLSDATE :1039
323+ aid_MEDIA_EX :1040
324+ aid_AUDIOSERVER :1041
325+ aid_METRICS_COLL :1042
326+ aid_METRICSD :1043
327+ aid_WEBSERV :1044
328+ aid_DEBUGGERD :1045
329+ aid_MEDIA_CODEC :1046
330+ aid_CAMERASERVER :1047
331+ aid_FIREWALL :1048
332+ aid_TRUNKS :1049
333+ aid_NVRAM :1050
334+ aid_DNS :1051
335+ aid_DNS_TETHER :1052
336+ aid_WEBVIEW_ZYGOTE :1053
337+ aid_VEHICLE_NETWORK :1054
338+ aid_MEDIA_AUDIO :1055
339+ aid_MEDIA_VIDEO :1056
340+ aid_MEDIA_IMAGE :1057
341+ aid_TOMBSTONED :1058
342+ aid_MEDIA_OBB :1059
343+ aid_ESE :1060
344+ aid_OTA_UPDATE :1061
345+ aid_AUTOMOTIVE_EVS :1062
346+ aid_LOWPAN :1063
347+ aid_HSM :1064
348+ aid_RESERVED_DISK :1065
349+ aid_STATSD :1066
350+ aid_INCIDENTD :1067
351+ aid_SECURE_ELEMENT :1068
352+ aid_LMKD :1069
353+ aid_LLKD :1070
354+ aid_IORAPD :1071
355+ aid_GPU_SERVICE :1072
356+ aid_NETWORK_STACK :1073
357+ aid_GSID :1074
358+ aid_FSVERITY_CERT :1075
359+ aid_CREDSTORE :1076
360+ aid_EXTERNAL_STORAGE :1077
361+ aid_EXT_DATA_RW :1078
362+ aid_EXT_OBB_RW :1079
363+ aid_CONTEXT_HUB :1080
364+ aid_VIRTUALIZATIONSERVICE :1081
365+ aid_ARTD :1082
366+ aid_UWB :1083
367+ aid_THREAD_NETWORK :1084
368+ aid_DICED :1085
369+ aid_DMESGD :1086
370+ aid_JC_WEAVER :1087
371+ aid_JC_STRONGBOX :1088
372+ aid_JC_IDENTITYCRED :1089
373+ aid_SDK_SANDBOX :1090
374+ aid_SECURITY_LOG_WRITER :1091
375+ aid_PRNG_SEEDER :1092
376+ aid_SHELL :2000
377+ aid_CACHE :2001
378+ aid_DIAG :2002
379+ aid_NET_BT_ADMIN :3001
380+ aid_NET_BT :3002
381+ aid_INET :3003
382+ aid_NET_RAW :3004
383+ aid_NET_ADMIN :3005
384+ aid_NET_BW_STATS :3006
385+ aid_NET_BW_ACCT :3007
386+ aid_READPROC :3009
387+ aid_WAKELOCK :3010
388+ aid_UHID :3011
389+ aid_READTRACEFS :3012
390+ aid_OEM_RESERVED_2_START :5000
391+ aid_OEM_RESERVED_2_END :5999
392+ aid_SYSTEM_RESERVED_START :6000
393+ aid_SYSTEM_RESERVED_END :6499
394+ aid_ODM_RESERVED_START :6500
395+ aid_ODM_RESERVED_END :6999
396+ aid_PRODUCT_RESERVED_START :7000
397+ aid_PRODUCT_RESERVED_END :7499
398+ aid_SYSTEM_EXT_RESERVED_START :7500
399+ aid_SYSTEM_EXT_RESERVED_END :7999
400+ aid_EVERYBODY :9997
401+ aid_MISC :9998
402+ aid_NOBODY :9999
403+ aid_APP :10000
404+ aid_APP_START :10000
405+ aid_APP_END :19999
406+ aid_CACHE_GID_START :20000
407+ aid_CACHE_GID_END :29999
408+ aid_EXT_GID_START :30000
409+ aid_EXT_GID_END :39999
410+ aid_EXT_CACHE_GID_START :40000
411+ aid_EXT_CACHE_GID_END :49999
412+ aid_SHARED_GID_START :50000
413+ aid_SHARED_GID_END :59999
414+ aid_OVERFLOWUID :65534
415+ aid_SDK_SANDBOX_PROCESS_START :20000
416+ aid_SDK_SANDBOX_PROCESS_END :29999
417+ aid_ISOLATED_START :90000
418+ aid_ISOLATED_END :99999
419+ aid_USER :100000
420+ aid_USER_OFFSET :100000
421+ aid_A400 :50400
422+ aid_u0_a400_cache :20400
423423"
424+
425+ # # Own /etc/group & /etc/gshadow
426+ chmod u+rw ${fs} /etc/group
427+ chmod u+rw ${fs} /etc/gshadow
428+
424429for group in $AID_GROUPS ; do
425430 if grep -q " $( echo $group | cut -d : -f 2) " /etc/group; then
426431 echo -e " [\e[1;32mF\e[0m]\tGroup $group exists"
427432 else
428433 echo -e " [\e[1;31mM\e[0m]\tGroup $group does not exist"
429434
430435 # add group to /etc/group and /etc/gshadow
431- echo $( echo $group | cut -d : -f 1) :x:$( echo $group | cut -d : -f 2) : >> /etc/group
432- echo $( echo $group | cut -d : -f 1) :* :: >> /etc/gshadow
436+ echo $( echo $group | cut -d : -f 1) :x:$( echo $group | cut -d : -f 2) :root,aid_ $( id -un ) >> /etc/group
437+ echo $( echo $group | cut -d : -f 1) :* ::root,aid_ $( id -un ) >> /etc/gshadow
433438 echo -e " [\e[1;32mF\e[0m]\tGroup $group added"
434- usermod -a -G $( echo $group | cut -d : -f 1) $( whoami)
435439 fi
436440done
0 commit comments