Rk3568安卓开启bootloader锁

源码路径：

frameworks/base/services/core/java/com/android/server/oemlock/OemLockService.java

排查过程：看到函数isDeviceOemUnlocked中根据ro.boot.flash.locked来判断OEM是否解锁的，rk方案是没有放出对这个值修改的UI的。

private static final String FLASH_LOCK_PROP = "ro.boot.flash.locked";

private static final String FLASH_LOCK_UNLOCKED = "0"

public boolean isDeviceOemUnlocked() {

    enforceOemUnlockReadPermission();

    String locked = SystemProperties.get(FLASH_LOCK_PROP);

    switch (locked) {

        case FLASH_LOCK_UNLOCKED:

            return true;

        default:

            return false;

    }

}

但是这个值会根据/system/core/init/init.cpp中的ro.boot.verifiedbootstate值被初始化。ro.boot.verifiedbootstate 代表着BootLoader的解锁状态。

static void export_oem_lock_status() {

    if (!android::base::GetBoolProperty("ro.oem_unlock_supported", false)) {

        return;

    }

    SetProperty(

            "ro.boot.flash.locked",

            android::base::GetProperty("ro.boot.verifiedbootstate", "") == "orange" ? "0" : "1");

}

根据这个描述我们可以看出只要androidboot.verifiedbootstate=green即可。但因为ro.boot.verifiedbootstate的值是根据kernel中/proc/cmdline中的androidboot.verifiedbootstate值传递过来的因此，在源码中是找不到ro.boot.verifiedbootstate的值的初始化赋值的，因此修改如下：

修改路径：device/rockchip/common/BoardConfig.mk

解决方法：把/proc/cmdline 中的变量androidboot.verifiedbootstate=orange 改为 androidboot.verifiedbootstate=green即可。

diff --git a/rockchip/common/BoardConfig.mk b/rockchip/common/BoardConfig.mk

index d642ffd..76ee364 100755

--- a/rockchip/common/BoardConfig.mk

+++ b/rockchip/common/BoardConfig.mk

@@ -86,7 +86,7 @@ endif

 ifeq ($(BOARD_AVB_ENABLE), true)

 BOARD_KERNEL_CMDLINE := androidboot.wificountrycode=CN androidboot.hardware=rk30board androidboot.console=ttyFIQ0 firmware_class.path=/vendor/etc/firmware init=/init rootwait ro init=/init

 else # BOARD_AVB_ENABLE is false

-BOARD_KERNEL_CMDLINE := console=ttyFIQ0 androidboot.baseband=N/A androidboot.wificountrycode=CN androidboot.veritymode=enforcing androidboot.hardware=rk30board androidboot.console=ttyFIQ0 androidboot.verifiedbootstate=orange firmware_class.path=/vendor/etc/firmware init=/init rootwait ro

+BOARD_KERNEL_CMDLINE := console=ttyFIQ0 androidboot.baseband=N/A androidboot.wificountrycode=CN androidboot.veritymode=enforcing androidboot.hardware=rk30board androidboot.console=ttyFIQ0 androidboot.verifiedbootstate=yellow firmware_class.path=/vendor/etc/firmware init=/init rootwait ro

 endif # BOARD_AVB_ENABLE

 BOARD_KERNEL_CMDLINE += loop.max_part=7

diff --git a/rockchip/common/BoardConfig_AB.mk b/rockchip/common/BoardConfig_AB.mk

index 113d6b6..b923301 100755

--- a/rockchip/common/BoardConfig_AB.mk

+++ b/rockchip/common/BoardConfig_AB.mk

@@ -75,7 +75,7 @@ endif

 ifeq ($(strip $(BOARD_AVB_ENABLE)), true)

     BOARD_KERNEL_CMDLINE := androidboot.wificountrycode=CN androidboot.hardware=rk30board androidboot.console=ttyFIQ0 firmware_class.path=/vendor/etc/firmware init=/init rootwait ro init=/init

 else

-    BOARD_KERNEL_CMDLINE := console=ttyFIQ0 androidboot.baseband=N/A androidboot.wificountrycode=CN androidboot.veritymode=enforcing androidboot.hardware=rk30board androidboot.console=ttyFIQ0 androidboot.verifiedbootstate=orange firmware_class.path=/vendor/etc/firmware init=/init rootwait ro init=/init

+    BOARD_KERNEL_CMDLINE := console=ttyFIQ0 androidboot.baseband=N/A androidboot.wificountrycode=CN androidboot.veritymode=enforcing androidboot.hardware=rk30board androidboot.console=ttyFIQ0 androidboot.verifiedbootstate=yellow firmware_class.path=/vendor/etc/firmware init=/init rootwait ro init=/init

 endif

 ifneq ($(strip $(BOARD_SELINUX_ENFORCING)), true)

     BOARD_KERNEL_CMDLINE += androidboot.selinux=permissive

diff --git a/rockchip/rk356x/ok3568_r/bootanimation.zip b/rockchip/rk356x/ok3568_r/bootanimation.zip

old mode 100755

new mode 100644

index 04fc7c5..b133a7e

Binary files a/rockchip/rk356x/ok3568_r/bootanimation.zip and b/rockchip/rk356x/ok3568_r/bootanimation.zip differ