My solution is that I put the following in my .userconfig

GAIA_PATH=${GAIA_PATH:-$(cd gaia; pwd)}
CUSTOM_SETTINGS="${GAIA_PATH}/build/custom-settings.json"
cat > "${CUSTOM_SETTINGS}.new" <<EOF
{"devtools.debugger.remote-enabled": true,
 "keyboard.ftu.enabled": false,
 "lockscreen.enabled": false,
 "phone.ring.keypad": false,
 "bootshutdown.sound.enabled": false}
EOF
if [ -f ${CUSTOM_SETTINGS} ] && cmp "${CUSTOM_SETTINGS}" 
"${CUSTOM_SETTINGS}.new" >& /dev/null; then
  rm "${CUSTOM_SETTINGS}.new"
else
  mv "${CUSTOM_SETTINGS}.new" "${CUSTOM_SETTINGS}"
fi

and this tweaks a bunch of stuff for all of my builds without having to modify 
any source code.

Dave Hylands

----- Original Message -----
> From: "Julien Wajsberg" <jwajsb...@mozilla.com>
> To: "Ben Francis" <bfran...@mozilla.com>
> Cc: "Dave Hylands" <dhyla...@mozilla.com>, "Paul Theriault" 
> <ptheria...@mozilla.com>, "dev-b2g"
> <dev-b2g@lists.mozilla.org>, "Jim Blandy" <jbla...@mozilla.com>, "Stefan 
> Arentz" <sare...@mozilla.com>
> Sent: Wednesday, September 11, 2013 12:05:48 PM
> Subject: Re: [b2g] Security implications of remote debugging on devices
> 
> Le 11/09/2013 11:43, Ben Francis a écrit :
> > On Wed, Sep 11, 2013 at 11:39 AM, Dave Hylands <dhyla...@mozilla.com>
> > wrote:
> >
> >> So, the original changes (adb disabled when the screen was locked) and
> >> remote debugging disabled after 12 hours were done due to Bug 810092 and
> >> Bug 874484.
> >>
> >> I sent a post to Dev-B2G and Dev-Gaia about this on Aug 17.
> >>
> >> https://groups.google.com/forum/#!msg/mozilla.dev.b2g/vl2bczVZb2Y/Y_1U4x7d3pwJ
> >>
> >> Fabrice also recently landed bug 912898 which prevents adb from being
> >> disconnected while a debug session is active.
> >>
> > Thanks Dave, and Fabrice. And sorry I missed your email to
> > dev-gaia/dev-b2g.
> >
> > I have filed bug
> > 915061<https://bugzilla.mozilla.org/show_bug.cgi?id=915061>to disable
> > these security features with a Gaia build flag.
> >
> 
> I already use a local patch to always enable adb, could be useful to you.
> 
> It sometimes needs some conflict merging when Fabrice or Dave messes up
> with this ;)
> 
_______________________________________________
dev-b2g mailing list
dev-b2g@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-b2g

Reply via email to