From a52efde275fb1dfca7db1194097a3190a7dc07fb Mon Sep 17 00:00:00 2001
From: Jonathan Klee <jonathan.klee@e.email>
Date: Wed, 22 Oct 2025 08:50:06 +0200
Subject: [PATCH] Do not ship ih8sn on user builds

---
 config/common.mk | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/config/common.mk b/config/common.mk
index 1dd08ec..c9fb75e 100644
--- a/config/common.mk
+++ b/config/common.mk
@@ -43,6 +43,12 @@ PRODUCT_COPY_FILES += \
     $(VENDOR_PATH)/config/permissions/eos-permissions.xml:$(TARGET_COPY_OUT_SYSTEM)/etc/default-permissions/eos-permissions.xml \
     $(VENDOR_PATH)/config/permissions/eos-allowlist.xml:$(TARGET_COPY_OUT_SYSTEM)/etc/sysconfig/eos-allowlist.xml
 
+ifneq ($(filter user,$(TARGET_BUILD_VARIANT)),)
+  # Do not include ih8sn on user build.
+  # Indeed, some security SDKs included in 3rd party apps can detect it.
+  INCLUDE_IH8SN ?= false
+endif
+
 # SafetyNet compatibility
 ifneq ($(filter official community partner,$(RELEASE_TYPE)),)
   # Ship ih8sn on community & official builds
-- 
GitLab