!1595 add customization of const.debuggable and const.build.characteristics

Merge pull request !1595 from chenmudan/build_variant

services/etc/BUILD.gn

@@ -119,8 +119,26 @@ if (defined(ohos_lite)) {
     ]
     part_name = "init"
     subsystem_name = "startup"
+    extra_paras = []
     if (target_cpu == "arm64") {
-      extra_paras = [ "const.product.cpu.abilist=arm64-v8a" ]
+      extra_paras += [ "const.product.cpu.abilist=arm64-v8a" ]
+    }
+    if (build_variant == "user") {
+      extra_paras += [
+        "const.secure=1",
+        "const.debuggable=0",
+      ]
+    } else if (build_variant == "root") {
+      extra_paras += [
+        "const.secure=0",
+        "const.debuggable=1",
+      ]
+    }
+    if (device_type != "default") {
+      extra_paras += [
+        "const.product.devicetype=${device_type}",
+        "const.build.characteristics=${device_type}",
+      ]
     }
     module_install_dir = "etc/param"
   }

services/etc/param/ohos.para

@@ -13,7 +13,7 @@
 
 const.actionable_compatible_property.enabled=false
 const.postinstall.fstab.prefix=/system
-const.secure=1
+const.secure=0
 security.perf_harden=1
 const.allow.mock.location=0
 const.debuggable=1