You've already forked PlayIntegrityFork
mirror of
https://github.com/osm0sis/PlayIntegrityFork.git
synced 2025-09-06 06:37:06 +00:00
osm0sis
9ef7a7f04e
This reverts commit 0bc9a45.
Cater to the lowest common denominator (older Magisk) at least until after next Magisk stable
48 lines
1.4 KiB
Bash
48 lines
1.4 KiB
Bash
MODPATH="${0%/*}"
|
|
. $MODPATH/common_func.sh
|
|
|
|
# Conditional sensitive properties
|
|
|
|
# Magisk Recovery Mode
|
|
resetprop_if_match ro.boot.mode recovery unknown
|
|
resetprop_if_match ro.bootmode recovery unknown
|
|
resetprop_if_match vendor.boot.mode recovery unknown
|
|
|
|
# SELinux
|
|
resetprop_if_diff ro.boot.selinux enforcing
|
|
# use delete since it can be 0 or 1 for enforcing depending on OEM
|
|
if [ -n "$(resetprop ro.build.selinux)" ]; then
|
|
resetprop --delete ro.build.selinux
|
|
fi
|
|
# use toybox to protect stat access time reading
|
|
if [ "$(toybox cat /sys/fs/selinux/enforce)" = "0" ]; then
|
|
chmod 640 /sys/fs/selinux/enforce
|
|
chmod 440 /sys/fs/selinux/policy
|
|
fi
|
|
|
|
# Conditional late sensitive properties
|
|
|
|
# must be set after boot_completed for various OEMs
|
|
{
|
|
until [ "$(getprop sys.boot_completed)" = "1" ]; do
|
|
sleep 1
|
|
done
|
|
|
|
# SafetyNet/Play Integrity + OEM
|
|
# avoid breaking Realme fingerprint scanners
|
|
resetprop_if_diff ro.boot.flash.locked 1
|
|
resetprop_if_diff ro.boot.realme.lockstate 1
|
|
# avoid breaking Oppo fingerprint scanners
|
|
resetprop_if_diff ro.boot.vbmeta.device_state locked
|
|
# avoid breaking OnePlus display modes/fingerprint scanners
|
|
resetprop_if_diff vendor.boot.verifiedbootstate green
|
|
# avoid breaking OnePlus/Oppo fingerprint scanners on OOS/ColorOS 12+
|
|
resetprop_if_diff ro.boot.verifiedbootstate green
|
|
resetprop_if_diff ro.boot.veritymode enforcing
|
|
resetprop_if_diff vendor.boot.vbmeta.device_state locked
|
|
|
|
# Other
|
|
resetprop_if_diff sys.oem_unlock_allowed 0
|
|
|
|
}&
|