br0kenpixel/Zygisk-Assistant
1
0
Fork 0
mirror of https://github.com/snake-4/Zygisk-Assistant.git synced 2025-09-06 06:37:02 +00:00
Code Issues Packages Projects Releases 1 Wiki Activity

Sync boot scripts to PlayIntegrityFork b427736

Browse Source
This commit is contained in:
snake-4
2024-09-05 00:02:01 +02:00
parent 8b20a94392
commit 1304dca810
2 changed files with 14 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
module/template/post-fs-data.sh
View File

@@ -24,6 +24,7 @@ done
for PROP in $(resetprop | grep -oE 'ro.*.build.type'); do for PROP in $(resetprop | grep -oE 'ro.*.build.type'); do
resetprop_if_diff $PROP user resetprop_if_diff $PROP user
done done
resetprop_if_diff ro.adb.secure 1
resetprop_if_diff ro.debuggable 0 resetprop_if_diff ro.debuggable 0
resetprop_if_diff ro.force.debuggable 0 resetprop_if_diff ro.force.debuggable 0
resetprop_if_diff ro.secure 1 resetprop_if_diff ro.secure 1

25
module/template/service.sh
View File

@@ -1,7 +1,7 @@
MODPATH="${0%/*}" MODPATH="${0%/*}"
. $MODPATH/common_func.sh . $MODPATH/common_func.sh
### Conditional sensitive properties # Conditional sensitive properties
# Magisk Recovery Mode # Magisk Recovery Mode
resetprop_if_match ro.boot.mode recovery unknown resetprop_if_match ro.boot.mode recovery unknown
@@ -10,43 +10,40 @@ resetprop_if_match vendor.boot.mode recovery unknown
# SELinux # SELinux
resetprop_if_diff ro.boot.selinux enforcing resetprop_if_diff ro.boot.selinux enforcing
# use delete since it can be 0 or 1 for enforcing depending on OEM
if [ -n "$(resetprop ro.build.selinux)" ]; then if [ -n "$(resetprop ro.build.selinux)" ]; then
resetprop --delete ro.build.selinux resetprop --delete ro.build.selinux
fi fi
# use toybox to protect stat access time reading
# Toybox cat is used to preserve the file access time
if [ "$(toybox cat /sys/fs/selinux/enforce)" = "0" ]; then if [ "$(toybox cat /sys/fs/selinux/enforce)" = "0" ]; then
chmod 640 /sys/fs/selinux/enforce chmod 640 /sys/fs/selinux/enforce
chmod 440 /sys/fs/selinux/policy chmod 440 /sys/fs/selinux/policy
fi fi
### Conditional late sensitive properties # Conditional late sensitive properties
# must be set after boot_completed for various OEMs
{ {
until [ "$(getprop sys.boot_completed)" = "1" ]; do until [ "$(getprop sys.boot_completed)" = "1" ]; do
sleep 1 sleep 1
done done
# Avoid bootloop on some Xiaomi devices # SafetyNet/Play Integrity + OEM
# avoid bootloop on some Xiaomi devices
resetprop_if_diff ro.secureboot.lockstate locked resetprop_if_diff ro.secureboot.lockstate locked
# avoid breaking Realme fingerprint scanners
# Avoid breaking Realme fingerprint scanners
resetprop_if_diff ro.boot.flash.locked 1 resetprop_if_diff ro.boot.flash.locked 1
resetprop_if_diff ro.boot.realme.lockstate 1 resetprop_if_diff ro.boot.realme.lockstate 1
# avoid breaking Oppo fingerprint scanners
# Avoid breaking Oppo fingerprint scanners
resetprop_if_diff ro.boot.vbmeta.device_state locked resetprop_if_diff ro.boot.vbmeta.device_state locked
# avoid breaking OnePlus display modes/fingerprint scanners
# Avoid breaking OnePlus display modes/fingerprint scanners
resetprop_if_diff vendor.boot.verifiedbootstate green resetprop_if_diff vendor.boot.verifiedbootstate green
# avoid breaking OnePlus/Oppo fingerprint scanners on OOS/ColorOS 12+
# Avoid breaking OnePlus/Oppo fingerprint scanners on OOS/ColorOS 12+
resetprop_if_diff ro.boot.verifiedbootstate green resetprop_if_diff ro.boot.verifiedbootstate green
resetprop_if_diff ro.boot.veritymode enforcing resetprop_if_diff ro.boot.veritymode enforcing
resetprop_if_diff vendor.boot.vbmeta.device_state locked resetprop_if_diff vendor.boot.vbmeta.device_state locked
# Other # Other
resetprop_if_diff sys.oem_unlock_allowed 0 resetprop_if_diff sys.oem_unlock_allowed 0
resetprop_if_diff ro.adb.secure 1
}& }&