From 8b20a94392c6f9684892e3b990e367a335e9904d Mon Sep 17 00:00:00 2001 From: snake-4 <18491360+snake-4@users.noreply.github.com> Date: Sat, 17 Aug 2024 21:05:32 +0200 Subject: [PATCH] Updated service.sh --- module/template/service.sh | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/module/template/service.sh b/module/template/service.sh index 3590c56..728eea8 100644 --- a/module/template/service.sh +++ b/module/template/service.sh @@ -1,7 +1,9 @@ MODPATH="${0%/*}" . $MODPATH/common_func.sh -# Recovery Mode +### Conditional sensitive properties + +# Magisk Recovery Mode resetprop_if_match ro.boot.mode recovery unknown resetprop_if_match ro.bootmode recovery unknown resetprop_if_match vendor.boot.mode recovery unknown @@ -12,12 +14,14 @@ if [ -n "$(resetprop ro.build.selinux)" ]; then resetprop --delete ro.build.selinux fi -# SELinux file access time +# Toybox cat is used to preserve the file access time if [ "$(toybox cat /sys/fs/selinux/enforce)" = "0" ]; then chmod 640 /sys/fs/selinux/enforce chmod 440 /sys/fs/selinux/policy fi +### Conditional late sensitive properties + { until [ "$(getprop sys.boot_completed)" = "1" ]; do sleep 1 @@ -43,9 +47,6 @@ resetprop_if_diff vendor.boot.vbmeta.device_state locked # Other resetprop_if_diff sys.oem_unlock_allowed 0 -resetprop_if_diff ro.secure 1 resetprop_if_diff ro.adb.secure 1 -resetprop_if_diff ro.build.type user -resetprop_if_diff ro.build.tags release-keys }&