Added new props to service.sh

This commit is contained in:
snake-4
2024-08-17 16:22:37 +02:00
parent 6f14306f1f
commit b3767f77c9

View File

@@ -1,49 +1,51 @@
MODPATH="${0%/*}" MODPATH="${0%/*}"
. $MODPATH/common_func.sh . $MODPATH/common_func.sh
# Conditional sensitive properties # Recovery Mode
# Magisk Recovery Mode
resetprop_if_match ro.boot.mode recovery unknown resetprop_if_match ro.boot.mode recovery unknown
resetprop_if_match ro.bootmode recovery unknown resetprop_if_match ro.bootmode recovery unknown
resetprop_if_match vendor.boot.mode recovery unknown resetprop_if_match vendor.boot.mode recovery unknown
# SELinux # SELinux
resetprop_if_diff ro.boot.selinux enforcing resetprop_if_diff ro.boot.selinux enforcing
# use delete since it can be 0 or 1 for enforcing depending on OEM
if [ -n "$(resetprop ro.build.selinux)" ]; then if [ -n "$(resetprop ro.build.selinux)" ]; then
resetprop --delete ro.build.selinux resetprop --delete ro.build.selinux
fi fi
# use toybox to protect stat access time reading
# SELinux file access time
if [ "$(toybox cat /sys/fs/selinux/enforce)" = "0" ]; then if [ "$(toybox cat /sys/fs/selinux/enforce)" = "0" ]; then
chmod 640 /sys/fs/selinux/enforce chmod 640 /sys/fs/selinux/enforce
chmod 440 /sys/fs/selinux/policy chmod 440 /sys/fs/selinux/policy
fi fi
# Conditional late sensitive properties
# must be set after boot_completed for various OEMs
{ {
until [ "$(getprop sys.boot_completed)" = "1" ]; do until [ "$(getprop sys.boot_completed)" = "1" ]; do
sleep 1 sleep 1
done done
# SafetyNet/Play Integrity + OEM # Avoid bootloop on some Xiaomi devices
# avoid bootloop on some Xiaomi devices
resetprop_if_diff ro.secureboot.lockstate locked resetprop_if_diff ro.secureboot.lockstate locked
# avoid breaking Realme fingerprint scanners
# Avoid breaking Realme fingerprint scanners
resetprop_if_diff ro.boot.flash.locked 1 resetprop_if_diff ro.boot.flash.locked 1
resetprop_if_diff ro.boot.realme.lockstate 1 resetprop_if_diff ro.boot.realme.lockstate 1
# avoid breaking Oppo fingerprint scanners
# Avoid breaking Oppo fingerprint scanners
resetprop_if_diff ro.boot.vbmeta.device_state locked resetprop_if_diff ro.boot.vbmeta.device_state locked
# avoid breaking OnePlus display modes/fingerprint scanners
# Avoid breaking OnePlus display modes/fingerprint scanners
resetprop_if_diff vendor.boot.verifiedbootstate green resetprop_if_diff vendor.boot.verifiedbootstate green
# avoid breaking OnePlus/Oppo fingerprint scanners on OOS/ColorOS 12+
# Avoid breaking OnePlus/Oppo fingerprint scanners on OOS/ColorOS 12+
resetprop_if_diff ro.boot.verifiedbootstate green resetprop_if_diff ro.boot.verifiedbootstate green
resetprop_if_diff ro.boot.veritymode enforcing resetprop_if_diff ro.boot.veritymode enforcing
resetprop_if_diff vendor.boot.vbmeta.device_state locked resetprop_if_diff vendor.boot.vbmeta.device_state locked
# Other # Other
resetprop_if_diff sys.oem_unlock_allowed 0 resetprop_if_diff sys.oem_unlock_allowed 0
resetprop_if_diff ro.secure 1
resetprop_if_diff ro.adb.secure 1
resetprop_if_diff ro.build.type user
resetprop_if_diff ro.build.tags release-keys
}& }&