PlayIntegrityFix/module/service.sh

57 lines
1.7 KiB
Bash
Raw Normal View History

# Conditional sensitive properties
2023-11-25 03:58:30 +08:00
resetprop_if_diff() {
2024-02-08 19:33:37 +08:00
local NAME="$1"
local EXPECTED="$2"
local CURRENT="$(resetprop "$NAME")"
[ -z "$CURRENT" ] || [ "$CURRENT" = "$EXPECTED" ] || resetprop "$NAME" "$EXPECTED"
2023-11-25 03:58:30 +08:00
}
2023-12-01 01:28:01 +08:00
resetprop_if_match() {
2024-02-08 19:33:37 +08:00
local NAME="$1"
local CONTAINS="$2"
local VALUE="$3"
[[ "$(resetprop "$NAME")" = *"$CONTAINS"* ]] && resetprop "$NAME" "$VALUE"
}
2023-11-25 03:58:30 +08:00
# Magisk recovery mode
resetprop_if_match ro.bootmode recovery unknown
resetprop_if_match ro.boot.mode recovery unknown
resetprop_if_match vendor.boot.mode recovery unknown
2023-11-25 03:58:30 +08:00
# SELinux
2024-02-16 09:50:50 +08:00
resetprop_if_diff ro.boot.selinux enforcing
# use delete since it can be 0 or 1 for enforcing depending on OEM
if [ -n "$(resetprop ro.build.selinux)" ]; then
resetprop --delete ro.build.selinux
fi
2023-12-01 01:28:01 +08:00
# use toybox to protect *stat* access time reading
2024-02-16 09:50:50 +08:00
if [ "$(toybox cat /sys/fs/selinux/enforce)" = "0" ]; then
2023-11-25 09:13:22 +08:00
chmod 640 /sys/fs/selinux/enforce
chmod 440 /sys/fs/selinux/policy
fi
2024-02-16 09:50:50 +08:00
# Late props which must be set after boot_completed
2024-02-08 19:33:37 +08:00
{
2024-03-18 07:34:07 +08:00
until [[ "$(getprop sys.boot_completed)" == "1" ]]; do
sleep 1
done
# SafetyNet/Play Integrity | Avoid breaking Realme fingerprint scanners
resetprop ro.boot.flash.locked 1
# SafetyNet/Play Integrity | Avoid breaking Oppo fingerprint scanners
resetprop ro.boot.vbmeta.device_state locked
# SafetyNet/Play Integrity | Avoid breaking OnePlus display modes/fingerprint scanners
resetprop vendor.boot.verifiedbootstate green
# SafetyNet/Play Integrity | Avoid breaking OnePlus display modes/fingerprint scanners on OOS 12
resetprop ro.boot.verifiedbootstate green
resetprop ro.boot.veritymode enforcing
resetprop vendor.boot.vbmeta.device_state locked
2024-02-08 19:33:37 +08:00
}&