diff --git a/module/service.sh b/module/service.sh index 8caf9a0b..46606741 100644 --- a/module/service.sh +++ b/module/service.sh @@ -3,9 +3,9 @@ MODPATH="${0%/*}" # Conditional sensitive properties -# Magisk recovery mode -resetprop_if_match ro.bootmode recovery unknown +# Magisk Recovery Mode resetprop_if_match ro.boot.mode recovery unknown +resetprop_if_match ro.bootmode recovery unknown resetprop_if_match vendor.boot.mode recovery unknown # SELinux @@ -14,7 +14,7 @@ resetprop_if_diff ro.boot.selinux enforcing if [ -n "$(resetprop ro.build.selinux)" ]; then resetprop --delete ro.build.selinux fi -# use toybox to protect *stat* access time reading +# use toybox to protect stat access time reading if [ "$(toybox cat /sys/fs/selinux/enforce)" = "0" ]; then chmod 640 /sys/fs/selinux/enforce chmod 440 /sys/fs/selinux/policy @@ -22,25 +22,18 @@ fi # Conditional late sensitive properties -# SafetyNet/Play Integrity -{ - # must be set after boot_completed for various OEMs - until [ "$(getprop sys.boot_completed)" = "1" ]; do - sleep 1 - done - - # avoid breaking Realme fingerprint scanners - resetprop_if_diff ro.boot.flash.locked 1 - resetprop_if_diff ro.boot.realme.lockstate 1 - - # avoid breaking Oppo fingerprint scanners - resetprop_if_diff ro.boot.vbmeta.device_state locked - - # avoid breaking OnePlus display modes/fingerprint scanners - resetprop_if_diff vendor.boot.verifiedbootstate green - - # avoid breaking OnePlus/Oppo fingerprint scanners on OOS/ColorOS 12+ - resetprop_if_diff ro.boot.verifiedbootstate green - resetprop_if_diff ro.boot.veritymode enforcing - resetprop_if_diff vendor.boot.vbmeta.device_state locked -}& +# must be set after boot_completed for various OEMs +resetprop -w sys.boot_completed 0 + +# SafetyNet/Play Integrity + OEM +# avoid breaking Realme fingerprint scanners +resetprop_if_diff ro.boot.flash.locked 1 +resetprop_if_diff ro.boot.realme.lockstate 1 +# avoid breaking Oppo fingerprint scanners +resetprop_if_diff ro.boot.vbmeta.device_state locked +# avoid breaking OnePlus display modes/fingerprint scanners +resetprop_if_diff vendor.boot.verifiedbootstate green +# avoid breaking OnePlus/Oppo fingerprint scanners on OOS/ColorOS 12+ +resetprop_if_diff ro.boot.verifiedbootstate green +resetprop_if_diff ro.boot.veritymode enforcing +resetprop_if_diff vendor.boot.vbmeta.device_state locked