PlayIntegrityFix/module/post-fs-data.sh

# Remove Play Services from Magisk DenyList when set to Enforce in normal mode
if magisk --denylist status; then
    magisk --denylist rm com.google.android.gms
fi

check_reset_prop() {
  local NAME=$1
  local EXPECTED=$2
  local VALUE=$(resetprop $NAME)
  [ -z $VALUE ] || [ $VALUE = $EXPECTED ] || resetprop $NAME $EXPECTED
}

# Conditional early sensitive properties

# Samsung
check_reset_prop "ro.boot.warranty_bit" "0"
check_reset_prop "ro.vendor.boot.warranty_bit" "0"
check_reset_prop "ro.vendor.warranty_bit" "0"
check_reset_prop "ro.warranty_bit" "0"

# Xiaomi
check_reset_prop "ro.secureboot.lockstate" "locked"

# Realme
check_reset_prop "ro.boot.realmebootstate" "green"

# OnePlus
check_reset_prop "ro.is_ever_orange" "0"

# Microsoft
for PROP in $(resetprop | grep -oE 'ro.*.build.tags'); do
    check_reset_prop "$PROP" "release-keys"
done

# Other
for PROP in $(resetprop | grep -oE 'ro.*.build.type'); do
    check_reset_prop "$PROP" "user"
done
check_reset_prop "ro.debuggable" "0"
check_reset_prop "ro.force.debuggable" "0"
check_reset_prop "ro.secure" "1"