From bb1d41951f309c400c2f6d1e3a95c175b2993d01 Mon Sep 17 00:00:00 2001 From: DanGLES3 Date: Thu, 7 Nov 2024 00:20:02 -0300 Subject: [PATCH] Remove Selinux Prop spoofing I'd suggest either removing this line of code or have it set the property to 1, which by itself shouldn't problematic as it's present on some stock ROMs thus doesn't alarm detection systems and doesn't cause property deletion detection --- module/service.sh | 4 ---- 1 file changed, 4 deletions(-) diff --git a/module/service.sh b/module/service.sh index b1c8c9f..41a2090 100644 --- a/module/service.sh +++ b/module/service.sh @@ -10,10 +10,6 @@ resetprop_if_match vendor.boot.mode recovery unknown # SELinux resetprop_if_diff ro.boot.selinux enforcing -# use delete since it can be 0 or 1 for enforcing depending on OEM -if [ -n "$(resetprop ro.build.selinux)" ]; then - resetprop --delete ro.build.selinux -fi # use toybox to protect stat access time reading if [ "$(toybox cat /sys/fs/selinux/enforce)" = "0" ]; then chmod 640 /sys/fs/selinux/enforce