Skip to content

Commit

Permalink
Remove Selinux Prop spoofing
Browse files Browse the repository at this point in the history
I'd suggest either removing this line of code or have it set the property to 1, which by itself shouldn't problematic as it's present on some stock ROMs thus doesn't alarm detection systems and doesn't cause property deletion detection
  • Loading branch information
DanGLES3 authored Nov 7, 2024
1 parent bea32cf commit bb1d419
Showing 1 changed file with 0 additions and 4 deletions.
4 changes: 0 additions & 4 deletions module/service.sh
Original file line number Diff line number Diff line change
Expand Up @@ -10,10 +10,6 @@ resetprop_if_match vendor.boot.mode recovery unknown

# SELinux
resetprop_if_diff ro.boot.selinux enforcing
# use delete since it can be 0 or 1 for enforcing depending on OEM
if [ -n "$(resetprop ro.build.selinux)" ]; then
resetprop --delete ro.build.selinux
fi
# use toybox to protect stat access time reading
if [ "$(toybox cat /sys/fs/selinux/enforce)" = "0" ]; then
chmod 640 /sys/fs/selinux/enforce
Expand Down

0 comments on commit bb1d419

Please sign in to comment.