Fix SELinux prop spoofing

Signed-off-by: Salvo Giangreco <[email protected]>
chiteroman · Aug 19, 2024 · cd72495 · cd72495
1 parent 3d8e7d3
commit cd72495
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/module/service.sh b/module/service.sh
@@ -23,9 +23,7 @@ resetprop_if_match vendor.boot.mode recovery unknown
 
 # Hiding SELinux | Permissive status
 resetprop_if_diff ro.boot.selinux enforcing
-if [ -n "$(resetprop ro.build.selinux)" ]; then
-    resetprop --delete ro.build.selinux
-fi
+resetprop_if_diff ro.build.selinux 1
 
 # Hiding SELinux | Use toybox to protect *stat* access time reading
 if [[ "$(toybox cat /sys/fs/selinux/enforce)" == "0" ]]; then