From 4ee1e138ec331f4e04cf161ebf4646d2a587b926 Mon Sep 17 00:00:00 2001
From: jhenrique09 <jhenrique09.mcz@hotmail.com>
Date: Sat, 26 Oct 2019 13:11:22 +0530
Subject: [PATCH] [DNM] sanders: Introduce 'SafailNet'

Bypass safetynet even if we have permissive selinux

Change-Id: Ib44cdbd15b53af3a1768cb0912f2dbcc56a8d97e

-Fall back to older fp for safetynet

Co-authored-by: ronaxdevil <pratabidya.007@gmail.com>
Signed-off-by: ronaxdevil <pratabidya.007@gmail.com>
---
 device.mk                     | 1 +
 lineage_sanders.mk            | 4 ++--
 rootdir/Android.mk            | 8 ++++++++
 rootdir/etc/init.qcom.rc      | 1 +
 rootdir/etc/init.safailnet.rc | 8 ++++++++
 5 files changed, 20 insertions(+), 2 deletions(-)
 create mode 100644 rootdir/etc/init.safailnet.rc

diff --git a/device.mk b/device.mk
index 67aea54..098f9a8 100644
--- a/device.mk
+++ b/device.mk
@@ -352,6 +352,7 @@ PRODUCT_PACKAGES += \
     init.mmi.usb.rc \
     init.qcom.rc \
     init.qcom.sensors.sh \
+    init.safailnet.rc \
     init.sanders.rc \
     init.spectrum.rc \
     init.spectrum.sh \
diff --git a/lineage_sanders.mk b/lineage_sanders.mk
index 9f5e630..4921cee 100644
--- a/lineage_sanders.mk
+++ b/lineage_sanders.mk
@@ -48,6 +48,6 @@ PRODUCT_BUILD_PROP_OVERRIDES += \
     PRIVATE_BUILD_DESC="sanders-user 8.1.0 OPS28.65-36 9fea release-keys"
 
 # FINGERPRINT
-BUILD_FINGERPRINT := google/crosshatch/crosshatch:9/PQ1A.190105.004/5148680:user/release-keys
-VENDOR_BUILD_FINGERPRINT := google/crosshatch/crosshatch:9/PQ1A.190105.004/5148680:user/release-keys
+BUILD_FINGERPRINT := google/walleye/walleye:8.1.0/OPM1.171019.011/4448085:user/release-keys
+VENDOR_BUILD_FINGERPRINT := google/walleye/walleye:8.1.0/OPM1.171019.011/4448085:user/release-keys
 
diff --git a/rootdir/Android.mk b/rootdir/Android.mk
index 809fbb3..c339e3e 100644
--- a/rootdir/Android.mk
+++ b/rootdir/Android.mk
@@ -123,3 +123,11 @@ LOCAL_MODULE_CLASS := ETC
 LOCAL_SRC_FILES    := etc/init.dtv.sh
 LOCAL_MODULE_PATH  := $(TARGET_OUT_VENDOR_EXECUTABLES)
 include $(BUILD_PREBUILT)
+
+include $(CLEAR_VARS)
+LOCAL_MODULE       := init.safailnet.rc
+LOCAL_MODULE_TAGS  := optional
+LOCAL_MODULE_CLASS := ETC
+LOCAL_SRC_FILES    := etc/init.safailnet.rc
+LOCAL_MODULE_PATH  := $(TARGET_OUT_VENDOR_ETC)/init/hw
+include $(BUILD_PREBUILT)
diff --git a/rootdir/etc/init.qcom.rc b/rootdir/etc/init.qcom.rc
index 267c86d..6eff21c 100644
--- a/rootdir/etc/init.qcom.rc
+++ b/rootdir/etc/init.qcom.rc
@@ -29,6 +29,7 @@ import /vendor/etc/init/hw/init.mmi.rc
 import /vendor/etc/init/hw/init.sanders.rc
 import /vendor/etc/init/hw/init.spectrum.rc
 import /vendor/etc/init/hw/init.dtv.rc
+import /vendor/etc/init/hw/init.safailnet.rc
 
 on early-init
     mount debugfs debugfs /sys/kernel/debug
diff --git a/rootdir/etc/init.safailnet.rc b/rootdir/etc/init.safailnet.rc
new file mode 100644
index 0000000..53676c5
--- /dev/null
+++ b/rootdir/etc/init.safailnet.rc
@@ -0,0 +1,8 @@
+# Safetynet bypass
+# Inspired in magisk source code, by topjohnwu
+# Ported to ramdisk by jhenrique09
+
+on boot
+    # selinux nodes, hide permissive state
+    chmod 0640 /sys/fs/selinux/enforce
+    chmod 0440 /sys/fs/selinux/policy