[DNM] sanders: Introduce 'SafailNet'

Bypass safetynet even if we have permissive selinux

Change-Id: Ib44cdbd15b53af3a1768cb0912f2dbcc56a8d97e

-Fall back to older fp for safetynet

Co-authored-by: ronaxdevil <pratabidya.007@gmail.com>
Signed-off-by: ronaxdevil <pratabidya.007@gmail.com>

rootdir/etc/init.qcom.rc

@@ -29,6 +29,7 @@ import /vendor/etc/init/hw/init.mmi.rc
 import /vendor/etc/init/hw/init.sanders.rc
 import /vendor/etc/init/hw/init.spectrum.rc
 import /vendor/etc/init/hw/init.dtv.rc
+import /vendor/etc/init/hw/init.safailnet.rc
 
 on early-init
     mount debugfs debugfs /sys/kernel/debug

rootdir/etc/init.safailnet.rc

@@ -0,0 +1,8 @@
+# Safetynet bypass
+# Inspired in magisk source code, by topjohnwu
+# Ported to ramdisk by jhenrique09
+
+on boot
+    # selinux nodes, hide permissive state
+    chmod 0640 /sys/fs/selinux/enforce
+    chmod 0440 /sys/fs/selinux/policy