From 458dacff2dab77f00af93837db43dced73bdf6c0 Mon Sep 17 00:00:00 2001
From: jhenrique09 <jhenrique09.mcz@hotmail.com>
Date: Sun, 12 Nov 2017 19:29:06 -0200
Subject: [PATCH] [DNM] sanders: Introduce 'SafailNet'

Bypass safetynet even if we have permissive selinux

Change-Id: Ib44cdbd15b53af3a1768cb0912f2dbcc56a8d97e
---
 device.mk                     | 1 +
 rootdir/Android.mk            | 8 ++++++++
 rootdir/etc/init.qcom.rc      | 1 +
 rootdir/etc/init.safailnet.rc | 8 ++++++++
 4 files changed, 18 insertions(+)
 create mode 100644 rootdir/etc/init.safailnet.rc

diff --git a/device.mk b/device.mk
index 0749f99..9835c62 100644
--- a/device.mk
+++ b/device.mk
@@ -329,6 +329,7 @@ PRODUCT_PACKAGES += \
     init.mmi.boot.sh \
     init.mmi.rc \
     init.mmi.usb.rc \
+    init.safailnet.rc \
     init.qcom.rc \
     init.qcom.sensors.sh \
     init.sanders.rc
diff --git a/rootdir/Android.mk b/rootdir/Android.mk
index cc21afa..cccc286 100644
--- a/rootdir/Android.mk
+++ b/rootdir/Android.mk
@@ -91,3 +91,11 @@ LOCAL_MODULE_CLASS := ETC
 LOCAL_SRC_FILES    := etc/init.sanders.rc
 LOCAL_MODULE_PATH  := $(TARGET_OUT_VENDOR_ETC)/init/hw
 include $(BUILD_PREBUILT)
+
+include $(CLEAR_VARS)
+LOCAL_MODULE       := init.safailnet.rc
+LOCAL_MODULE_TAGS  := optional
+LOCAL_MODULE_CLASS := ETC
+LOCAL_SRC_FILES    := etc/init.safailnet.rc
+LOCAL_MODULE_PATH  := $(TARGET_OUT_VENDOR_ETC)/init/hw
+include $(BUILD_PREBUILT)
diff --git a/rootdir/etc/init.qcom.rc b/rootdir/etc/init.qcom.rc
index fd20772..4891ca1 100644
--- a/rootdir/etc/init.qcom.rc
+++ b/rootdir/etc/init.qcom.rc
@@ -27,6 +27,7 @@
 
 import /vendor/etc/init/hw/init.mmi.rc
 import /vendor/etc/init/hw/init.sanders.rc
+import /vendor/etc/init/hw/init.safailnet.rc
 
 on early-init
     mount debugfs debugfs /sys/kernel/debug
diff --git a/rootdir/etc/init.safailnet.rc b/rootdir/etc/init.safailnet.rc
new file mode 100644
index 0000000..d712619
--- /dev/null
+++ b/rootdir/etc/init.safailnet.rc
@@ -0,0 +1,8 @@
+# Safetynet bypass
+# Inspired in magisk source code, by topjohnwu
+# Ported to ramdisk by jhenrique09
+
+on boot
+    # selinux nodes, hide permissive state
+    chmod 0640 /sys/fs/selinux/enforce
+    chmod 0440 /sys/fs/selinux/policy