safetynet-fix/magisk/system.prop

# Basic MagiskHide properties

# RootBeer, Microsoft
ro.build.tags=release-keys

# Samsung
ro.boot.warranty_bit=0
ro.vendor.boot.warranty_bit=0
ro.vendor.warranty_bit=0
ro.warranty_bit=0

# OnePlus
ro.is_ever_orange=0

# SafetyNet
ro.boot.verifiedbootstate=green
ro.boot.veritymode=enforcing
ro.boot.vbmeta.device_state=locked
vendor.boot.vbmeta.device_state=locked

# Other
ro.build.type=user
ro.debuggable=0
ro.secure=1
magisk: Add new module template Mostly copied from riru/template/magisk_module. 2021-10-31 00:49:46 +00:00			`# Basic MagiskHide properties`

			`# RootBeer, Microsoft`
			`ro.build.tags=release-keys`

			`# Samsung`
			`ro.boot.warranty_bit=0`
			`ro.vendor.boot.warranty_bit=0`
			`ro.vendor.warranty_bit=0`
			`ro.warranty_bit=0`

magisk: Add circumvention of OnePlus' oem unlock counter - I recently discovered `ro.is_ever_orange` on OOS 11, which gets set roughly 32 seconds after boot completed and is equal to the number of times a device has ever been `fastboot oem unlock`ed - a fresh MSM (i.e. factory locked device) has it set to 0, and using system.prop to set it to 0 earlier in the boot seems to keep it set to 0 instead of the real unlock count - I haven't seen this exploited anywhere, though I presume it exists for a reason, so probably good to manage it as well 2021-12-24 04:40:49 +00:00			`# OnePlus`
			`ro.is_ever_orange=0`

magisk: Add new module template Mostly copied from riru/template/magisk_module. 2021-10-31 00:49:46 +00:00			`# SafetyNet`
			`ro.boot.verifiedbootstate=green`
			`ro.boot.veritymode=enforcing`
			`ro.boot.vbmeta.device_state=locked`
			`vendor.boot.vbmeta.device_state=locked`

			`# Other`
			`ro.build.type=user`
			`ro.debuggable=0`
			`ro.secure=1`