init: Make SafetyNet pass on debug builds
* This makes it pass on userdebug, unlocked bootloader builds
* Build time conditional should mean this never gets into production
builds, not that it should be a problem given that these values
are being set to what they would look like anyways
Co-authored-by: Michael Bestas <mkbestas@gmail.com>
Change-Id: I2aafc883b9ec3d42246583c85ad1a7dc9247b5b9
diff --git a/init/property_service.cpp b/init/property_service.cpp
index a2168bf..95df095 100644
--- a/init/property_service.cpp
+++ b/init/property_service.cpp
@@ -1408,6 +1408,16 @@
if (isVerifiedBootYellow) {
InitPropertySet("ro.boot.verifiedbootstate", "green");
}
+#if ALLOW_PERMISSIVE_SELINUX == 1
+ else {
+ // Use the above as a userdebug/eng check, since we don't
+ // need this on production builds which will always be -user
+ InitPropertySet("ro.boot.flash.locked", "1");
+ InitPropertySet("ro.boot.verifiedbootstate", "green");
+ InitPropertySet("ro.boot.veritymode", "enforcing");
+ InitPropertySet("ro.boot.vbmeta.device_state", "locked");
+ }
+#endif
}
void PropertyInit() {