support Digitales Amt/ID Austria app "at.gv.oe.app"

BotoX · Oct 20, 2022 · 4fb09a2 · 4fb09a2
1 parent a2267d1
commit 4fb09a2
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 2 deletions.
diff --git a/java/app/src/main/java/dev/kdrag0n/safetynetfix/proxy/ProxyKeyStoreSpi.kt b/java/app/src/main/java/dev/kdrag0n/safetynetfix/proxy/ProxyKeyStoreSpi.kt
@@ -35,6 +35,7 @@ class ProxyKeyStoreSpi private constructor(
         // android.os.Binder.execTransact(Binder.java:1143)
         logDebug("Stack trace element: $it")
         it.className.contains("DroidGuard", ignoreCase = true)
+        it.methodName.equals("performCapabilityAndIntegrityCheck")
     }
 
     override fun engineGetCertificateChain(alias: String?): Array<Certificate>? {

diff --git a/magisk/post-fs-data.sh b/magisk/post-fs-data.sh
@@ -3,4 +3,5 @@
 # Remove Play Services from the Magisk Denylist when set to enforcing.
 if magisk --denylist status; then
 	magisk --denylist rm com.google.android.gms
+	magisk --denylist rm at.gv.oe.app
 fi
diff --git a/zygisk/module/jni/module.cpp b/zygisk/module/jni/module.cpp
@@ -85,7 +85,7 @@ class SafetyNetFixModule : public zygisk::ModuleBase {
 
     void preSpecialize(const std::string& process) {
         // Only touch GMS
-        if (process.rfind("com.google.android.gms", 0) != 0) {
+        if (process.rfind("com.google.android.gms", 0) != 0 && process != "at.gv.oe.app") {
             api->setOption(zygisk::DLCLOSE_MODULE_LIBRARY);
             return;
         }
@@ -97,7 +97,7 @@ class SafetyNetFixModule : public zygisk::ModuleBase {
         // spoof the model in that process. Leaving other processes alone fixes various issues
         // caused by model detection and flag provisioning, such as broken weather with the new
         // smartspace on Android 12.
-        if (process == "com.google.android.gms.unstable") {
+        if (process == "com.google.android.gms.unstable" || process == "at.gv.oe.app") {
             // Load the payload, but don't inject it yet until after specialization
             // Otherwise, specialization fails if any code from the payload still happens to be
             // running