Change the way how to switch whitelist mode

Author: mywalkb

build.sh

@@ -28,7 +28,7 @@ do
 done
 
 pushd magisk
-for FILE in module.prop service.sh customize.sh verify.sh
+for FILE in module.prop service.sh customize.sh verify.sh sepolicy.rule
 do
     sumfile $FILE
 done

magisk/customize.sh

@@ -51,6 +51,7 @@ fi
 
 extract "$ZIPFILE" 'module.prop'        "$MODPATH"
 extract "$ZIPFILE" 'service.sh'         "$MODPATH"
+extract "$ZIPFILE" 'sepolicy.rule'      "$MODPATH"
 
 ui_print "- Extracting zygisk libraries"
 if [ "$ARCH" = "arm" ] || [ "$ARCH" = "arm64" ] ; then

magisk/sepolicy.rule

@@ -0,0 +1,2 @@
+allow zygote adb_data_file dir { search }
+allow zygote unlabeled file { getattr }

module/jni/module.cpp

@@ -1,13 +1,17 @@
 #include <cstdlib>
 #include <string>
 #include <android/log.h>
-#include <sys/system_properties.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <unistd.h>
 
 #include "zygisk.hpp"
 #include "module.h"
 
 namespace denylist {
 
+#define WHITELIST_FILE "/data/adb/modules/denylist_unmount/whitelist"
+
 class DenylistUnmount : public zygisk::ModuleBase {
 public:
     void onLoad(zygisk::Api *api, JNIEnv *env) override {
@@ -38,12 +42,17 @@ class DenylistUnmount : public zygisk::ModuleBase {
 
 
     void preSpecialize(std::string process) {
-        char whitelist[255];
-        __system_property_get("persist.unmount.white",whitelist);
-        
-        if (strcmp(whitelist,"true") == 0 && (api->getFlags() & zygisk::PROCESS_GRANTED_ROOT) == 0){
-            api->setOption(zygisk::FORCE_DENYLIST_UNMOUNT);
-        } else if ((api->getFlags() & zygisk::PROCESS_ON_DENYLIST) != 0) {
+        struct stat whitelist;
+        bool whitelist_mode = false;
+        uint32_t flags = api->getFlags();
+
+        if (stat(WHITELIST_FILE, &whitelist) == 0) {
+            whitelist_mode = true;
+            LOGD("Whitelist mode");
+        }
+
+        if ((flags & zygisk::PROCESS_ON_DENYLIST) != 0 ||
+            (whitelist_mode && (flags & zygisk::PROCESS_GRANTED_ROOT) == 0)) {
             api->setOption(zygisk::FORCE_DENYLIST_UNMOUNT);
         }
         api->setOption(zygisk::DLCLOSE_MODULE_LIBRARY);