yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] sabinn:
HTC One X+ / stock ROM with Sense 4

JB 4.1.1

ES File Exploer is not installed, and never has been.

1) used TWRP to install scripts successfully

2) used the suggested "SManager Ads" to run scripts. Even placed the nifty widgets on my home screen.

3) GFE detects root. ARGH!

I was really hoping to delete Nitrodesk Touchdown. Curse this GFE and it's dang root detection!

EDIT: After Enabling the script I backed out of Good and launched Titanium Backup. TB run without any issues or complaints. Hmmmm.... something is fishy here.
[Android Software/Hacking General [Developers Only]] Fallon:
Re: Good for Enterprise ( GFE ) root workaround

If TiBu is running fine, it's getting root access. That means GFE's root detection is working properly. Need to figure out what root package is installed & where.
[Android Software/Hacking General [Developers Only]] sabinn:
Re: Good for Enterprise ( GFE ) root workaround

Is there anything I can run to find what root package is installed? I'm using HBOOT.

I bought this phone second hand sorry for my noobishness.
[Android Software/Hacking General [Developers Only]] wc4482:
Problem connecting after flashing new Beans ROM build 7

Hello, I'm having problems with my Good app having no connection. This may or may not be the cause of the scripts in the OP. I am having to exit the app and open back up with my password for Good to connect. After 5 min or so I lose connection and Good stays "not connected" until I exit and then log back in. Any ideas?

FYI the temp unroot and re-root scripts still work (policy wise)

Thanks!
[Android Software/Hacking General [Developers Only]] calisro:
Re: Good for Enterprise ( GFE ) root workaround

get me this data (run in connectbot or similar and post logs from /sdcard after).

su

ls /system/app >> /sdcard/sysout.txt

ls /data/app >> /sdcard/datout.txt

ls /system/bin >> /sdcard/binout.txt

ls /system/xbin >> /sdcard/xbinout.txt

also post a screen shot of sm manager log after running each script from the op.
[Android Software/Hacking General [Developers Only]] calisro:
Re: Good for Enterprise ( GFE ) root workaround

The scripts in the op can't affect good in that way. it simply disables/reenables the linux user that owns the good package. Nothing more.... The problem your seeing is either rom (loss of network) or Good related (more likely).
[Android Software/Hacking General [Developers Only]] segelfreund:
Hi calisro,

what makes the work on android 4.3? Is it probaly to use your script?
[Android Software/Hacking General [Developers Only]] sripad79:
Sweet!!! that worked man, great job on the script.
[Android Software/Hacking General [Developers Only]] LinkinParkmetre:
Are the zip files for 4.3 out ?

Otherwise I have a question.... Can I remove root on my phone and keep my current ROM? What files should I delete so that GFE works? I believe I'm on AOSP with SUPERUSER

(I only need root for Ti backup but I'll go for helium.... and root explorer but whatever. I have to get GFE working).

Thanks so much for your help !!
[Android Software/Hacking General [Developers Only]] jean.poub:
+1 I have exactly yhe same problem. I must use GFE but I prefer custom ROM...

For a Sammy based custom ROM : If I flash a stock kernel, will It work?

Thanks for help us :fingers-crossed:
[Android Software/Hacking General [Developers Only]] jean.poub:
If it can help.

On archidroid 1.7 (4.3 SAMMY ROM) I remove SuperSU (in it option) after a reboot, GFE work fine and the ROM also.

I don't have Root access but I don't care.

Don't know if it's possible on CM10.2. Will try when I got time.

Edit : unfortunatelly after a reboot GFE detect my phone as rooted...

So I flash stock kernel and now it work even after reboots.
[Android Software/Hacking General [Developers Only]] phositadc:
Anybody get this working on a nexus 5?
[Android Software/Hacking General [Developers Only]] sean.trinidade:
Given that it doesn't work on 4.3, I doubt it'll work on 4.4!
[Android Software/Hacking General [Developers Only]] budadd:
Yes, delete /bin/su etc and all superuser apk. Restart and enjoy cm10.2 or 10.3. with good.

But if you have a custom rom that restore su ... that is bad.
[Android Software/Hacking General [Developers Only]] Zenoran:
Following this thread now that I'm finally off VZW and can actually use good mobile without downgrading my data plan. Custom ROM on n5 seems to work with SuperSU "unrooted" just fine but I feel like I'm an iPhone users now with an unrooted phone. :(

I'm really interested in learning more about "decompiling" an apk. It sounds like that's the solution to the problem assuming implementation is personal. Google is my friend.
[Android Software/Hacking General [Developers Only]] calisro:
decompiling is pretty easy. dex2jar and then you can edit it in Jasmin but know what to change is a bit more tricky. I was actually going to look into it but my *problem* (not really a prblem :) ) is that GFE is no longer detecting root on my rooted phone even though I am 99.9% positive that there still is a no-root policy on.
[Android Software/Hacking General [Developers Only]] Zenoran:
ya I started playing around with it but using apktool... moreso interested in playing to learn so this will be a fun experiment. Interesting yours no longer detects root???? What su apk are you using? I know the newer ones in 3.3+ use a service and from what I can tell GFE is still detecting it because I've had it deactivate my device bind a few times trying different scenarios.

I really am starting to like having work emails/calendar though so motivation is high to get something worked out here. I'm amazed this is still kinda unresolved on xda but I realize there are concerns around hacking apks.
[Android Software/Hacking General [Developers Only]] viper_insane:
Well there is a cracked wallet.apk out there, any one want to post a link to a cracked GFE? I'm feeling a bit behind on 4.2.. Of course, I can also do any root, I'm not picky at this point...
[Android Software/Hacking General [Developers Only]] Milkman00:
I know you are probably busy working on 4.3 compatibility, but I figured I would check in to see how the work on the app to do the root workaround is going.
[Android Software/Hacking General [Developers Only]] calisro:
I am not sure if its feasible to unroot/reroot via scripts with the way the new root daemon works. So this is no-go at the moment.
[Android Software/Hacking General [Developers Only]] jtdc:
[MENTION=819390]Zenoran[/MENTION] does this means unroot using the option within supersu makes the nexus 5 compliant already? if that's so then well and good, beacuse if root is needed at some point you can just disable GFE within settings/applications and then root. when u need it back, unroot using the option, uninstall all apps requiring root, then reboot then enable back GFE, is that workable?
[Android Software/Hacking General [Developers Only]] Zenoran:
Yup that's the plan for now. Just have to make sure it's disabled before you reboot with root because it will autoload and disable your account.
[Android Software/Hacking General [Developers Only]] aydc:
I'm having trouble using SuperSU's Unroot function with the latest 1.80 version. Even though I fully unroot, Good still detects root after a reboot. Has anyone tried it with 1.80?
[Android Software/Hacking General [Developers Only]] jean.poub:
I have the same with older version.

I search another solution...

Envoyé de mon GT-I9300 en utilisant Tapatalk
[Android Software/Hacking General [Developers Only]] aydc:
OK, so it's not just me. There must be some files still left over after unrooting, but what? If we could find out, we could give feedback to the developer to correct it, but I can't find which su files get not deleted.
[Android Software/Hacking General [Developers Only]] viper_insane:
I'm using the most recent version (can't see it, I'm unrooted) and am running Good Ok. It did give me a compliance check the first time, but that might have been due to the move to 4.3 for me, or any other othe rmillion things I was doing. It's been working for 3 days, and numerous reboots...

I hope getting root back will be easy...
[Android Software/Hacking General [Developers Only]] segelfreund:
But i must uninstalled any app that will need root?

Or only the su.apk?
[Android Software/Hacking General [Developers Only]] jtdc:
For those who say that after using unroot option and reboot, GFE still not compliant...

what was your android version, 4.3 or 4.4 ?

all root requiring apps and all root named apps (like root explorer) you should uninstall. GFE smells them, read the OP (What GOOD(GFE) detects and what it doesn't care about). it was also said there "Turn off 'automatic update' for super user app from market", which basically means its recommended to use an older superuser/supersu app, but old ones may not have "improved cleaner unrooting" if that's ever done.
[Android Software/Hacking General [Developers Only]] Zenoran:
I only had to do the unroot option in supersu? To root again u need to uninstall gfe first before booting a rooted OS.
[Android Software/Hacking General [Developers Only]] Tweak_four17:
I was running a custom 4.1.2 Rom on my note 2. Did the unroot option in the supersu app and gfe worked fine. Just wiped my phone, switched to a new Rom that's 4.3 did the unroot and gfe banned me. The only apps I can see that would or cod use root are Es file Explorer (which I previously had) xposed installer (which I also previously had but never used on 4.1 but have used on 4.3) and wanam exposed (an xposed app which I also never had before and do use this go around). I don't think the apps are the issue but maybe? If someone figures out how to unroot properly so I can use a custom Rom and gfe together on 4.3 that would be awesome. I'd rather not try and mod the apk or use a cracker version..

Edit: I also switched recoveries from twrp to a modified cwm that prompts to repair root (I choose no) but maybe gfe is detecting that somehow?
[Android Software/Hacking General [Developers Only]] segelfreund:
Im running on 4.4

I know what good is, but i can´t believe that Good find the root access on the file explorer like ES or Solid.

Also i used faux kernel and his app.

So i asked if you tried these with android 4.4.

On older Jelly Bean the script works for me. But with 4.3 these are broken.

So after these i don´t used good or these script.

So i asked.

Sorry
[Android Software/Hacking General [Developers Only]] aydc:
After I switched to Android 4.3 roms, SuperSU's Full Unroot stopped working for Good. I used to update the rom, root, setup the phone as I want, then full unroot and setup good. This doesn't work anymore. If you have rooted once, after that you can do anything you want including full unroot, but Good still detects root.

I think this is because the rooting method changed starting with 4.3. We need a new method to completely unroot the device in a way that Good can't catch it.
[Android Software/Hacking General [Developers Only]] viper_insane:
Shucks. I was working for a week, and now I am in non-compliance hell. I can't get GFE to work at all, and I am unrooted, all apps TIBU, etc say I am unrooted.

All I have that use root are TIBU, wanam, and File Explorere, but none of them work while unrooted. Shoot, maybe 4.3 was a bad idea...
[Android Software/Hacking General [Developers Only]] aydc:
I am on 4.4 now and learning to live without root. Helium is a non-root replacement for Titanium Backup. Ad Block Plus is a non-root replacement for AdAway. Mods that can be flashed in recovery are replacement for Xposed. If I need to change a file that needs root, I go to TWRP's File Manager, which gives me full access in recovery. None of these solutions work as good as their root counterparts, but I am surviving.
[Android Software/Hacking General [Developers Only]] jean.poub:
Official 4.4 you mean?

Envoyé de mon GT-I9300 en utilisant Tapatalk
[Android Software/Hacking General [Developers Only]] jtdc:
Yes I plan to do the same thing, just procastinating. GFE is running on my full stock nexus 7 for that purpose. the only reason why i rooted nexus 5 is just to restore some old games from my old arc that i don't want to start again from scratch. now i wonder if helium can do that, i might just give all of this a go.

That's why I am asking if anyone else here that's on 4.4 cf-auto-rooted and used unroot option (plus additional task like uninstalling all root looking and root related apps), if GFE reinstall and reauthenticate works after all that.
[Android Software/Hacking General [Developers Only]] Ysaurabh85:
Hi calisro, I am using MIUI v5 rom , I was able to run GFE using your scripts. But after reboot I got compliance error. Attached here are the logs.

After that I tried several things wiping gfe data, re installing gfe but I was not able to to see work mails. after I enter the pin gfe stops at starting services (authentication, securing channel, retrieving setting phase works fine). Then I have to restart GFE and it shows compliance error. I have wasted 3 pins. I have ask company help desk for gfe pin and those guys dont give pin easily.

Could you pls advise me which apps should I remove to get GFE work in attached zip file. I have removed titanium, xposed installed, wsm, mitools, es exlporer etc. Will Greenify application will cause compliance error?

Thx
[Android Software/Hacking General [Developers Only]] calisro:
some roms re-root on reboot.
[Android Software/Hacking General [Developers Only]] Tweak_four17:
Any chance it is the wanam xposed module causing issues with unrooting?
[Android Software/Hacking General [Developers Only]] calisro:
doubt it. exposed works with the framework. nire likely your rom is redeploying root on reboot.
[Android Software/Hacking General [Developers Only]] Tweak_four17:
Hmm. It doesn't appear to be (ie: no super user app and and root checker fails to find it). I'd hate to have to go back to 4.1 :(
[Android Software/Hacking General [Developers Only]] calisro:
root checker is junk. check if su /system/xbin/su is there.
[Android Software/Hacking General [Developers Only]] Tweak_four17:
Nope no /system/xbin/su
[Android Software/Hacking General [Developers Only]] redhonker:
Just discovered this thread. Has anyone tried with Moto X on KitKat if anything would stop GFE from complaining?

Thanks
[Android Software/Hacking General [Developers Only]] Fallon:
I finally did a bunch of updating on my phone. Briefly tried the new AT&T 4.3 ROM before going back to CM 10.2 then upgrading to the CM 11 nightly from a day or 2 ago.

As expected the scripts themselves were throwing a pile of errors & not appearing to work correctly, so I never bothered to try & install GFE & rely on those scripts.

So far my test as follows seems to have worked:

Backed up everything (Titanium Backup & Nandroid)

Identified /system/bin/su (link) & backed it up

Identified /system/xbin/su & backed it up

Failed to find any other packages other than the plain old su executables

Used Root Checker to see what it found (files noted above)

Used ES File Exporer to mount /system as RW

Deleted /system/bin/su

Deleted /system/xbin/su

Rebooted

Confirmed with a couple apps (Titanium Backup) as well as Root Checker (which I still don't really trust)

Rebooted again for good measure

Install GFE

Activated GFE

Set phone screenlock PIN/pattern

Set GFE password

Used GFE

No compliance issues in 5 min

Rebooted

No compliance issues after at least another hour and reboot
[Android Software/Hacking General [Developers Only]] Fallon:
GFE is still working a day on.

When I reboot into CWM & then tell CWM to reboot, it gripes that root isn't installed. It offers to re-root on reboot, but is fine telling it no.

I may get around to creating & posting a .zip to flash in CWM to unroot CM11 until calisro or somebody else fixes the nicer scripts for KitKat compatibility.
[Android Software/Hacking General [Developers Only]] iamryfly:
This is great news...keep us posted as to how it goes!
[Android Software/Hacking General [Developers Only]] calisro:
Interesting! doesn't work for gfe yet according to the thread but worth bookmarking!

xposed:

http://xdaforums.com/showthread.php?t=1574401

root cloak module:

http://xdaforums.com/showthread.php?t=1574401
[Android Software/Hacking General [Developers Only]] redhonker:
RootCloak is http://repo.xposed.info/module/com.devadvance.rootcloak

This might never work though. It only help to block certain checks. GFE check seems to be more extensive.
[Android Software/Hacking General [Developers Only]] reflexxx:
Can I use ADB shell without causing a compliance problem?

I just want to make file replacement and mods needed for LG G2 hotspot apk update without impacting GFE.

http://xdaforums.com/showthread.php?t=2456338&page=2

Thanks..

Happy Holidays
[Android Software/Hacking General [Developers Only]] calisro:
gfe isn't extensive at all. its actually very very immature. It just doesn't use the api.
[Android Software/Hacking General [Developers Only]] calisro:
Just disable the app first then enable when you are done.
[Android Software/Hacking General [Developers Only]] redhonker:
I don't think it's a matter of maturity. If GFE wants to claim it's secure to use for corporate, it will use many different ways to detect root. It will never use just the API.
[Android Software/Hacking General [Developers Only]] calisro:
It doesn't use "many ways" and it doesn't even do a good job in the one way it does. It also flat out fails to detect root on some handsets despite corporate policy set up to do so. I have a few handsets all set up through the same company with the same policy. 2 out of 3 doesn't detect root at all. It's not mature and they don't do a very good job.
[Android Software/Hacking General [Developers Only]] redhonker:
Do we know the exact detection mechanism? If so, it's probably can be added to RootCloak. For example, it now has a blocker for shell, which might be worth trying.

---------- Post added at 08:14 AM ---------- Previous post was at 08:13 AM ----------

If we "unroot" to get GFE working, how would we keep application that needs root running? For example, Titanium Backup.

Thanks
[Android Software/Hacking General [Developers Only]] calisro:
From what I have seen, it uses shell to look for files and package manager to look at installed apps. I was looking into using chroot to sandbox gfe's shell access but that still left package manager as an issue.
[Android Software/Hacking General [Developers Only]] redhonker:
Shell blocker is now available in RootCloak. I don't know if the package manager is also blockable in RootCloak.
[Android Software/Hacking General [Developers Only]] Fallon:
Titanium backup keeps complaining it can't get root to do its scheduled backup. I haven't seen that cause any GFE problems though. Pretty sure GFE doesn't care if an app requests root as long as root isn't there.
[Android Software/Hacking General [Developers Only]] redhonker:
I am not familiar with this part. But is it possible to allow TB to run? For example, move TB to system app?

Thanks

---------- Post added at 03:08 PM ---------- Previous post was at 03:02 PM ----------

It looks XPrivacy can also block the shell.

Probably naive question: if you rename the SuperSU package (or others), can GFE still detect it?
[Android Software/Hacking General [Developers Only]] Fallon:
I'm pretty sure TiBu won't actually do anything useful without root. You can open it, but it complains about no root & all the useful options are grayed out.
[Android Software/Hacking General [Developers Only]] redhonker:
So it makes no difference if an app is a system or user app in this regard, right? I was wondering if a system app will gain root right automatically.
[Android Software/Hacking General [Developers Only]] Fallon:
It won't, any app needs to find the su binary or something similar (like these unroot/re-root scripts, which uses something not named su). Therein lies the rub on the whole deal. You can use something other than su, but none of the apps ever needing root can find it. If you could get everybody to attempt to use something other than the su binary, GFE could find it just as easily.
[Android Software/Hacking General [Developers Only]] redhonker:
RootCloak does have package manager and activity manager wrapped up (in addition to blocking sh).

http://xdaforums.com/showpost.php?p=48881378&postcount=95

Do you want to give it a try?
[Android Software/Hacking General [Developers Only]] calisro:
GFE on my phone no longer detects root at all, so I am in no position to test. :what:
[Android Software/Hacking General [Developers Only]] devadvance:
Just thought I'd pop in with some info

https://www.netspi.com/blog/entryid/209/android-root-detection-techniques

That article is specifically about AirWatch, but most of the outlined methods to detect root are used by other apps as well. GFE doesn't just use one or two. Also, that article is probably about 20% of the ways you can detect root.
[Android Software/Hacking General [Developers Only]] calisro:
1,2,4,5 is what gfe does. it looks for packages installed and files on the os. I also suspect it checks for background processes.
[Android Software/Hacking General [Developers Only]] aydc:
It's easy to decompile good's apk file. It's called com.good.android.gfe-1.apk. You can decompile it and see the code. Once you decompile it, under "\smali\com\good\android\compliance\" folder, there is a file called "ComplianceManagerPolicy.smali".

I'm pretty sure that by making small changes in this file and then recompiling, once can stop Good from detecting root. Unfortunately, I have no idea about Android Dalvik code, so I can't do it. If you know your way around smali though, it should be pretty easy.
[Android Software/Hacking General [Developers Only]] davidcsv:
I9300XXUGMK6 4.3 with working root mechanism/GFE

Don't know if it's noteworthy, but thought it might be interesting for some of you. This is what we've managed to achieve on an international Galaxy S3 running Jelly Bean stock build I9300XXUGMK6 (made root ready).

Root is toggled on and off by creating or deleting/renaming a file named rootme in directory /sdcard/Download followed by a restart. When root is disabled, there are NO traces of root until it is enabled again.This mechanism has been extended to support a userspace (non-rooted env) editable secondary script, which can handle additional user defined actions while rooting/unrooting.

We've tested by adding logic to quarantine GFE when root is enabled and restoring its function when root is removed. It works wonderfully without GFE even noticing the phone was rooted while it was put to sleep for a while.

I will be fine-tuning the scripts somewhat more when I have time, but do drop me a message if you would like to take this stock root ready image for a test drive.
[Android Software/Hacking General [Developers Only]] calisro:
How are you handling roms that reroot via a startup service?
[Android Software/Hacking General [Developers Only]] segelfreund:
What did you do for that?

Gesendet von meinem Nexus 5 mit Tapatalk

---------- Post added at 05:01 PM ---------- Previous post was at 04:57 PM ----------

If you would, i can tested on the Nexus5 with KitKat

Gesendet von meinem Nexus 5 mit Tapatalk
[Android Software/Hacking General [Developers Only]] calisro:
I've done nothing. I have owned other devices where gfe never detected root and others where it has. I'm unclear why but I wish I could figure out the "why"!.
[Android Software/Hacking General [Developers Only]] moosefist:
FWIW I have been using CM 10.2 and CM 11 with root disabled via the rom's options in developer settings for the last 4 months with no issues. Its an easy solution if you want the custom rom options but have no use for root otherwise. I run a custom kernel and up to date nightlies on my nexus 5 w/ cm11
[Android Software/Hacking General [Developers Only]] calisro:
The "root disabled" in CM doesn't stop most root checking programs including GFE.
[Android Software/Hacking General [Developers Only]] nckeong88:
Just fyi, rootcloak works for gfe.
[Android Software/Hacking General [Developers Only]] calisro:
I've had others say this too. :) good stuff.