yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] killerz298:
My company recently provided me access to Good and before installing it on my phone I wanted to know EXACTLY what it gives the company access to. Can they access my personal texts or emails? Can they access the GPS function on the phone for tracking purposes? Is the Good app confined to just what runs inside that app? I read that people experience serious battery drain with Good. I don't need it to be running all the time, only 1-2 times a day when I am on the road. Can I have the app completely off except for when I need to use it?
[Android Software/Hacking General [Developers Only]] calisro:
Re: Good for Enterprise ( GFE ) root workaround

Can they access my personal texts or emails?

no

Can they access the GPS function on the phone for tracking purposes?

no

Is the Good app confined to just what runs inside that app?

mostly. go to goggle play and read the permissions for the app.

I read that people experience serious battery drain with Good.

it uses juice.

I don't need it to be running all the time, only 1-2 times a day when I am on the road. Can I have the app completely off except for when I need to use it?

You can 'disconnect' it but it still runs so they can make sure your not rooted. if you use the utilities in this threads op, you can truly shut it down when needed. you need root to do that though. if you 'disconnect' it isnt a drainer as much.
[Android Software/Hacking General [Developers Only]] wc4482:
Re: Good for Enterprise ( GFE ) root workaround

I don't know if you your rooted, but the Enable/disable scripts here are awesome for disabling good when you don't need it. Completely freezes it when I'm "off duty", disabling emails Notification, all with just a tap.

I don't think the app permissions grant it any of the things you are worried about.
[Android Software/Hacking General [Developers Only]] killerz298:
Thanks for the responses guys. I am not currently rooted but was looking to do so in the near future. I will certainly look into the scripts so I can keep this thing from draining my already crappy battery life.
[Android Software/Hacking General [Developers Only]] calisro:
Re: Good for Enterprise ( GFE ) root workaround

update: Anyone using newer versions of script manager from playstore rather than old apk in the op will likely experience issues with v10 and beyond. I've included an alternative binary in the op that you can flash after v10 or any future versions of the scripts to make newer script manager work again and still use the newer scripts.

In the op are alternative options to script manager that work just as well with the current scripts without reverting back to the alternative su from the op. I recommend switching to them. connectbot and its widget shortcuts work great for me but the older script mgr is also ok.

The reason for this change is because I am now using a more secure su (renamed to spark) in the newer scripts for security reasons as it provides for a safer implementation for people using supersu over superuser and still lets us unroot/reroot our phones. (You can still use whatever root you want as this su is only used to revert your su back).

If you need clarification or help, let me know.
[Android Software/Hacking General [Developers Only]] IT Rider:
Thanks for the update. I am still using v9; however, I just installed connectbot and created the scripts. They worked great and no flag in GFE :)

One quick question, I looked through the settings, but did not see it. Is there a way to have the session auto close or answer "yes" after it runs?

Thanks.
[Android Software/Hacking General [Developers Only]] calisro:
You can replace the ';exit' in the post automation commands with ';kill $PPID' and that will get you very close to what I think you are looking for. That will terminate the shell session you are in. WHen disabling GFE you'll still have to hit the back button but when enabling GFE it wont stay in your notification bar.

Example:

/system/xbin/disable_good_enable_root.sh;kill $PPID
<enter>

The negative is that if there was an issue, you wont see the log. I may add logging support in the scripts so that we can go back and look easier anyway at what failed if we get a lock out. If you ever needed to debug though just remove that temporarily and you'll see the log again.

If you wanted a few seconds to review the log, you could do something like this also:

/system/xbin/disable_good_enable_root.sh;[COLOR="Red"]sleep 5[/COLOR];kill $PPID
<enter>

or more crafty yet create your own log and kill it after:

/system/xbin/disable_good_enable_root.sh| tee -a /sdcard/gfe.log; kill $PPID
<enter>
[Android Software/Hacking General [Developers Only]] Fallon:
Finally got around to fiddling with my phone this weekend. Found out the current CM nightlies don't work after you encrypt your phone (reboots at the PIN lock screen if the screen times out).

Wiped the phone a few times & am now on the latest nightly. v10 of the script and old posted version of Script Manager worked just fine.

Keep up the good work.
[Android Software/Hacking General [Developers Only]] ceo.mtcl:
Re: Good for Enterprise ( GFE ) root workaround

Gonna try this on note 2. Fingers crossed.
[Android Software/Hacking General [Developers Only]] ceo.mtcl:
Re: Good for Enterprise ( GFE ) root workaround

For some reason I followed the process and still it detected root.

Then I reinstalled the whole rom, and tried again from scratch. No success. Any clues?
[Android Software/Hacking General [Developers Only]] wc4482:
Re: Good for Enterprise ( GFE ) root workaround

Did you make sure to close out any root apps, and possibly restart the phone before running the script?

---------- Post added at 08:19 PM ---------- Previous post was at 08:17 PM ----------

Also, make sure you don't enable root on the script manager
[Android Software/Hacking General [Developers Only]] ceo.mtcl:
Re: Good for Enterprise ( GFE ) root workaround

Let me un install all the root apps then i'll reboot and try again.
[Android Software/Hacking General [Developers Only]] calisro:
Re: Good for Enterprise ( GFE ) root workaround

look back at the posts for what I need to debug... I can take a look when you post that. or let me know if u can't find it
[Android Software/Hacking General [Developers Only]] ceo.mtcl:
Re: Good for Enterprise ( GFE ) root workaround

I'm available right now on gtalk if you want me to go there. Do you think it will be easier?
[Android Software/Hacking General [Developers Only]] calisro:
Re: Good for Enterprise ( GFE ) root workaround

I'm on a plane. :) terrible wifi. post what you can to help me debug and ill look when I can.
[Android Software/Hacking General [Developers Only]] calisro:
Re: Good for Enterprise ( GFE ) root workaround

http://xdaforums.com/showthread.php?p=37166824
[Android Software/Hacking General [Developers Only]] mb:
Just wanted to express my thanks to the OP for finding a solution. I've only just got Good installed on my Galaxy S2 by my employer, but it was a nightmare violating their "no root" policy. Then I found this thread and it now all finally works.

I'm using the latest Speedmod Kernel http://xdaforums.com/showthread.php?t=2140192 with Sale's excellent XWLSD ROM http://xdaforums.com/showthread.php?t=1569686
[Android Software/Hacking General [Developers Only]] heylady40:
same for me. it crashes when trying to set up GFE on when acquiring Security Settings
[Android Software/Hacking General [Developers Only]] killerz298:
Latest version of good is crashing. It isn't related to this workaround. I am not using the workaround and I had to revert to an earlier version. See here: https://community.good.com/thread/8038 and Google store reviews. Seems to be happening to a bunch of people.
[Android Software/Hacking General [Developers Only]] cruise350:
Looks like the newest version is a good problem and not your exposed module. For me, 2.7 would close before the app even opened. I would get the good has stopped error before the app ever made it to any entry screen. I'm running a stock rooted S5 on Sprint. I am running 2.6 with the ver 3.3 workaround with no problems.
[Android Software/Hacking General [Developers Only]] Phantasm4489:
Since you aren't using the root workaround I presume you don't have xposed installed either? Just trying to work out if xposed could be the cause of any of the problems
[Android Software/Hacking General [Developers Only]] killerz298:
Yes, I have it installed for other things.
[Android Software/Hacking General [Developers Only]] CravingMender9:
Based on this article in Good's website: http://goodpkb.force.com/PublicKnow...ooting_Guide/16211/?l=en_US&fs=RelatedArticle

Open the site in desktop mode. Doesn't show on mobile mode.

It looks like it is due to Xposed only.
[Android Software/Hacking General [Developers Only]] Phantasm4489:
It could be that then. would it be possible for you to try it again with xposed uninstalled so I can rule out the xposed detection as the thing causing the problem
[Android Software/Hacking General [Developers Only]] killerz298:
Is it as simple as uninstalling it and then reinstalling it when done? Will I lose all the modules and settings?
[Android Software/Hacking General [Developers Only]] Phantasm4489:
Yep just uninstall it from within the xposed installer app you won't lose any settings or modules
[Android Software/Hacking General [Developers Only]] El Ha$on:
I have latest GFE client installed on completely stock nonrooted nexus 7 with lollipop installed and GFE works flawlessly no issues.

Sent from my LG-VS980
[Android Software/Hacking General [Developers Only]] killerz298:
Flashed to stock and installed latest good with no issues. I guess it is xposed. I don't know why Good is checking for it and disabling the app when my employer DOES NOT have root checking enabled. I am currently questioning them on this.
[Android Software/Hacking General [Developers Only]] Phantasm4489:
I'm assuming they'd consider xposed a threat to the.secure system they have built which might allow you to do things they might not want.

Would you be able to install the xposed installer app without actually installing the xposed framework to try and see if they are checking for the installer or checking if the framework is active?
[Android Software/Hacking General [Developers Only]] madman:
They actually check for the framework as in there knowledge base articles it clearly indicates to remove installer as well as framework.

Knowledge Base Article..

This really sucks though as employer don't care to check for root but there stupid peoples are enforcing this restrictions. They should rather improve the UX of app than this ****.
[Android Software/Hacking General [Developers Only]] Phantasm4489:
Yep they do check the framework. I found and disabled one of the checks a while back but I'm not sure if they also check to see if the installer is present. This is difficult for me to test as I can't run gfe without xposed as it would detect root
[Android Software/Hacking General [Developers Only]] killerz298:
I should have some time this weekend to play around with this however whatever you do, they will just work around no? It seems they are onto this thread perhaps and are working accordingly. Eventually the cat and mouse game will end I fear. I think what everyone (that has an employer that doesn't check for root) needs to start doing is bombarding them with emails about why they are checking for things on on phones when our employers don't have a block enabled.

On another note, my employer's regular network access has all sorts of blocks and disables internet for the entire machine so on and so forth. All I did to get around that was I installed it in a virtual machine and I was good to go. I don't know much about phone programing. Is there such thing as a virtual machine for Android where you can be "unrooted" inside the virtual machine and good would run?
[Android Software/Hacking General [Developers Only]] CravingMender9:
You mean something like Samsung Knox Container? That is actually a good thought. Let me try that on my Note 3 and get back to you.

Update: Disappointed! Knox only allows certain apps. Even downloading the apk and installing doesnt work. So GOOD isn't available in Knox for me.

This would have been a good alternative. Users can root their phones and do whatever they want, and go to Knox mode to access GOOD and other secure apps. But no! Sometimes we just ask too much from life :(
[Android Software/Hacking General [Developers Only]] Phantasm4489:
I think most employers run with root detection enabled. Mine certainly does. This whole idea will probably become irrelevant anyway as lollipop gets more popular as it doesn't look like xposed for lollipop is coming anytime soon
[Android Software/Hacking General [Developers Only]] killerz298:
Is there some other type of software that provides the same features but doesn't restrict the types of apps that can be installed? Can an android phone be dual booted like windows mobile used to be able to? 1 side rooted the other side not? I'm just throwing things out here. I really have no technical knowledge about any of these things.
[Android Software/Hacking General [Developers Only]] 78Staff:
My comp used to not do root detection, but turned it on about a year ago, probably as part of increased security and processes all around as part of "going public". Phantasm's patch has worked for me for several months now, although I never update Good until I know the patch is updated and working with new version.

As mentioned as we get 5.0 on more and more devices, with xposed not currently working with Art, we certainly have an uncertain future with Good, unfortunately. A dual boot kernel, or SafeStrap type recovery may be the only solution down the road.
[Android Software/Hacking General [Developers Only]] CravingMender9:
[MENTION=2505474]Phantasm4489[/MENTION] Hi, do you have the latest source up in Github or someplace?
[Android Software/Hacking General [Developers Only]] Phantasm4489:
not at the moment no. At the moment the source is a bit of a mess with different things i've been trying and also it doesn't work 100% so i don't want to put up the latest source.
[Android Software/Hacking General [Developers Only]] killerz298:
What about the whole virtual machine idea I floated? I know knox container doesn't work but is there any other VMWare type thing for Android that we could install Good into?
[Android Software/Hacking General [Developers Only]] 78Staff:
There is no VMWare (server) for android that I am aware of, however SafeStrap is a somewhat similar solution - it was initially developed for locked bootloader on later Samsung devices. It's essentially a custom recovery that leaves the oem rom intact but divides your internal storage into "slots" that allow other roms to be installed and booted into with it's own custom recovery. IIRC the only thing showing on the stock rom would be a custom revcovery, ie no root, xposed, etc. However I haven't even looked at SafeStrap in months. Basically you would have your stock, oem rom in the primary slot, and then your 2nd choice of rom ie custom rom like CM, AOKP, GE, etc in 2nd slot, but still requires a reboot to jump between roms, so not the most convenient solution.

EDiT - actually looks like SafeStrap development stopped Sept of last year, so that's not going to be an option...
[Android Software/Hacking General [Developers Only]] killerz298:
Hrmmm... if there is no such thing as an Android virtual machine that can be run on the phone, how about this crazy idea. Can Good be run on your DESKTOP virtual machine running Android which you remote into from your phone?
[Android Software/Hacking General [Developers Only]] 78Staff:
Honestly, I don't know. Defeats the purpose for me though, If I'm in front of a laptop/pc, I wouldn't need Good :). But it could be useful for some who wouldn't have corp citrix or vpn access, etc...
[Android Software/Hacking General [Developers Only]] killerz298:
no.... you remote in to your home desktop FROM YOUR PHONE and access Good on your desktop.
[Android Software/Hacking General [Developers Only]] 78Staff:
Ahh. I see. So have android emulator on desktop... Seems doable, if you can get good to run on android emulator...that's the sticking point. Good is pretty specific about what hardware it runs on. Worth trying...

Another option that might be something... Similar to the SafeStrap line of thinking - MultiRom http://xdaforums.com/showthread.php?t=2457063
[Android Software/Hacking General [Developers Only]] Phantasm4489:
deleted
[Android Software/Hacking General [Developers Only]] chumboy:
I'm trying to use this module to block root detection by my tivo app.

after I installed the module, I rebooted and didn't see an app icon in my app drawer. Is there a way to launch this module and have superuser triggered? Is there a settings that I could go to?
[Android Software/Hacking General [Developers Only]] El Ha$on:
This module is only for good for enterprise. Not TiVo.

Sent from my LG-VS980
[Android Software/Hacking General [Developers Only]] Phantasm4489:
You can't use it for anything other than the good client. It's not a generic root hiding application it hooks into the good client code in order to disable root. It won't work for anything else
[Android Software/Hacking General [Developers Only]] chumboy:
Ah...that is what all that client talk was about.

Derrr.

Thanks Phantasm (gave me nightmares that movie did)
[Android Software/Hacking General [Developers Only]] dubeyy:
Does version 3.5 work with GFE 2.8? On Xposed it only says support up to 2.7 but was posted after 2.8 was released
[Android Software/Hacking General [Developers Only]] Phantasm4489:
The most recent one posted in this thread will prevent all versions upto and including 2.8 from detecting root. However 2.8 just seems to crash out and we've not yet determined the cause. It could be some additional root checking or done additional checking for the xposed framework or it could just be that it's buggy and crashes for everyone. More investigation is required.

So if anyone is running 2.8 on a rooted phone who's company doesn't have root checking enabled it would be helpful to know if having xposed installed along with the latest module causes it to start crashing on startup.
[Android Software/Hacking General [Developers Only]] dubeyy:
Is the one in the thread 3.5?

I updated using Xposed and it detected root
[Android Software/Hacking General [Developers Only]] Phantasm4489:
The latest one in the xposed repo doesn't handle 2.8 at all. The latest one in this thread does partially but it still crashes out before you can use the app so it's only of use for investigating further. I don't remember the exact version number off the top of my head but 3.5 sounds roughly right
[Android Software/Hacking General [Developers Only]] sha_tan:
Any workarounds yet for Android 5? Not even any experimental methods?
[Android Software/Hacking General [Developers Only]] Phantasm4489:
Without Xposed or anything similar available there's only really 1 option. A cracked apk. The latest versions pose significant challenges for this. I'd say the best bet for running it on Android 5 for the moment is to go back to version 2.4 of gfe and make a crack of the apk using the code in the Xposed module as a basis for modifying the apk.

final Class<?> classPolicy = XposedHelpers.findClass("com.good.android.compliance.ComplianceManagerPolicy", lpparam.classLoader);

if (classPolicy!=null) {
XposedBridge.log("class found : com.good.android.compliance.ComplianceManagerPolicy");
} else {
XposedBridge.log("class not found : com.good.android.compliance.ComplianceManagerPolicy");
}

//older version of gfe
Class<?> classSecurityPolicy = XposedHelpers.findClass("g.aeb", lpparam.classLoader);
if (classSecurityPolicy!=null) {
XposedBridge.log("class found : g.aeb");
de.robv.android.xposed.XC_MethodHook.Unhook u;
try
{
u = XposedHelpers.findAndHookMethod(classSecurityPolicy, "a", classPolicy,
XC_MethodReplacement.returnConstant(Integer.valueOf("0"))
);
}
catch (java.lang.Throwable e)
{
u = null;
XposedBridge.log("hook1 g.aeb fail");
}

if (u!=null) {
XposedBridge.log("hook1 successful");
} else {
XposedBridge.log("hook1 failed");
}

} else {
XposedBridge.log("class not found : g.aeb");
}

It should not be that difficult to understand how this code works and see which method needs to be disabled in order to crack that version.

I won't risk going into any more detail or posting any apk's etc as we know that the Good people already have eyes on this thread.
[Android Software/Hacking General [Developers Only]] xGBHxPegasus:
Seems Good has added Exposed framework detection to Good for Enterprise in 2.8.0.398 and newer.

Link: http://goodpkb.force.com/PublicKnow...eshooting_Guide/16211/?l=en_US&fs=Search&pn=1
[Android Software/Hacking General [Developers Only]] Phantasm4489:
its been in there since 2.6 and those checks are bypassed in the Xposed Module but they might have added more checks in 2.8 and 2.8.1 which could explain why it doesn't currently work. We need to be able to prove this for sure. We need someone who uses GFE but whose server setup allows use on rooted devices so we can see if it has additional checks for Xposed separately from the root detection. I've spend some time looking for additional Xposed checks but not managed to find them so far.
[Android Software/Hacking General [Developers Only]] xGBHxPegasus:
Right here, my company allows rooted devices (as both my S5 and Galaxy S 8.4 have been working fine except for the latest update).

Luckily I also have access to the Good Server as I work in the IT department ;)
[Android Software/Hacking General [Developers Only]] Phantasm4489:
cool. So you have a rooted device with Xposed installed and it worked without the need for any hacks until version 2.8 ?

Presumably with 2.8 you see the 'Unfortunately Good has stopped' messages after you enter the unlock password?
[Android Software/Hacking General [Developers Only]] xGBHxPegasus:
Correct, Currently only the Galaxy S 8.4 as my S5 got upgraded to 5.0 and I'm reverting back to 4.4.2 at the weekend (aweful update!)

Yup, 2.8.0.398 and same error message.
[Android Software/Hacking General [Developers Only]] Phantasm4489:
ok so using the exact same setup that is currently failing are you able to confirm that if you temporarily uninstall the Xposed framework from within the Xposed installer it works correctly?
[Android Software/Hacking General [Developers Only]] xGBHxPegasus:
Yes, Un-installed Xposed framework via the installer and rebooted the device (left the Xposed installer installed).

Loaded up Good and working fine, started syncing and receiving e-mails.

EDIT - Re-installed Xposed framework and back to the crashing.
[Android Software/Hacking General [Developers Only]] Phantasm4489:
Ok thanks good to know. Looks like I gotta start searching around some more then.
[Android Software/Hacking General [Developers Only]] akarol:
So newest version doesn't work with root or with xposed module?
[Android Software/Hacking General [Developers Only]] Phantasm4489:
correct 2.7.1 is the latest version that the Xposed module works with
[Android Software/Hacking General [Developers Only]] akarol:
This is so annoying. I've been wanting to flash a Lollipop ROM so bad, but Good is what's holding me back. I don't understand why they have to be so Anal about root privileges in the first place.
[Android Software/Hacking General [Developers Only]] theroadrunner:
It's because good is designed to send secure email messages. When you have root access you can circumvent the security measures that your employer wishes to have over its email communication.
[Android Software/Hacking General [Developers Only]] xGBHxPegasus:
I installed the below and currently working fine with 4.4.2 and xposed:

http://apk-downloader.org/apk/view/Good+for+Enterprise™_com.good.android.gfe

Just remember to turn off auto update.
[Android Software/Hacking General [Developers Only]] Phantasm4489:
you have to allow the superuser request (it should only happen 1 time after any particular install of the good application) - its part of the way the xposed module deals with the security checks.