yashsingh1/xdaforums huggingface dataset:
[Galaxy Note 4 Android Development (Snapdragon)] parisien99:
Hello

i have installed the kernel, the TWRP and Super su and i have now root on my note 4.

But i always have in my notification bar a notification that says "security notification non authorized action have been made" (i translate from french so it is maybe not exactly what it write on english phones)

What can i do to don't have that anymore ?

Thank you
[Galaxy Note 4 Android Development (Snapdragon)] robotnikz:
You can freeze security log agent with TB and you're fine.

[MENTION=2176140]topic[/MENTION] screen mirroring is not working here on note 4. Must be kernel related. Stock rooted Rom.

Gesendet von meinem SM-N910F mit Tapatalk
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
Not related to the custom kernel

http://xdaforums.com/showpost.php?p=61396065&postcount=66

Or just do this:

In build.prop, add this line and reboot device

wlan.wfd.hdcp=disable

It works perfectly with my Samsung Smart TV
[Galaxy Note 4 Android Development (Snapdragon)] Guillaume59610:
[N910F][Kernel][Stock][Root] Android Stock 5.1.1 Kernel for root

Hi !

Thank you [MENTION=1420166]Phil.[/MENTION]:)

Could you tell me if it's works on the last germany firmware COI3 for N910F please ?
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
I didn't test, but normally, there are no significant changes between those micro letters. Probably just the branded stuff

Can you upload stock boot.img from COI3 ? I will look at it then
[Galaxy Note 4 Android Development (Snapdragon)] Guillaume59610:
Thanks for your answer. :)

I 've uploaded stock boot.img from COI3. Here is the link :

https: //mega.nz/#!wAlFBTQK!G2Y09HP2mYmtgQMo2PWUGYGPBlJkgyrMDLZpCnjCnqk
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
ramdisk changes don't seem relevant

Until we have new kernel sources for N910F, there is no need to recompile

I am using it heavily since a few days without any issue or bug I could spot
[Galaxy Note 4 Android Development (Snapdragon)] Guillaume59610:
Ok, thanks [MENTION=218262]Phil[/MENTION] ! :)
[Galaxy Note 4 Android Development (Snapdragon)] crazydeepman:
only for F

cant't work on 910C ?
[Galaxy Note 4 Android Development (Snapdragon)] Pafcholini:
No way. The 910C use exynos chip. You have to request on exynos subforum.

"If it compiles, it is good, if it boots up it is perfect"
[Galaxy Note 4 Android Development (Snapdragon)] cstratz:
Best kernel I have seen, until now! - Works without any problems also with German (DBT) ROM: N910FXXU1COI3, that also contains final fixes for StageFright and a better fingerprint support.

THX Phil!

P.S.: Every update is welcome...
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
Added some info in post 1 on what changed in Android 5.0 that probably will make it near impossible to root a stock ROM while having even the option to run in enforced mode when needed. Any other way that could be found in the future will mean using kernel vulnerabilities. This obviously will be fixed asap by google. At the end, it will be probably simpler and safer (stability wise) to choose between root and a selinux enforced device, not both

This also makes it impossible to use any KNOX protected features and triggers kernel modification alarms by security TIMA agent:

http://www.samsung.com/hk_en/support/skp/faq/1028007

That's why those services must be disabled
[Galaxy Note 4 Android Development (Snapdragon)] ahmadm1996:
Stock kernel

Can anyone provide me a flashable COJ3 stock kernel, please..?
[Galaxy Note 4 Android Development (Snapdragon)] galaxy16:
can i use this kernel when i flash kyubi rom? i have the n910G
[Galaxy Note 4 Android Development (Snapdragon)] vikastanwar:
hiii

i have introduced the piece, the TWRP and Super su and i have now root on my note 4.

However, i generally have in my warning bar a notice that says "security notice non approved activity have been made" (i decipher from french so it is perhaps not precisely what it compose on english telephones)

What would i be able to do to don't have that any longer ?

Much obliged to you
[Galaxy Note 4 Android Development (Snapdragon)] pr1jker:
Just freeze it with Titanium
[Galaxy Note 4 Android Development (Snapdragon)] pr1jker:
Looks like it is another dead thread...
[Galaxy Note 4 Android Development (Snapdragon)] StoneTheKiwis:
Bootloader

I have just bought a UK Note 4, 910F, which updated itself to 5.1.1. This was bought off Amazon, sim free and the bootloader should be unlocked I believe. Running adb against it shows the device, but after running 'adb reboot bootloader' the device cannot be found with 'fastboot'.

How can I tell for sure that the bootloader is unlocked? Is there some other known problem that causes this error? My Jiayu S3 behaves as expected when doing this (though it's already rooted). I'm trying to install twrp and the secure kernel from this thread.

Thanks
[Galaxy Note 4 Android Development (Snapdragon)] pr1jker:
First thing, install TWRP with Odin. Next a permiissive kernel, and you're almost done.
[Galaxy Note 4 Android Development (Snapdragon)] geebdroid:
Anyone interested in making an enforcing kernel for the 910v?
[Galaxy Note 4 Android Development (Snapdragon)] kushal.arora16:
Can someone plzz patch stock N910G XSA latest 5.1.1 kernel to gain root access..?
[Galaxy Note 4 Android Development (Snapdragon)] kushal.arora16:
[MENTION=4666971]Phil3759[/MENTION],

Sir please modify N910G 5.1.1 kernel SE enforced so that we can gain root & Private Mode can be used..

Flashing other kernels are breaking private mode & its not getting fixed anyhow...

plzz help sir...
[Galaxy Note 4 Android Development (Snapdragon)] rares495:
[MENTION=4666971]Phil3759[/MENTION]

Can something like this be made for 6.0.1? I'm sick of other kernels to be honest. I just want stock + root, that's it. Thank you.
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
Since latest SuperSU or the open source alternative PHH, no need to these kernels anymore

Just root with one of them if you just need stock root
[Galaxy Note 4 Android Development (Snapdragon)] dead4ngel:
hi can someone point me in the right direction. i want to have the latest stock kernel for 5.1.1. im currently on nameless rom v7. i want it to be permissive to as other the other kernels out there like xceed and emotion. but i want the latest one that would work. can anyone provide a link or which one i need to download thanks.
[Galaxy Note 4 Android Development (Snapdragon)] sefrcoko:
Phil quick question for you about the kernel build... 5.1.1 was just released for the Note 4 N910W8 variant, and my goal is to modify it to selinux permissive so it can boot my rooted custom rom. The latest source available from Samsung seems to be based on 5.0.1 (BOE1). From what I can tell, it seems like I need to build off that source and then repack with the latest ramdisk from the 5.1.1 kernel? If I want to change selinux to permissive, does that happen at the source-code level before the repack, or at the ramdisk level? Been building roms for a while but just starting out with kernel dev, thanks :)
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
You need 5.1.1 sources, not 5.0.1

Selinux: it is explained in op
[Galaxy Note 4 Android Development (Snapdragon)] sefrcoko:
Ok thank you for the reply. Does that mean I must wait for samsung to release the 5.1.1 sources for the N910W8, or can I use a different 5.1.1 source in the meanwhile (e.g. the N910PCOG5 source that you used for this kernel)? I see other custom kernels booting 5.1.1 on our device so wondering what source I can use until Sammy releases our own.
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
interesting news, to avoid compiling kernel:

http://xdaforums.com/apps/supersu/wip-android-6-0-marshmellow-t3219344

I have no time right now to revert to 4.4.4 on my Note 4 to test it

I attach sepolicy file from XXU1COH4

If someone on 4.4.4 can follow these steps and post the patched sepolicy, I will try a repacked bootimage with a pure stock kernel in enforcing mode

Attach the Note 4 with android 4.4.4 , rooted with

SuperSU 2.50

to USB or use a terminal in root

Follow below steps:

adb push sepolicy /data/local/tmp/sepolicy
adb shell su -c "supolicy --file /data/local/tmp/sepolicy /data/local/tmp/sepolicy_out"
adb shell su -c "chmod 0644 /data/local/tmp/sepolicy_out"
adb pull /data/local/tmp/sepolicy_out sepolicy_out
[Galaxy Note 4 Android Development (Snapdragon)] yussuf007:
Hi phil 910f source is out. Can you complie the permissive kernel for us?

Thank you.
[Galaxy Note 4 Android Development (Snapdragon)] _alexndr:
Strange... COI3 sources in one file with BOE5? I hope it is not a typo... do not let us enjoy until we see what's inside ;p
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
seems they missed the sources download link
[Galaxy Note 4 Android Development (Snapdragon)] yussuf007:
I wrote yesterday a mail for osrc to realise the source because the firware is out abaout a month... and then i got today a mail they realise it. Now i write mail for realise the download button please. xD
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
I also sent a request to fix the download link

They are scrambled with javascrit, so hard to guess where the actual link points
[Galaxy Note 4 Android Development (Snapdragon)] _alexndr:
I think it is not mandatory to revert to KK (4.4+ means 4.4.x and above, in my opinion) but to the latest version which let us root our device while running enforcing kernel (e.g. 5.0.1 POF2)

Will try it but in the evening, as I am at work...
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
yep, sure

Many thanks. Just use a 5.0.1 pure stock rom, root it with 2.50, download the sepolicy file I provided and apply the commands I mentioned while in ADB under main system,

not recovery

Please, provide exact steps when posting patched sepolicy file so I am sure it is done the correct way

If I have time, I will try to play with it too
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
OP updated with new kernels, pure stock, no recompile + enforced based on [MENTION=631273]Chainfire[/MENTION] recommendations

You need SuperSU 2.50 installed before this or you will bootloop

Private mode works perfectly, no more Security nags to freeze

Credits [MENTION=631273]Chainfire[/MENTION]
[Galaxy Note 4 Android Development (Snapdragon)] yussuf007:
Tested and works great. Thank you!

Boot time is so much lower whit the new kernel and su 2.50

Great work guys!
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
small explanation:

I will keep providing the permissive kernels when new sources are out because they offer some advantages for who needs them

I will also update stock enforced kernels when needed
[Galaxy Note 4 Android Development (Snapdragon)] Dean-xXx:
Hello, just installed the SuperSU 2.50 and flashed to stock kernel over, but now phone boots up with no network / no baseband and resets itself every minute. Any idea?

I was on COI3 previously rooted with the permissive kernel.
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
Follow these steps:

1- install SuperSU 2.50 from recovery

2- flash N910F-Stock_Kernel_XXU1COI3_Root_Enforced-PhilZ in recovery (zip) or odin (tar)

Also, if device was encrypted, it will reset its self
[Galaxy Note 4 Android Development (Snapdragon)] Dean-xXx:
That's exactly what i did.

Flashed BETA-SuperSU-v2.50 in recovery and then i startup the phone to check if updated successfully and after i flashed the new kernel with odin.

Now when the phone boots up, still shows with red: KERNEL IS NOT SEANDROID ENFORCING, then boots up perfectly fine, just there is no network and in About shows Baseband: Unknown.

Will try again now to flash the kernel in recovery this time.

EDIT:

1. Flashed it through recovery also, same result. No network/no baseband and reboots after 1min :(

2. Flashed the permissive COH4 Kernel through recovery and everything is back to normal and is working 100%.

What else could i try?
[Galaxy Note 4 Android Development (Snapdragon)] Inuit:
Flashed BETA-SuperSU-v2.50 in recovery and then i startup the phone to check if updated successfully and after i flashed the new kernel with odin.

Did the same and for me everything is o.k

I have Network and baseband.

Greetings

Inuit
[Galaxy Note 4 Android Development (Snapdragon)] Dean-xXx:
I really have no clue what can be wrong with mine.

I tried flashing the new recovery with odin and recovery with same results.

After i flashed back the COH4 permissive one, everything went back to normal...
[Galaxy Note 4 Android Development (Snapdragon)] Inuit:
Which recovery are u using?
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
Could be related to a root app you are using. Many root apps, unless updated, could need a permissive kernel for now under 5.1.1

Keep in mind that only SuperSU for now supports this hack in android policies.

If you have apps causing issues, better stick to the permissive kernels until app is updated or a new root way comes out
[Galaxy Note 4 Android Development (Snapdragon)] Dean-xXx:
I'm using latest BETA SuperSU 2.50, the only apps i have which requires root access is ES File Manager and ADaway.

[MENTION=391814]Inuit[/MENTION]

I'm using Philz Touch recovery.
[Galaxy Note 4 Android Development (Snapdragon)] Inuit:
[MENTION=219616]Dean[/MENTION]: I´ve used TWRP v. 2.8.7.0. and BETA SuperSU 2.50 - perhaps worth a try for you.
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
1- try to disable adaway

2 - else try to unroot in superSU and reboot, it will show if it is SuperSU issue that must be posted in SuperSU + logs

I tried here without issues, but not with adaway
[Galaxy Note 4 Android Development (Snapdragon)] Dean-xXx:
Thank you, i will try this also.

Hope it works. :(

I will do this also and get back with results.
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
flashing with PhilZ Touch works perfectly by the way
[Galaxy Note 4 Android Development (Snapdragon)] yussuf007:
No problem here whit enforced kernel and su 2.50
[Galaxy Note 4 Android Development (Snapdragon)] Dean-xXx:
I just deleted ADaway, unrooted completely from SuperSU and flashed again the COI3 enforced kernel, now i get bootloop at Samsung logo. Flashed back the COH4 permissive and is working again...

Really don't know what could be the problem, the only thing which jumped into my eyes is that the phone shows COH4 CSC when i check *#1234#

AP: COI3

CP: COI3

CSC: COH4

Could this be the real issue here?
[Galaxy Note 4 Android Development (Snapdragon)] yussuf007:
Im useing adaway whitout problem. tried philz recowery and TWRP and whit all 2 recowery flashed corectly the kernel and SuperSU

Edit: tried *#1234#

And for me all is coi3
[Galaxy Note 4 Android Development (Snapdragon)] Dean-xXx:
I just tried to flash with TWRP also, same result.

Whenever i flash the enforced COI3 kernel, i get same result and if i unroot my phone, it will go into a bootloop.

What i find strange is that after i flash the kernel, in the *#1234# menu doesn't show all 3 options anymore, it will show just the first one (AP) and nothing else below.

---------- Post added at 04:46 PM ---------- Previous post was at 04:04 PM ----------

I'm wondering if anyone has a flashable COI3 CSC to give that a try...
[Galaxy Note 4 Android Development (Snapdragon)] zabumba:
Coming from stock not rooted and everything works just fine except reactivation lock. Is there any solution?

Thanks for all your work.
[Galaxy Note 4 Android Development (Snapdragon)] yussuf007:
If you can tell me how can i do a flashable csc. I will make it for you.

---------- Post added at 05:52 PM ---------- Previous post was at 05:49 PM ----------

Reactivatin lock is a pain... if you softbrick your phone odin doesent flash anything if reactivation lock is on.
[Galaxy Note 4 Android Development (Snapdragon)] zabumba:
I know but is also a good security measure if your device gets lost or stolen.
[Galaxy Note 4 Android Development (Snapdragon)] Dean-xXx:
Just a quick update, i also updated the CSC to COI3, but the result it's same after i flash the enforced kernel.

I guess i will download the BTU COI3 firmware and start fresh, if anyone else has any suggestion to what could cause this, please let me know.

The problem:

>I rooted the phone while on COH4 permissive kernel with the SuperSU 2.50

>I flashed the COI3 enforced kernel with PhilzTouch, TWRP and Odin.

>I deleted all apps which required root access

After i flash the COI3 enforced kernel my phone boots up perfectly, but has no network at all, in Settings>About Device shows the Baseband: Unknown and the phone reboots after 1 minute. If i delete SuperSU and unroot my phone while on COI3 enforced kernel, gets stuck in a bootloop.

Did i miss something? Because i was previously using the permissive COH4 kernel with SuperSU 2.46(I think) and today i updated to SuperSU 2.50 and flashed the new COI3 enforced kernel (followed OP instructions), but i have problems afterwards.

Cheers.
[Galaxy Note 4 Android Development (Snapdragon)] JagDave:
I've flashed both your latest 'enforcing' kernels without any problems. However, when I boot my phone I'm still getting the kernel is not seandroid enforcing warning. Is this correct?

Yet when I check in the settings SE for Android status is Enforcing.

Could this be a TWRP error when booting?
[Galaxy Note 4 Android Development (Snapdragon)] yussuf007:
I found one thing.... last step. I think you need flash SU 2.50 again.
[Galaxy Note 4 Android Development (Snapdragon)] Dean-xXx:
You mean i have to flash SU 2.50 before and after flashing the enforcing kernel? I didn't see that in instructions.
[Galaxy Note 4 Android Development (Snapdragon)] yussuf007:
Hmmmm....

Now i tell you what steps i use.

I used before philz kernel 1.0

Flashed enforceing kernel and then flased SU 2.50

Reset and except the red line what i tell i have the permissive kernel. Ewerything is ok.

And more i think its boot up so much faster.
[Galaxy Note 4 Android Development (Snapdragon)] Dean-xXx:
Oh, ok :)

I will flash again the kernel and install SuperSU 2.50 after that to see if makes any difference.

I also noticed some improvements with the new kernel. It's a bit faster overall and after reboot with COI3, phone is using 1.20gb RAM and with COH4 it's using around 1.45gb after reboot, so there are some changes.
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
bootloader verifies boot image signature. If it is not Samsung Geniune, it will cry

we still need to disable security agent log because it detects root intrusion and modifications to sepolicy
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
So far no issues, Titanium Backup/Restore, My Backup, Root Explorer, AdAway, Button Savior, Notification Toggle, Folder Sync, Terminal Emulator... all work as expected
[Galaxy Note 4 Android Development (Snapdragon)] yussuf007:
Xmod game wont work alone whit enforced kernel. Ewery other what i try is working great.

---------- Post added at 10:48 AM ---------- Previous post was at 10:47 AM ----------

And i doesent try viper witch i remember coretly it need a permissive kernel.
[Galaxy Note 4 Android Development (Snapdragon)] Dean-xXx:
[MENTION=4666971]Phil3759[/MENTION] [MENTION=602154]zancum[/MENTION]

COI3 source code is up now on opensource, just got notification from them :D

Can't wait for the permissive COI3.
[Galaxy Note 4 Android Development (Snapdragon)] yussuf007:
Yes and this time they dont messed up the download link
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
Update:

N910F-Stock_Kernel_XXU1COI3_Root_Permissive_NTFS_PhilZ_v2.0

Based on COI3 ramdisk and N910F_COI3 stock sources

I also update compiler to 4.8 as Samsung recommends

Do not expect anything new. As I said, the source changes are marginal and mainly to a register driver + a minor fix in wifi sources, that's it
[Galaxy Note 4 Android Development (Snapdragon)] casanovas:
Excuse me... but i have download all the files (kernel.zip) from post 2.

what do i have to do now? I dindt see any install instruction :( will you pls help ?

and do i need anything else to download?
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
zip: flash in recovery

tar: flash in odin
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
PhilZ Touch recovery updated with a special permissive kernel, lzma compressed

http://xdaforums.com/note-4/snapdragon-dev/trltexx-philz-touch-t2927930

This only a repack for a device I own. Do not expect compiling from sources or porting to any other device from me.

As you can see, the recovery is still valid for 5.1.1 if properly repacked
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
After a few days of testing, and from Chainfire comments on SuperSU beta, I would recommend the enforced kernel.

Chainfire is going this way for now and he discouraged use of permissive kernel as a rule. They represent an important drop in security, or let's say, no security at all.

Most developers should reset selinux permission to enforced in their sources and switch to SuperSU 2.50+ unless some are fine to run without security. At least we have now an option to root while keeping a decent security level.

The enforced kernels in this thread are stock untouched Samsung images except the patching to SE policy for SuperSU. So, for people needing stock kernel, it is the best option.

COI3 kernel will work on any previous 5.1.1 ROM (COH4...) as the changes between versions are marginal and limited to some driver enhancements
[Galaxy Note 4 Android Development (Snapdragon)] yussuf007:
Realy thank your work coz this is my first device where i use stock kernel because it have the best battery/performance against costum kernels. Second thing is root what i allways use and whitout you i cant use it whit stock kernel

Thank you again and keep it up!

Ps your latest recovery is working great and i think it is the best here.
[Galaxy Note 4 Android Development (Snapdragon)] shoey63:
Great screen mirroring fix Phil. Works flawlessly on my Xperia Z3 with unlocked bootloader, whereas previously it would only work on locked. Been trying to sort it out for ages. And it's nice to see you on XDA again. Hope you are well:thumbup:
[Galaxy Note 4 Android Development (Snapdragon)] _alexndr:
So... For people who need permissive kernel for some reasons but not all the time - perhaps the best solution would be SELinux controlled from the command line :) I know, you said "Do not expect anything new", but it is really very simple and I just did it, as you can see in attachments :)
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
But that will only be possible on eng and user-debug builds, not on a stock Samsung ROM

Modders that do build their ROMs can probably use the stock Samsung kernel to enable the SE state toggle

I did not follow all SE ins and outs, but, from what I got, since 5.x, we need CONFIG_SECURITY_SELINUX_DEVELOP in defconfig + androidboot.selinux=permissive in cmd line + a user-debug/eng build

The first is enabled by default in stock kernel sources, the second is easy to add by repacking stock boot image, the last is a ROM build, but not the stock ROM in anyway

This kernel targets stock ROM users, except the permissive one which is open

Did I got it right?
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
np

I am fine, just a very busy life that is no longer compatible with a plain time hobby. So, I am back to doing things just for my needs and share whenever wanted/needed
[Galaxy Note 4 Android Development (Snapdragon)] Ant38:
Installation proced for Enforcing method 1 please ?

I have flash the .tar is ok and... im not root*

thanks
[Galaxy Note 4 Android Development (Snapdragon)] Phil3759:
Kernel is not pre rooted. Manually install SuperSU 2.50+ from recovery
[Galaxy Note 4 Android Development (Snapdragon)] crash_194:
Thanks for sharing your work Phil, I wouldn't even know where to start in terms of doing any of the stuff you do! Lol

sent from my Galaxy Note 4
[Galaxy Note 4 Android Development (Snapdragon)] Ant38:
Thanks is good /kiss