yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] phhusson:
I've still got nothing. Good to know they want to work on it as well.

Would you know how I could join them? (my preferred method is IRC)
[Android Software/Hacking General [Developers Only]] barturblits:
I only got this:

http://xdaforums.com/google-nexus-5/orig-development/rom-omnirom-t3264167/post68168679

Thread is for nexus 5x btw, I got a 6p.
[Android Software/Hacking General [Developers Only]] Lrs121:
At the bottom they list the IRC channel. https://omnirom.org/get-involved/
[Android Software/Hacking General [Developers Only]] PunchUp:
Hi everyone,

With phhusson's consent, I have started to rewrite the UI of Superuser app.

It's functional but some of the additional features are missing/broken. While I work on them, your feedback would be helpful :)

Some notes:

The app currently uses a (AMOLED friendly) black theme. I will add more theming options later.

To allow/deny & revoke, tap and hold the name of the app and swipe to the right or left respectively.

Here's the apk
[Android Software/Hacking General [Developers Only]] androcraze:
- The "About" section needs to be overhauled, of course. Most of the links have little to do with the project, and it points to the wrong github.

- Right now it's a really clean and legible interface; focus on clarity. The icons make sense. Please don't use freaky icons.

- The cyan and white setup looks OK, but a medium to dark blue might be more readable.

- Maybe just a dark and light theme; I'd be just as happy eliminating color and going with grayscale on both.
[Android Software/Hacking General [Developers Only]] PunchUp:
- Yes I will change the About section accordingly after consulting with phhusson

- Thanks! And no I won't use any freaky icons. Hope the ones used currently are fine?

- I haven't touched the superuser request activity yet. It will be overhauled soon.

- I'll try to provide decent amount of theming options. People can set it up as they wish :)
[Android Software/Hacking General [Developers Only]] jamy015:
When updating my phone, is it possible to flash the new rooted boot.img straight over the old one, or is it advisable to first flash the stock boot.img from the update, reboot, let it optimize apps, and then flash the rooted boot.img?

Edit: Also, would it be possible to publish checksums (e.g. SHA-256, like Google does for the Nexus factory images) for the images on https://superuser.phh.me? These images are quite important to the operation of our devices, so it would be really useful to be able to verify the downloaded files using checksums.
[Android Software/Hacking General [Developers Only]] androcraze:
How would you update a ROM on a device without overwriting the boot.img? Each partition separately?

I fully install the ROM, then I install (overwrite) the boot.img.

I think checksums are a neat idea.
[Android Software/Hacking General [Developers Only]] jamy015:
Yes, that's what I've been doing as well. However, the stock ROM also has a boot.img. My update process currently goes like this: flash IMG files from the stock ROM (system, vendor, cache, boot, etc), reboot into Android and let it optimise apps, and then flash the rooted boot.img and reboot into Android again.

What I'm wondering is if it's possible to simply do it like this: flash system, vendor, cache, etc from the stock ROM and also immediately flash the rooted boot.img. That would save me 2 reboots.
[Android Software/Hacking General [Developers Only]] androcraze:
I don't know that it wouldn't. I reboot to install GApps, and usually take care of the boot.img (or zip file) then. The only hard and fast rule I follow is flashing GApps after an initial boot.

You're not going to break anything.
[Android Software/Hacking General [Developers Only]] IndiNix:
FWIW I have been flashing the stock boot.img then immediately the rooted boot.img with no problems.
[Android Software/Hacking General [Developers Only]] Lrs121:
If there is an up to date rooted boot image for the device you're using you can flash that instead of the stock one. If not flash the stock one jump right into recovery then flash the Superuser zip. There shouldn't be any reason you would need to boot to Android before rooting.
[Android Software/Hacking General [Developers Only]] fadedout:
I want to report a bug (presumably) in the user interface of the Superuser application. When I enter the log page and click on the individual log entries, I'm unable to view any additional details such as App, Package, Requested UID, and Command. I've attached a screenshot.

I'm running phh-superuser-17-magisk.zip via Magisk-v6.zip on a OnePlus 3 (Android 6.0.1 OxygenOS 3.2.4).

Lastly, I've been using Chainfire's SuperSU Pro for it's detailed logging feature. It's really handy to see what commands are being run as root by various apps and scripts. Does this application (when it's operating correctly) have similar capabilities?
[Android Software/Hacking General [Developers Only]] phhusson:
Both are fine.

I won't do that, for two reasons:

1. Let's see the whole chain: I generate boot.img on the server itself, then you download it through https, then you flash it through fastboot

Your internet connection is already checksumed. The TCP connection on it is checksumed. The https on it is checksumed.

The odds of everything there going wrong must be of the order of 10^-100.

Adding a sha256 would indeed make it go to 10^-180, but I could also add a md5 to make it go to 10^-240, and add a crc32 to go to 10^-250...

Then there is fastboot. The probability of either eMMC corruption or corruption on USB is much higher.

If you want SHA-256 for security's sake, that's just non-sense. You already need to trust the https/website to get the sha256, so it doesn't change

2. According to Android's secure boot documentation, this shouldn't be needed. The boot.img for Nexus are signed by my own private key, so, I already provide an assymetrical proof the boot.img are made by me and untampered.

The problem is that no Nexus respect this documentation, so this isn't true, but I don't want to fight to provide additional security means when this is already available.
[Android Software/Hacking General [Developers Only]] Tkkg1994:
One thing, on galaxy Note 7 this root method seems to work in first place, but as soon as someone tries to access TitaniumBackup or Nova for example, root get's prompted and phone just reboots. Chainfire needed to update his supersu too to V2.77 to get root working on the new note 7.

Can I help you somehow to sort out this bug. I tried with your latest build of superuser (superuser-r229.zip)
[Android Software/Hacking General [Developers Only]] Lrs121:
The portal and chainfire both wrote several good articles documenting why this happens. It comes down to the kernel. As soon as any app requests root and runs at a uid/gid less or equal to 1000 then the phone reboots. Which most root apps do.

To get around this issue chainfire had to hex edit the kernel to remove the "protections" Samsung placed into the kernel. Because of this, we probably won't see phhussons Superuser support the stock kernel of the devices with these protections in place, because of the work required to do so. Meaning a custom kernel will probably be required.

Edit: here's the like to chainfires post explaining the process if anyone is interested. Sorry it took so long I was in class.

https://plus.google.com/+Chainfire/posts/S4ucYdfqPhq
[Android Software/Hacking General [Developers Only]] Tkkg1994:
Perfect, thanks for the infos!
[Android Software/Hacking General [Developers Only]] adrman:
PunchUp, I've just posted about your rewrite over in the Magisk thread, but it was brought to my attention that the link is no longer active. I have someone asking me to post the apk for them, but wanted to ask your permission first and check on the reason your Dropbox link was no longer working. Thanks.
[Android Software/Hacking General [Developers Only]] PunchUp:
Sorry about that. I have rectified it now. The link should work fine again. Thanks!
[Android Software/Hacking General [Developers Only]] fmc000:
Up this, please. Anyone with ideas? I'd like to try the latest version with 'eng noverity crypt' but I suspect I will get the same results as before.
[Android Software/Hacking General [Developers Only]] apatal:
Hi guys, been looking around the interwebs for an alternative to SuperSU and this project looks promising. I can't seem to find a link for a downloadable boot.img I can use to root my phone though (Nexus 5x). Is there a repository of files I can go to try out this superuser method? Thanks!

EDIT: Nvm, found it. Sorry for not reading. New question: I see 3 boot.imgs in the bullhead folder aside from the original boot.img. Which is the recommended one to use? Thanks again!
[Android Software/Hacking General [Developers Only]] androcraze:
The current one for your ROM. You can look in "About Phone" to figure which ROM revision you're running.

EDIT: OK, didn't understand what you were referring too. Thank you, [MENTION=4745442]adrman[/MENTION]
[Android Software/Hacking General [Developers Only]] adrman:
The OP lists the differences, but ENG would be a good place to start. I also used to run the Noverity version. You may want to check out the implementation of this superuser with Magisk as well.
[Android Software/Hacking General [Developers Only]] apatal:
Thanks! Looks like i derped my phone and had to do factory reset and flash the factory image. I successfully rooted it using the 'nocrypt' one, just in case i decide to decrypt it later. This is a promising alternative to SuperSU. I'll be sure to spread the word. Thanks!
[Android Software/Hacking General [Developers Only]] GjorgiDxc:
Any N compatible zip I'm missing? Matter of fact the update.zip link shows 404. I've searched high and low, but couldn't find what I was looking. The one zip I've downloaded from the bot didn't flash successfully. It was r229.
[Android Software/Hacking General [Developers Only]] apatal:
Question folks: what do I do if I want to run a custom kernel but still keep root using this method? Is there a way?
[Android Software/Hacking General [Developers Only]] PunchUp:
Use the zip method
[Android Software/Hacking General [Developers Only]] apatal:
Has anyone tried r229 on stock NRD90M? I want to use it with a custom kernel as well.
[Android Software/Hacking General [Developers Only]] androcraze:
I've always had good luck with superuser-r170.zip.

Flash after installing the ROM, then install the the app from F-Droid or the PlayStore.
[Android Software/Hacking General [Developers Only]] apatal:
Just used the r197 zip file and it worked! Running FK now on my 5x while rooted with phh's superuser! Thanks OP!
[Android Software/Hacking General [Developers Only]] iKirby:
Just flashed r229 zip on my Nexus 5, root is working. But it seems to have broken some settings I set when installing ElementalX kernel, I have to apply these settings again using the EX kernel manager app.

So far everything works well, thanks! :)
[Android Software/Hacking General [Developers Only]] dmantilal:
How can we easily verify the boot.img with your public key before flashing?

An sha256 checksum is very useful when verifying files before flashing. Errors do happen, regardless of the multilayered checksumming inherent in the internet. If the file was a *.zip with integrated checksumming, I can understand foregoing the creation of sha256sums.

If you could automate the creation of sha256sums or similar, I would be grateful.

Thanks for this project, btw! :)
[Android Software/Hacking General [Developers Only]] :
Hello. Please contact me via Telegram [MENTION=620540]nolan[/MENTION]roell or via Hangouts ASAP. I can get you everything on your wanted list, and more.
[Android Software/Hacking General [Developers Only]] moriel5:
Ban hammer needed.
[Android Software/Hacking General [Developers Only]] Sam Nakamura:
Top of my wanted list is those freaking posts to be banned! Can you get me this? Thx
[Android Software/Hacking General [Developers Only]] :
I can't say who, but due to the recent SuperSU concerns, some very high level developers are collaborating on a new SU app using this as a base. I would like PHH to join. These people are highly connected, and would be able to check everything on that wanted list.
[Android Software/Hacking General [Developers Only]] Sam Nakamura:
OK, I mean this is quite cool if seriously but your first post seemed to be spamming 100%

If so then there are better ways to communicate a strategic planning / workgroup to PHH, in my opinion..

But ey anyways cool if you are for real!
[Android Software/Hacking General [Developers Only]] :
The only methods of contact he provided were email or IRC. The IRC channel was dead, and email takes too long.
[Android Software/Hacking General [Developers Only]] sooyong94:
Great app - but one minor problem though is when I reboot my phone via Quick Reboot https://play.google.com/store/apps/details?id=com.antaresone.quickreboot

I got a force close error, then the phone reboots just fine.

I have an EU Moto X Style at 6.0.1 BTW.

Also when I unrooted SuperSU via the app, for some reason the Facebook Messenger app displays a white status bar instead of the normal status bar:

What is going wrong with my phone?
[Android Software/Hacking General [Developers Only]] androcraze:
For ShutDown, you can't perform a CLEAN shutdown from /data (where the PlayStore downloads reside). It may shutdown, but upon restart, you'll get errors about not perfoming a clean shutdown:

https://github.com/ppareit/Shutdown/issues/4

The app linked above hasn't updated the changes to F-Droid yet. I'd love to see someone build the thing. It would have to be manually installed or flashed to /system/app.
[Android Software/Hacking General [Developers Only]] sooyong94:
What about the white status bar? I tried reinstalling the Messenger App but to no avail :(
[Android Software/Hacking General [Developers Only]] androcraze:
I don't see the white status bar as a rooting issue. I'm not sure how to fix it.
[Android Software/Hacking General [Developers Only]] adrman:
Try Franco's Simple Reboot It has a proper shutdown sequence.
[Android Software/Hacking General [Developers Only]] androcraze:
Is there source code for it?
[Android Software/Hacking General [Developers Only]] sooyong94:
What I did:

1. Full unroot from SuperSU

2. Flashed Phh SuperUser via TWRP

3. Reboot

It worked after installing the app from the Play Store, but I get a white status bar. I tried wiping the Dalvik Cache and perform a context fix but none of them are working. Could Gravitybox be the issue here?
[Android Software/Hacking General [Developers Only]] nathanchance:
Indeed: https://github.com/franciscofranco/Simple-Reboot-app
[Android Software/Hacking General [Developers Only]] androcraze:
Nope. I get a "Values not applied. Unclean shutdown, values not applied" from NoFillsCPUControl when I reboot using Franco's Simple-Reboot. I gave it root permissions, when requested.

It's not shutting down nicely.
[Android Software/Hacking General [Developers Only]] stokholm:
Is this compatible with FlashFire?
[Android Software/Hacking General [Developers Only]] phhusson:
Hi,

I'm obviously very interested. I must point out that if I'm not available on IRC, it means I'm not available. IRC has for me a much higher notification priority than XDA.

As for communicating privately, I'm not saying no, but at least give me a reason (I've seen no XDA PM, no mail, no IRC PM, no mail...)

Though I have to mention this is really weird to speak privately about an opensource project.

Also, you mention other devs, so I guess a whole chatroom should be setup rather than just speaking privately?

I'm sorry for that answer, but I've had some community issues in the past, the safest way for me is to be as public as possible.
[Android Software/Hacking General [Developers Only]] OmegaBlaze:
Hello [MENTION=1915408]phhusson[/MENTION]. I've been a long-term Chainfire SUPERSU user.

The day has finally come for me to uninstall SUPERSU completely and move forward.

These are the steps I took to uninstall SUPERSU & install Superuser:

I restored my stock boot.img.

Installed your no encryption boot.img

Flashed your Superuser zip and then uninstalled the Chainfire SuperSU app upon boot up.

Is this the correct method to transition from SUPERSU to Superuser?
[Android Software/Hacking General [Developers Only]] phhusson:
Sounds good enough.

There is still a su.img somewhere (can be in /data/su or /cache I think), but it's inactive.
[Android Software/Hacking General [Developers Only]] :
I've PM'd you.
[Android Software/Hacking General [Developers Only]] :
Has this really not been updated since January?
[Android Software/Hacking General [Developers Only]] nathanchance:
Look inside the download folders, there are images available from N. Don't just read changelogs and assume it hasn't been updated.
[Android Software/Hacking General [Developers Only]] :
Thanks, so how do I install this? Get rid of supersu, flash the IMG in twrp and install the app from playstore? Or did I miss something?
[Android Software/Hacking General [Developers Only]] nathanchance:
Correct.
[Android Software/Hacking General [Developers Only]] apatal:
If you want a custom kernel with it, download one of the zip file (r197 worked for me), edit the config.txt if you want to disable encryption and/or dm-verity, then flash the zip after flashing the custom kernel.

Hope this helps! ;)
[Android Software/Hacking General [Developers Only]] nathanchance:
You can also flash the custom kernel after the boot.img since almost every modern custom kernel (at least for Nexus devices) uses the AnyKernel format). That's what I did with my kernel after compiling the boot.img from source.
[Android Software/Hacking General [Developers Only]] phhusson:
Ok, how about restorecon -R /data/media ?
[Android Software/Hacking General [Developers Only]] toonlight:
Success!

>adb shell
shell@hammerhead:/ $ su
root@hammerhead:/ # restorecon -R /data/media
SELinux: Loaded file_contexts contexts from /file_contexts.
root@hammerhead:/ #

(Was getting permission denied without su)

Line and SwiftKey are able to access the sdcard now. Thanks! You're awesome.
[Android Software/Hacking General [Developers Only]] toonlight:
Encountered this when trying out CF.lumen (see attached).

The driver indeed doesn't work. Is this a known issue?
[Android Software/Hacking General [Developers Only]] nicholseric:
When I installed CF.lumen on my Pure Nexus rom, I denied all root requests and it works just fine.
[Android Software/Hacking General [Developers Only]] toonlight:
Are you using the CF.lumen driver, or the Rootless driver? And stock rom/kernel?
[Android Software/Hacking General [Developers Only]] nicholseric:
Rootless on whatever kernel comes with pure Nexus, im pretty sure the kernel is stock.
[Android Software/Hacking General [Developers Only]] toonlight:
I see. Yeah, the Rootless driver works, but it's lower quality than the CF.lumen driver (IMO far worse quality coming from CF.lumen driver on 4.4.4). See this post for a description of the difference: http://xdaforums.com/showpost.php?p=51779411&postcount=2

Of course, it's better than nothing if we don't have compatibility yet.
[Android Software/Hacking General [Developers Only]] nicholseric:
I don't trust giving this app root without an explicit policy for its known needs.
[Android Software/Hacking General [Developers Only]] toonlight:
I agree. Isn't "an explicit policy for its known needs" exactly what the error message is referring to (supolicy) and what would likely fix the problem?
[Android Software/Hacking General [Developers Only]] nicholseric:
I'm pretty sure granting CF.lumen root would allow it to put SE into permissive instead of allowing it to do just what it needs.
[Android Software/Hacking General [Developers Only]] hgoldner:
I have this running on an HTC M9 running a Marshmallow ROM. Some apps successfully ask and obtain root privileges, but Titanium Backup always fails because it looks to /system/xbin/su for rights.
[Android Software/Hacking General [Developers Only]] phhusson:
Ok I found the problem and got a fix (at least for CAF 6.0).

I need to think wether it is an actual security hole before commiting it.

Not really. It is poking holes in the policy to do what it wants to.

And the user is not warned of those policy changes. (you might be if you read at the logs)

That's weird, it's working for me on a CAF 6.0 without /system/xbin/su, I guess it's some other problem

(I'm aware of some limitations with my SU/Titanium Backup I have to fix, but basic features should work)
[MENTION=1162986]Captain_Throwback[/MENTION] can you have a look?
[Android Software/Hacking General [Developers Only]] Captain_Throwback:
I have this problem with Titanium Backup and also with Adaway.

View attachment 3551374View attachment 3551375
[Android Software/Hacking General [Developers Only]] phhusson:
Fixed. (The warning will remain though)
[Android Software/Hacking General [Developers Only]] toonlight:
Wow, you're incredibly fast at these fixes. Do I simply need to flash the latest superuser.zip?

As an additional datapoint, Adaway works fine for me (Nexus 5 on stock 6.0).

Titanium Backup gives me a different message (see attached). I tried uninstalling a system app (Youtube), and it got stuck and didn't work. I've attached logs if it might help.
[Android Software/Hacking General [Developers Only]] phhusson:
Ok, please run restorecon -RF /data/media, reboot and redo logs
[Android Software/Hacking General [Developers Only]] phhusson:
Fixed. Please redownload/reapply superuser.zip and retest (thanks [MENTION=388504]captaint[/MENTION]hrowback for testing)
[Android Software/Hacking General [Developers Only]] toonlight:
CF.Lumen working perfectly now :)

Done. Same behavior from Titanium Backup with latest superuser.zip. Logs attached.
[Android Software/Hacking General [Developers Only]] hgoldner:
I have now got this working on my M9, however the removable media is still not writable in Titanium, so that limits storage to the internal memory. Secondly, on an A9, because the internal memory is encrypted, I can never get full root. I get prompted by phh superuser to "update binary," but I can never secure root access. I have done the steps (install TWRP from stock, flash latest superuser.zip, install phh superuser) about three times now and never secured access. I suppose it could be my handset, but I think it may be more about the encryption.

Only way to unencrypt is to factory reset, and it's just not that important to me to go that route, but I did want to at least report the problem to you.
[Android Software/Hacking General [Developers Only]] BarrOff:
First: I think you are doing an amazing job! An open-source superuser app is something we really need.

I saw u react quite fast to comments and requests, so I was hoping that you could support the AOSParadox Rom for the Oneplus One? The device isn't supported by now but the Rom is close to stock android so I thought maybe it isn't to difficult? Would be really great of you and highly appreciated. :)

Keep up with the great work!
[Android Software/Hacking General [Developers Only]] jerbear294:
I tried flashing this on my Nexus 5X (zip method, as I'm on a custom ROM and ElementalX) but flashing this resulted in being stuck on the Google screen. The flash shows as being successful, though.

I couldn't recover until I reflashed my ROM.
[Android Software/Hacking General [Developers Only]] sooyong94:
I fixed the white status bar by reflashing stock boot.img, removed xposed and root, and rerooted by reflashing the zip. ;)
[Android Software/Hacking General [Developers Only]] rebretz000:
long time supersu user ready to make the switch. Glad this is out there.

Thank you.
[Android Software/Hacking General [Developers Only]] Thunderbolt69:
Been a no go for me on SkyDragon N rom.... I used the correct boot image and phone wouldn't boot past the boot animation... So restored my boot image, got the phone back working... Then tried flashing the zip method and said failed... Any ideas what I may be doing wrong? Thanks.
[Android Software/Hacking General [Developers Only]] Alxoom33:
Why is the update.zip not available for download? Tried a bunch of times, no luck!