yashsingh1/xdaforums huggingface dataset:
[Nexus 5X General] hinxnz:
Of course just freezing SU won't make AP work, apparently it won't work at all with root at the moment.

Disabling is the same as freezing ;)

Also safetynet check won't guarantee AP works either as others have reported it passes but AP fails.
[Nexus 5X General] sfhub:
Basically

SafetyNet Fail -> Android Pay Fail

SafetyNet Pass ! -> Android Pay Pass.

Android Pay Pass -> SafetyNet Pass
[Nexus 5X General] tallgrasshawk:
*cough*

http://xdaforums.com/android/software/mod-magisk-v1-universal-systemless-t3432382
[Nexus 5X General] poulopoulosa:
I gave magisk a go. I need root for a few apps like adaway or icebox nothing serious. Safetynet behaves exactly as the Dev says.

But there is a problem: if you have xposed framework active, and root disabled, although safetynet passes Android Pay does not work! Which means that Android Pay detects when xposed framework is active.

Android pay will work as soon as I deactivate xposed.

(Can someone else confirm the above?)
[Nexus 5X General] cawpin:
Which root did you use? The modified SuperSU or phh's Superuser?
[Nexus 5X General] poulopoulosa:
Phh's superuser.
[Nexus 5X General] chrisc93:
If you're using Magisk check this out: http://xdaforums.com/showpost.php?p=68143683&postcount=75
[Nexus 5X General] timeToy:
If you just need Root for adaway or icebox, the there is a way:

- you root

- install adaway and icebox,

- make the changes you need while rooted

- completely unroot

- et voila, the changes stick and do not seems to impact SafetyNet

You can't make changes or update the ad files, but it passes SafetyNet. Just re-root and do the whole dance again if you need to.
[Nexus 5X General] tallgrasshawk:
Can you still thaw and use an app with Icebox if you're unrooted?
[Nexus 5X General] timeToy:
No, neither adAway nor Icebox will run while unrooted, but the apps previously disabled are still disabled.
[Nexus 5X General] tallgrasshawk:
Tangentially related. Anyone else have an unsupported card stop working? I had a Chase card from the good ol'wallet days with a virtual number always work with AP. It just disappeared from AP and now I can't add it. Says it's unsupported card (not a root issue, I'm unrooted). Was just working the other day.
[Nexus 5X General] bobby janow:
Yes happened to me a couple of days ago. Been using it since wallet too. Fret not. Chase is coming to Android Pay in early September. I think the 6th or something like that. I'll know more on Monday exact date.

edit: September 7th Chase comes online.
[Nexus 5X General] tallgrasshawk:
I hope so. Hopefully it's not like my US Bank card where I need to call them to every time to add the card. PITA when I'm wiping & reinstalling roms.
[Nexus 5X General] bobby janow:
I think if you first remove your card from AP before wiping the phone you can avoid that. Not entirely sure though, but I do know that Amex will add each activation (if you don't first remove it) for a total of 5 before they bounce the card and you need to call.

With AP requiring that the device not be rooted I've pretty much given up on constant flashes of different roms. That and the fact I'm on a 5x running dp5 with no custom recovery available. ;) I think the whole ballgame is going to change with the imminent release of N hopefully this coming week and the multiple partitions on the new Nexus devices. But to your point, you might want to give the bank a call and speak to the tech department if you can get through. Tell them you're going to be adding it to your device multiple times and can they please override the lock.
[Nexus 5X General] italia0101:
Hey thanks for this , that's all i use it for too and it worked :)
[Nexus 5X General] bswides412:
Just to confirm, unrooting after applying AdAway's files will maintain adblocking? There is no change to its behavior or effectiveness?
[Nexus 5X General] timeToy:
Yes, once the hosts file is updated or once the apps are frozen, root is not necessary anymore.

I also found that your can install the Google dialer+ framework zip in TWRP and it still passes SafetyNet.
[Nexus 5X General] Seanbest:
Does this method still work? I'm on mobile and it's not loading anything but the first post so I cant read any further atm. TIA
[Nexus 5X General] Kisakuku:
No, try Magisk instead.
[Nexus 5X General] henderjr:
Like he said above Magisk is the only solution now. Android Pay Appears to No Longer Work with Systemless Root
[Nexus 5X General] ShogunShad:
Dang, and I just joined the party.. sighpie.. :crying:
[Nexus 5X General] tom jp:
Can we use system less xposed
[Nexus 5X General] cescman:
Anyone got Android pay working on a rooted phone? I tried the following with stock rom plus:

1. bootloader unlocked, magisk and phh superuser installed

2. Same as 1 but with root disabled

3. Completely stock without magisk or phh, bootloader unlocked

All the above failed to pass the security check by Android pay

Finally needed to lock the bootloader to get it to work
[Nexus 5X General] SlimSnoopOS:
The official Android Twitter account is saying you need to be bootloader locked to use Android Pay now:

https://twitter.com/Android/with_replies

Edit: Which means SafetyNet is probably updated to detect that as well.
[Nexus 5X General] waylo:
Hmm, that looks like the official confirmation then. Lots of random folks still reporting rare successes, but not sure what is special about their hardware + software.
[Nexus 5X General] cescman:
So now the only way to go is to return to stock unrooted and bootloader locked
[Nexus 5X General] Rush94:
i am facing same issue is there any work around with xposed installed ? reply asap
[Nexus 5X General] :
Not currently. From what I understand, root can and will eventually be cloaked, but xposed modifies the framework in a way that will fail Safetynet every time.
[Nexus 5X General] Rush94:
i heard of systemless xposed too
[Nexus 5X General] floreks:
I've got Android Pay working with root and unlocked bootloader. I've had some time lately to play around with different configurations.

As far as I can tell from my tests CTS check is not related to unlocked bootloader but rather to decrypted system. I've had to leave encryption on after unlocking bootloader to pass SafetyNet check.

Current configuration:

Android 7.1.1 Stock Dev Preview

ElemenatalX kernel (probably I'll switch to franco as it drains my battery pretty fast)

Magisk + Phh systemless root
[Nexus 5X General] yochananmarqos:
It does check for an unlocked bootloader. Using a kernel like ElementalX, Franco or Flash causes the check to pass.
[Nexus 5X General] floreks:
No, it is not kernel. I've checked same configuration just with decrypted phone and without root. With stock/elemental/franco kernels cts check was failing and with encrypted phone even on stock kernel it passed.

I've read and even checked kernel for this part of code but after tests it appears that it didn't work in my case.
[Nexus 5X General] Cronus89:
After flashing a kernel update that only changes the bootloader check code does it work. So yea it's the bootloader unlock check.
[Nexus 5X General] floreks:
Since you are so sure it's kernel then explain that. I'm now on stock kernel from latest Android 7.1.1 dev preview using unlocked stock bootloader. Phone is rooted (systemless root installed from TWRP) and I can still pass SafetyNet check.

"Wersja Jadra" is "Kernel version"
[Nexus 5X General] yochananmarqos:
An unlocked bootloader with the stock kernel without Magisk will not pass SafetyNet. With Magisk Hide, the new resetprop will hide the bootloader status.
[Nexus 5X General] floreks:
Well I'm not using magisk hide so unless it works by default you are wrong.

PS. SafetyNet passed without magisk installed also... with unlocked bootloader and stock kernel.
[Nexus 5X General] datafoo:
I'm on HTC 10 Nougat 7.0

With unlocked bootloader, stock kernel and magisk/superuser installed. I pass SafetyNet checks, am able to make purchases and am not using magisk hide.

Clearly it's not about unlocked bootloaders but that's a nice theory.

Sent from my HTC 10 using telepathy...
[Nexus 5X General] yochananmarqos:
Post redacted.
[Nexus 5X General] Sri vignesh:
What's the permission to change n how to??? I'm new here so pls brief me
[Nexus 5X General] jrk190:
Has anyone managed to actually make a payment with safetynet green? I passed all checks on Pixel ROM with elementalX and rootswitch, was able to add my card, and the payment still failed. I'd really like to get off stock, but I just can't get Android Pay to work.
[Nexus 5X General] tallgrasshawk:
That's where I am at. I went to full stock and tried several configurations of of root, PN, etc. Could never actually make a purchase.
[Nexus 5X General] bbb0487:
I am having the same problem as you. I am on the latest build of PureNexus.
[Nexus 5X General] chazall1:
What device are you on??
[Nexus 5X General] Joshmccullough:
Nexus 5, SuperSU Beta 2.67 - systemless, Elemental X 6.10 kernel.

Sent from my ROM'd-out Amazon Fire
[Nexus 5X General] TechMillz93:
So u didn't have to unroot and reflash supersu?
[Nexus 5X General] BeansTown106:
are you in the telegram purenexus beta? Oo we had discussed this 2 days ago lol
[Nexus 5X General] mtl171:
Not OP but I didn't have to. Running Chroma 2/3 with built-in SuperSU 2.67. Can add cards and passes safetynet.
[Nexus 5X General] bhughes3:
Awesome! Looks good on 6p running Chroma 2/3 with SuperSU 2.61
[Nexus 5X General] dadymon53:
Can you elaborate on how you got AP working through the file Explorer Method. Thanks
[Nexus 5X General] tacosrdelicioso:
Works good here
[Nexus 5X General] divadkha:
There's a possibility that this will not work out for me. I've used ES to change the /su/bin folder's permission to rwxr-x--x (751), and have also used Teminal Emulator to chmod during one of my attempts.

Rebooted, and going into Capital One's Wallet app and tapping the NFC icon fails as it detects root. For me, this is usually a good indicator that Android Pay will not complete transactions.

AP may still work fully, but I have not yet tested AP at a terminal to check if transactions will complete.

However, just to be safe, I will be going back to just using SuperSU to unroot (not full uninstall), after editing my build.prop, running Adaway and deleting /su/xbin_bind, to get Capital One Wallet fully working (which Android Pay will also always complete transactions for me).

I'm running my Nexus 6P Stock, and systemless SuperSU 2.67.
[Nexus 5X General] Fiola:
i tried this method out, unfortunately it didn't work in store. It did pass the safetynet check though.
[Nexus 5X General] ry4n413:
i called google and they said it might actually be a syncing issue and that removing the card completely from your account (login web browser and account settings then remove card). I haven't tried yet.
[Nexus 5X General] MrMiami81:
Any purchase attempts yet? I'm on the latest build of pure nexus and would love to have AP work again as I've used it before on other ROMs using systemless root.
[Nexus 5X General] eddytheyeti2:
No luck here running cm13 nightlies on Lg g3
[Nexus 5X General] CoBfan1987:
You have to still be running a STOCK rom, this only seems to allow you to use root, not be on a custom ROM like CM unfortunately.
[Nexus 5X General] elreydenj:
Yes, works on Pure Nexus no problem. I have made 4 purchases since yesterday.
[Nexus 5X General] Joshmccullough:
On Pure Nexus here, but in getting an error message when I try and do the adb shell/su command that there's no /su/bin file.

Did you get this, and/or what were the steps you used to get Android Pay working?
[Nexus 5X General] elreydenj:
I used root explorer. Set permissions there. Very simple.
[Nexus 5X General] Joshmccullough:
That's what I'm saying; when I go to look for the /su/bin file, I'm not seeing one; when I try the terminal commands listed in the OP, it says there isn't one, either.

My flashing order (after a clean wipe) is:

1. Pure Nexus ROM

2. I follow these directions found in this post:

Flash UnSU (removes SuperSU from /system, special thanks to [MENTION=4544860]osm0sis[/MENTION])

Navigate to TWRP > Advanced > Terminal Command.

Select the current folder (should be root or /) using the button in the righthand corner.

Type these two commands, one at a time:

Code:

echo SYSTEMLESS=true>>/data/.supersu

echo BINDSYSTEMXBIN=false>>/data/.supersu

3. Flash SuperSU 2.67 Beta

4. Flash Elemental X kernel.

If you/anyone has a tip on what I'm goofing up, it'd be appreciated. It's got to be something I'm doing but not recognizing that's putzing things up.
[Nexus 5X General] jesssiii:
I'm seeing the same thing, no such file.
[Nexus 5X General] usatf1290:
Hey there, yep I just made a successful purchase at a vending machine with it.

I'm on a 6P. I didn't have to re-add cards, but I also was never denied previously (I had read AP would be updated to not work on XDA).
[Nexus 5X General] MrMiami81:
Nice!! How did you set it up? Also.. What phone are you using? I have the nexus 6. If its not too much trouble could u go step by step as to the set up? Thanks..
[Nexus 5X General] Joshmccullough:
It must have something to do with flashing Elemental X; I went into recovery, re-flashed stock Pure Nexus, followed the steps found here to move from system to systemless SuperSU/root, flashed SuperSU Beta 2.67, and it's now got a /su/bin file. The only thing I didn't do that I normally do is flash a custom kernel, so that must be it for causing the lack of /su/bin, at least that's what I can attribute it to in this instance as the only variable that I didn't do this time was flash EX kernel.

However, when I go through the other steps and try to add a card to Android Pay, I'm getting the 'Android Pay cannot be used'/unable to verify that your device blah blah blah error. :(

I'm able to confirm that SuperSU is systemless through the SuperSU app/setting in Pure Nexus (Settings > SuperSU > Settings > scroll down to the 'System' section and it says 'Install SuperSU into /system - Not (currently) available in system-less root mode.) At least a step closer.
[Nexus 5X General] chazall1:
You need to flash the kernel first then run the SYSTEMLESS infoand then install Supersu last and it will work.
[Nexus 5X General] gpvecchi:
Do I have to set just the bin folder to 751 or does it need to be recursive? Thx
[Nexus 5X General] Joshmccullough:
Just coming back to comment on this; yeah, I just flashed SuperSU 2.67 and then Elemental X kernel and I've got the /su folder/files, so that wasn't it. It's also installed as systemless by default. Still can't add cards to Android Pay.

I'm just going to toss my hands up and give up the ghost. #$%$*@#$!! Google :p
[Nexus 5X General] demlv:
Purchases working again for me after I set permissions for the folder only (not recursive). Nexus 6.
[Nexus 5X General] MrMiami81:
I'm on the latest build of pure nexus.. I wonder if AP will work if I go systemless running super su 2.61 as opposed to the newer versions
[Nexus 5X General] NordomTT:
Do you use adaway or something like this? If yes try the systemless hosts zip file in here if you haven't. You may need to recover the default host file first though, I'm not sure.
[Nexus 5X General] Joshmccullough:
That didn't turn out to be the trick, still can't so much as add a card. Thanks for the help, tho!
[Nexus 5X General] elreydenj:
Working fine on Pure Nexus and Elemental X Kernel here. It is not breaking because of EX Kernel.
[Nexus 5X General] dave2775:
Should the Super su into system.....blh blah be greyed out? Mine is so I assumed mine in systemless
[Nexus 5X General] Nurdyboy:
im still not good at this. Can some one give me the steeps to do this through root explorer?? Please !!
[Nexus 5X General] bhughes3:
I just did it through adb...it takes 2 seconds and worked like a charm
[Nexus 5X General] chazall1:
On N6 or N5
[Nexus 5X General] Nurdyboy:
I tried but adb keep saying su could not be found
[Nexus 5X General] jraz305:
just flashed and did adb command . did not flash system less . what am i doing wrong
[Nexus 5X General] Darke5tShad0w:
Did you run the other 2 terminal commands?

One to force systemless and the other to remove xbind folder?
[Nexus 5X General] phynias:
any idea why /su does not exist on my phone?

i have systemless install (2.67) rootchecker says i am rooted.

...ohh and still can't use google pay.

just wanted to add to this since i have seen others say the directory doesn't exist. i have tried reinstalling my kernel (franco), then supersu and it still does not exist.
[Nexus 5X General] ChiefIlliniwek5:
I have verified that I have systemless root and I ran the commands in terminal emulator. Just to be sure, I checked in Root Explorer and the permissions were set correctly. Despite this, Android Pay wouldn't let me add any credit cards. It gives me the same error message I had under previous attempts with root. I deleted all of the credit cards in my Google Wallet account and that didn't work.

I ran the SafetyNet Helper app and it gave me this result:

SafetyNet request: success

Response validation: fail

Error Msg:

Response payload validation failed

What am I doing wrong?
[Nexus 5X General] The Horak:
Any way this can be done with CM12.1? I honestly don't want root, so I would be happy to strip it from the OS.
[Nexus 5X General] tallgrasshawk:
1. What rom are you on?

2. Do you have anything like xposed installed?
[Nexus 5X General] ChiefIlliniwek5:
I'm running a stock Rom and xposed is installed
[Nexus 5X General] Darke5tShad0w:
It will always fail with xposed installed.
[Nexus 5X General] LuvThyMetal:
Does this only work on phones with MM?
[Nexus 5X General] rootinchase:
One of the problems I've seen people having is that root is being lost. Do NOT do a systemless install, then flash a new kernel. It won't work because part of the systemless install is kernel modifications.

Also, make sure you are connected to the internet when you do the safetynet helper, I was receiving false or emptypay loads on an unrooted stock s3, then I connected, and it returned true.

I modified the permission file to grant sdcard access to user apps (KitKat), and install busybox to system, and it returned true, so limited mods won't break things.

Thanks jgummenson for the advice about changing folder permissions, hopefully Google will have a hard time fixing this
[Nexus 5X General] timdorr:
This isn't working for me. Perhaps Google has fixed it on their side? I'm running stock 6.01.

I flashed the Feb update (system, boot, recovery, and cache).

Booted up and confirmed SafetyNet was green.

fastboot boot twrp.img and installed the SuperSU 2.67 systemless root.

Booted up and adb shelled in to chmod 751 /su/bin.

SafetyNet comes back red :(

Is there another step I'm missing? Has Google fixed this on their end?
[Nexus 5X General] zul8er:
No luck on G3 running the stock VS98546a rom with systemless root
[Nexus 5X General] CSX321:
Rename /su/xbin_bind then reboot.

I added _freakin_pay to mine.
[Nexus 5X General] bobby janow:
It might depend on the rom too. I think some of them change system stuff and thus will fail the checks. Try it with stock after you root it. I have it running perfectly with Pure Nexus after doing the unsu thing and systemless root. So far Google has not patched this. Remember to remove the xbin_bind directory within /su.
[Nexus 5X General] CSX321:
He said he was running the stock February update. The only thing he was missing was to rename or remove /su/xbin_bind. Which is what I told him.
[Nexus 5X General] bobby janow:
I didn't mean to quote him, I'll change that now. I was referring to others that can't seem to get it working even after removing that folder. (No need to rename it, just delete it) I've seen another rom that just will not allow it even though unsu was run and everything done correctly.
[Nexus 5X General] FPSUsername:
What about AOSP? I don't think it will work, but who knows?
[Nexus 5X General] bobby janow:
Pure Nexus is aosp and it works fine. You don't need stock to have it work, I'm not sure how that got started.
[Nexus 5X General] eris_roote:
Confirming that Stock Lite ROM on Nexus 6 Android Pay is working after this. Adding cards and making a transaction works flawlessly. First time I've been able to use it too!
[Nexus 5X General] thesoldier:
Just used root explorer to change permissions for su/bin and rebooted. Safetynet gave me a pass and just added another card. Thanks for the info!

Edit: forgot to say I'm on purenexus with systemless 2.66
[Nexus 5X General] jgummeson:
Interesting - I don't have a /su/xbin_bind and I don't think I ever did. Maybe this depends on the version of SuperSU? Or something else? Thanks for pointing it out. I'll update the OP with this.
[Nexus 5X General] MrMiami81:
Did you just do unsu then the systemless method on the latest pure nexus and have success with AP?
[Nexus 5X General] bobby janow:
The way I did it and it works for me.

Full system wipe other than internal storage. I didn't go to advanced twrp just swiped where is said this is usually all you need.

Install PN

Install PN Gapps

Unsu

With phone connected to my computer, went to "adb shell -> su" at the # sign I typed:

echo SYSTEMLESS=true>>/data/.supersu Then typed exit to get out of shell

Flash systemless root 2.67

Flash Franco r-5

Reboot

Install Root Explorer and navigate to the root folder. Click the su folder and in it was a directory xbin_bind. I selected it and deleted it.

Still connected to computer once again into adb shell, su and at the # sign typed chmod 751 /su/bin

Installed Android Pay and added a card, went to the store and paid with it. I didn't reboot after the first one but I have since. Or maybe I did but I don't think it mattered.
[Nexus 5X General] MrMiami81:
Im currently running the pure nexus ROM so I'd assume that I just unsu and plug the phone up and enter the commands?
[Nexus 5X General] bobby janow:
If you just installed it regularly then you have system root I believe. Check that in the Supersu app in settings for PN. I haven't had system root in a long while but I'd presume that would be the way to do it. Unsu then install systemless root and go from there. As I said I'm not entirely sure but it sounds like it should work.

---------- Post added at 12:59 PM ---------- Previous post was at 12:54 PM ----------

There is another command which I don't use that removes that folder before reboot. I've not done it that way but once again I presume it works. I'll search for it and edit this.

edit: echo BINDSYSTEMXBIN=false>>/data/.supersu (that's the one which supposedly either removes that folder or doesn't allow it to install, not sure)
[Nexus 5X General] Joshmccullough:
My bad, I thought I'd edited/updated my post but apparently it was in my imagination.....yeah, monkeyed around with it and flashed/tried without EX kernel, still the same result: no go on Android Pay.

---------- Post added at 04:08 PM ---------- Previous post was at 04:08 PM ----------

If it's greyed out, it's systemless.
[Nexus 5X General] bobby janow:
It's not just systemless, deleting the folder and running chmod 751. Any system mod including xposed, changing dpi, things like that will crap out AP. If you really want it nandroid and start from scratch before restoring stuff or modifying the system. Stock PN and Stock rom should work. Once you get it working you can start your restores and mods to find out what is breaking it.
[Nexus 5X General] jgummeson:
Ah ok. Yeah I definitely set that option as well as the systemless option.
[Nexus 5X General] Joshmccullough:
Made a backup this afternoon, going to follow your guide and start from scratch, try and get this up and going.

The only root stuff I'm running are AdAway, Kernel Tweaker, Root Browser, and Titanium Backup, so I'll just not reload those and go from there. I suspect that AdAway or Kernel Tweaker might be the culprit, not sure how the others would cause system changes in and of themselves.

EDIT: Followed everything here, still wouldn't let me so much as add a card to Android Pay.

I greatly appreciate the help, but I think I'm just cursed or something, in the group of people who just can't get around Google no matter what :)

Sent from my ROM'd-out Amazon Fire