yashsingh1/xdaforums huggingface dataset:
[Magisk] zgfg:
Thank you, you are indeed nice and polite.

I don't see how is it Magisk fault but anyway

- If you debloated by ADB, you can try to re-enable it. Depending on did you disable or uninstall WebView for default user, one of the two adb commands should work:

>> adb shell pm enable com.google.android.webview

or

>> adb shell cmd package install-existing com.google.android.webview

- If you debloated by some other tool/method, ask its developer how to revert (usually they don't care and will point you to their termonuclear war disclaimer).

People tend to debloat apps and services not knowing what for are they used by system or other apps

- There was a Magisk module for disabling WebWiew. Not only that it caused me a bootloop when I tried long ago, but uninstalling the module did not reinstall WebWiew (but that is not Magisk fault) - I had to 'update' my firmware to get the WebView back

- Data partition is not restricted by SAR, but system maybe overwrites/updates the given XML file on boot, and thus you loose your manual changes

Btw, you can try to install/update Android System WebView from Playstore or ApkMirror (it will install as user app, not the system app, but it should work)
[Magisk] AndDiSa:
[MENTION=7550078]pndwal[/MENTION] I was asking myself the same questions especially having dynamic partitons on Android now ...
[Magisk] zgfg:
First link was wrong and I have corrected in the mean-time to:

https://news.sky.com/story/encrocha...criminals-get-their-encrypted-phones-12019678

I was also not sure what dual-boot had with (criminals used that 'criminal' boot for their criminal activities) but it was described in those or other related articles: normal boot served to avoid suspicion if they had to give the phone to an officer for inspection

Btw, their 'business' boot seems it was developed on Ubuntu, being fully Google-free
[Magisk] pndwal:
Yes, I gathered /read that after googled your terms. See my last post edit (at end). Will check your sky news link too.

Interesting... PW

Edit: Sky News article is interesting too...The dual boot devices seem relatively old however.

Not sure if new partition regimes (dynamic) lend themselves to dual bootloaders also, for our purposes.
[Magisk] xdarasc:
Thank you!

These methods fail same as replacing (or vi-ing) the file - they don't survive a reboot

This fails bc. tha app is "disabled" - so no [INSTALL]-button.

So, unfortunately, the actual question remains:

How to edit or replace a file in the /data/system path (and subfolders) after booting into a Magisk-ed Android Pie (so that the change survives a reboot)?

I've got some Linux-CL experience - so any working procedure is welcome.

P.S. I've got the standard boot loader, can't (don't like to) install TWRP bc that required a different kernel (my device uses dm-verity).

edit: P.P.S. I used Titanium Backup to freeze it. But actually it's really just to edit that single file - if Magisk only let me ;)
[Magisk] akhil093:
One interesting thing I noticed, magisk hide doing it's job greatly. Cts failing due to hardware backed attestation but banking apps still working "as long as they are included in magisk hide list". I tried removing them from magisk hide list and those apps knows safteynet status that it's failing and they refuse to work but once I put them in magisk hide list, they works. I guess magisk hides is a kind of another layer of "security" for us which hides root status from all apps even if safteynet fails (though it can't hide that from google play services itself). I wonder if in coming days, these apps will still works under "magisk hide" or as some people saying google will flick some kind of switch that will expose our status even for apps under magisk hide.
[Magisk] bunklung:
If the devices goes uncertified, will apps stop working/updating?

Will we be able to apply for an exception here:

https://www.google.com/android/uncertified/
[Magisk] zgfg:
I have SAR Android 10, Magisk, and Hiper Scientific Calc app installed.

With MiXPlorer I made a copy package-restrictions.bak, and in the original package-restrictions.xml changed the line:

<pkg name="cz.hipercalc" ceDataInode="9136" />

to:

<pkg name="cz.hipercalc" ceDataInode="9136" inst="false" stopped="true" nl="true" />

When I rebooted the bak file was still in /data/system/users/0 as well as the xml file with my change!!!

And indeed, the application HiperCalc (calculator from Playstore) was lost from the home screen and app drawer as well as from Settings/Apps - just like if I would have used ADB:

>> adb shell pm uninstall -k --user 0 cz.hipercalc

Then I removed xml file with my change, and renamed the bak copy to xml and rebooted

Then I edited the xml file to made a change:

<pkg name="cz.hipercalc" ceDataInode="9136" inst="true" stopped="false" nl="false" />

Rebooted and Hiper Scientific Calc was again present in the drawer (I had to put it back also th Home screen)

Interestingly, when I opened xml I found that the line was auto-corrected to the original form (un-needed three attributes with default values removed):

<pkg name="cz.hipercalc" ceDataInode="9136" />

All in all, changes properly survive reboot and HiperCalc was 'reinstalled/uninstalled' accordingly

IMO, you either made a mistake while editing, or something is wrong with your root explorer/editor or Titanium made more changes making the WebView not available

You can try all without Titanium, for some other app, and by using MiXPlorer

---------- Post added at 04:54 PM ---------- Previous post was at 04:30 PM ----------

User certification (if still available) applies to custom ROMs - if you have one, you can try

Stock ROMs must be certified by vendors. But I don't see it could help, CTS is failing due to hardware attestation finding bootloader unlocked

Eg, I have regular stock firmware, certified (hence Basic Integrity passing), but since of the recent change on Google side, CTS is failing
[Magisk] JudgeDread11:
It depends on what the app looks for.

If they don't use safety net and just look for root then Magisk will be able to hide that. But if the app uses safety net Magisk won't be able to hide it.

My banking app doesn't use safety net and only checks for root. I have no been paying safety net for a long time, before it's was hardware backed. But my banking app just works.
[Magisk] xdarasc:
Thank you again for your help and especially the time you invested!

I tried Titanium, SD-Maid and SystemSettings|App_Management to Defreeze by app as well as Total Commander to replace the file as well as 'vi' in shell to directly edit it. All to no success.

I tried this MiXPlorer - a nice one (especially allowed editing, what TC doesn't). Unfortunately to no success.

So yeah, maybe my system is ****ed up (though it's a stock Xiaomi that I only Magisk-ed).

Anyway: Many thanks for your tries to help!
[Magisk] papoy1019:
Anybody has the same problem with me? I wanted to hide magisk manager, but it says it failed. Im on android 10 miui. Canary build by the way.

Any workaround?
[Magisk] zgfg:
Strange, mine is also Xiaomi (Mi 9T), stock MIUI 11 (global-eu), with Canary Magisk

NP, I just learnt how adb shell pm uninstall -k --user 0 ... reflects to /data/system/users/0/package-restrictions.xml

I'd similarly like to learn how/where to adb shell pm disable-user ... makes its changes

---------- Post added at 05:58 PM ---------- Previous post was at 05:43 PM ----------

You disabled Play Protect before hiding (you can re-enable later)?
[Magisk] J.Michael:
Does the way you edit leave a ".bak" file? [MENTION=7786725]zgfg[/MENTION]'s experience *could* be explained by the file being reverted in the absence of a ".bak" file. (The automatic deletion of unnecessary attributes could also have been the complete reversion of the file.)

Magisk has some facility for running scripts during boot. If one of the options is between the /data filesystem being accessible, and the point at which this .xml file is processed, you might be able to squeeze in an update.

I have Android System WebView in my Apps, under Settings. It is labelled "disabled", with a grayed out "Enable" button, and an apparently available "Force stop" button. (I don't know what it is. I don't remember why I might have disabled it. I don't have the nerve to see what happens if I stop it.)
[Magisk] zgfg:
Read my post, I first tested with making a bak file (where package was not disabled) and making a change in xml file, rebooting kept both xml and bak exactly as I left them (different one to another) before rebooting

Later I moved bak to Internal mem, Download and tested more - leaving bak file or not on Data did not matter for my results
[Magisk] xdarasc:
Thx, Dude!

But no, see: I even used (Magisks) busybox "vi" to directly edit the file.

Still same.

So no (but thanks for trying to help!).
[Magisk] GirishSharma:
I was running Mi 9 Cepheus MIUI 11.0.9 with locked boot loader. I Unlocked bootloader. Installed TWRP because I was not getting OTA. After unlocking bootloader and installing TWRP, by chance very next day I got OTA. I downloaded OTA, tried to install OTA with TWRP, but custom recovery do not flash stock ROM, so it failed to install OTA. Installed magisk 20.04 and installed boot image by removing root. OTA flashed successfully and now I am running MIUI 12.0.1 but I lost root and twrp. Again I flashed twrp, magisk. Everything works fine but now ctsprofile is false. Earlier ctsprofile and basicIntegrity both were true. So, this is my history.

Now, I don't how do I make ctsprofile true.
[Magisk] zgfg:
Check your post - everything is double. Edit/delete

CTS is failing because Google has changed CTS attestation method. You can't do anything - Google detects that Bootloader is unlocked and CTS Profile then fails

Read more in the general Magisk thread
[Magisk] J.Michael:
Have you tried following [MENTION=7786725]zgfg[/MENTION]'s procedure? rename .xml to .bak, copy .bak to .xml, edit .xml

On my tablet, /data/system/users/0/package-restrictions.xml also appears under /sbin/.magisk/mirror. Maybe there is some Magisk-ish procedure you are supposed to follow to fiddle with something Magisk is already overlaying on your system.
[Magisk] GirishSharma:
Thanks for your reply. Is there anything worry about ctsprofile false? Kindly share the link of general Magisk thread for more details. But as I am remember, there is no relationship of ctsprofile with unlocked bootloader because it was true when I lost TWRP after installation of OTA.
[Magisk] Lughnasadh:
Do you have Magisk Hide enabled? If not, try that. Not all phones are affected by Google's attestation shenanigans just yet.
[Magisk] zgfg:
Oops, sorry, this is the general Magisk thread

Hardware based CTS attestation (how, why, how to recognize, consequences) was largely discussed here in the numerous posts since June 26
[Magisk] HippoMan:
Because of hardware attestation, we need a hardware-based solution: some sort of device which accepts an optional piece of plug-in hardware which changes the device's hardware behavior. This proposed optional add-on could make the device appear to be unrooted, with a locked bootloader, with pristine attestation characteristics, etc., when the hardware attestation checks take place. Users could plug in this chip when they want to use their banking apps, play their desired games, etc., and then remove the chip when they are finished and want to make use of features which require root.

Or this could even be a permanently installed piece of hardware with a physical switch to turn it on or off.

The hard part would be to try to convince some manufacturer to design such a device and add-on.

... or maybe someone could figure out how to modify some existing devices to accept such a plug-in chip.

.​
[Magisk] Kevin578:
has anyone gotten magisk working on the latest android 11 beta 1.5? I tried getting magisk 20418 to patch my boot.img (using pixel 3 xl) and flashed it. However, its stuck on the google loading screen
[Magisk] GirishSharma:
Yes, it is enabled in setting but still ctsprofile is false. What I have learnt now-a-days that small issues which earlier were used to got resolved by Google, now do not works, person has to ask in forum and/or known person.
[Magisk] zgfg:
Make a test if CTS Profile on your phone uses Basic or Hardware based attest.

If using Hardware based, then no help.

How to distinguish if using Hardware or Basic test for CTS Profile, no need to ask anybody, just read posts from the last ten days, everything was described and instructed
[Magisk] MrPhilo:
When you say renamed, do you mean you renamed the folder or the APP?
[Magisk] chrisross:
The app.
[Magisk] MrPhilo:
Oh like on Nova Launcher, you just renamed the APP? Interesting, does it work with the new update they made recently on 26th June?
[Magisk] leviiis:
When I flash the hole Samsung Firmware back to original, is safety-net pass again (hardware backed)? When I flash a old Twrp backup, can I switch back cts profile? Or says hardware backed = never again safety-net green at this moment?
[Magisk] chrisross:
Yes, I've had no problems since. I do try to remember to remove Santander from the hidden list before the update, then add it back before launching.
[Magisk] zgfg:
Hardware backed CTS Profile requires locked Bootloader to pass attest
[Magisk] warrencoakley:
Has anyone successfully updated to July's security patch and rooted with no tripping yet?
[Magisk] BostonDan:
Yes. For a Pixel 3 XL. I just installed the July Security Patches (shows current under system upgrade) and checked Magisk SafetyNet.

Cheers,

B.D.
[Magisk] warrencoakley:
Yep me too, just flashed it and all good so far!
[Magisk] AndDiSa:
Still passing on a Pixel 3a with Juli security patches
[Magisk] Philnicolls89:
Hardware backed detects the unlocked bootloader, so only way to pass cts profile is to remove root and relock it.
[Magisk] pr0adam:
*mod edit *

removed talk of LP
[Magisk] jerrycbrowne:
No matter what I try I can't delete any system app. Magisk is installed. I use the awesome Amaze file manager which neatly lists all system apps. However, after removing an app and 'Done' being displayed it remains there clearly still installed. I'm probably doing something wrong but I have no idea what. Preserve dm-verity is enabled. Any tips or tricks to try?
[Magisk] warrencoakley:
removed lp talk
[Magisk] Lughnasadh:
Results on July security patch are the same as before for me (Stable Magisk 20.4):

Pixel 2XL=Pass

Pixel 4XL=Fail ctsProfile
[Magisk] warrencoakley:
Mine is still passing, must be a gradual rollout of the hardware trip
[Magisk] Lughnasadh:
Interesting. All I've seen from people is failing on the Pixel 4 XL.
[Magisk] Philnicolls89:
Is the app still installed or just the app icon? A reboot will remove the icon once app is deleted. Does it open when you click on the icon?

Maybe your file manager is to blame, I've never used amaze so dont know. I use mixplorer and have no problem deleting system apps.

*edit*

Some apps have multiple file locations/apks. U can use titanium backup to find everywhere it is located then delete them with file Explorer.
[Magisk] jerrycbrowne:
Unfortunately yes. Still there and operational. Tried rebooting. No luck. I'll give mixplorer a go.

Thanks for your help.
[Magisk] Philnicolls89:
Remember to check for multiple apk paths/locations. The app may have a base apk hidden somewhere.
[Magisk] ms_office_95:
Failing Galaxy Note 9 (N9600) Snapdragon on hardware not basic
[Magisk] DougMG:
So this is interesting. Just received my new Pixel 4 XL that I ordered when they were on sale a month and a half ago. Fire it up, unlock the bootloader and update it to July firmware and as expected the play store shows not certified and apps like Netflix will not install. Install latest canary Magisk and rename manager as well as turn on Magisk hide and hide all the apps and services I need to. As expected from reading other posts CTS profile in safety net fails due to hardware based check and Play Store still shows as not certified after clearing cache and data however it will now let me install Netflix and other apps that usually will not with a not certified status. I was also able to set up and use GPAY. I am obviously pleased that this is some how working. I am curious if anyone else has had the same results and if they have a theory as to why this is working as my understanding is it should not.
[Magisk] jerrycbrowne:
Tried Mixplorer with the same result. First, I used the 'trash' icon to attempt to remove the Calculator app, (my test app because it should be completely independent of anything else) and I get the message, 'Not possible'. Then I tried the uninstall option in the dropdown menu. It asks me whether I'm sure I want to remove it and I say yes. I then get the message 'Calculator uninstallation unsuccessful' I've installed Busybox if that makes any difference. It's a mystery.
[Magisk] JudgeDread11:
If you are using Android 10, it's impossible on many devices to modify the system position.

Some have success modifying in TWRP, when it falls in Android.

Best solution is do your modifications systemless. Create a Magisk module.
[Magisk] leviiis:
I am not sure, but before you can change anything on system partition, you must set the partition to read/write. I use root Explorer.
[Magisk] JudgeDread11:
Before as in before Android 10?

Because yes, this is new since Android 10, but apparently not on all devices.

As far as I know it has to do with the file partition and I think it can be pushed with an software update.

If you search this thread to find lots of posts of people not being able to modify the system partition on Android 10.
[Magisk] Captain_Throwback:
You can still use Magisk's Busybox. Did you look in the Magisk Manager settings?
[Magisk] dimm0k:
Yes, that's what kind of had me wondering. with that option in the setting, it looks like busybox isn't a requirement for Magisk anymore (I could be wrong) and if that's the case I was wondering if I could go back to BusyBox Pro since I paid for it without breaking anything.
[Magisk] ahrion:
Magisk seems to cause my OP3 running OOS wifi to be broken. Won't turn on after install. This is with the latest supersu
[Magisk] Tesla:
How do you toggle it on/off?

I did exactly as you in 3903.

Magisk v6 worked fine.

Now magisk manager works one time then it shuts down :/

Is there something i should do when and if i get it to start properly again?

Thanks for answer m8.

//

Tesla

Edit: If i clear data for manager 2.0 it starts normally.

Now what?

Edit 2: Pogo is working :)

I cleaned every trace of xposed and redid the installation.

Now pogo works. Do i dear try xposed module? ;)

Manger is still foreclosing thou :/

Hope this is to some help for others.

Still wanna know how to toggle ;)
[Magisk] brossovitch:
Had some issues.

So far what works, flash ROM (Cm13) then Magisk 7.0, then magisk su, then boot, install magisk manager 2.0 then install busybox (stericson) into system/xbin (CM doesn't have busybox it has toybox) then everything works. (You need to have uninstalled the previous Magisk manager app)

If using Magisk v6 I can uninstall Magisk Manager then install manager v2.0 and allow it to install Magisk 7.0.

I like how the toggle is no longer necessary! Great stuff!

For CM..

I had to boot recovery and mount system, then in the TWRP File Manager delete, "system/bin/su" & "system/xbin/su" for magisk to work properly.

After booting into the system, I update SuperSU to version 2.78 from Play Store and update binary.

Works wonderfully! Thank you.

I'm using

LG H811 (T-Mobile LG G4)

CM13 official

TWRP 3.0.2-0 official
[Magisk] Captain_Throwback:
Magisk still requires Busybox - that's why it's there in the first place. But it's no longer available to all apps by default. That option in Settings allows you to make it visible, since it's already installed by Magisk. It makes more sense to just enable that option if you need Busybox than to install another Busybox.

However if you really want to install another Busybox, just leave the option in Magisk Manager unchecked and go to town, lol.
[Magisk] thodibhen:
ES file explorer

is

the problem.... worst file manager in the entire playstore by far; nothing even comes close.

Works great here with root explorer, probably works with many other non-crapware AIDS infested explorers too
[Magisk] ibrokemypie:
to be fair, es used to be the best there was by far, then it changed ownership a few times...

i stand by se for now
[Magisk] Tesla:
topjohnwu is a hero :good:

I think this is only the start of his fame and work. Magisk in every Rom, that would be something.

Magisk-Man :highfive:

Thanks for all your hard work and time m8.
[Magisk] AmyClaraRose:
I have the premium non aids version me I prefer v6 all my other root apps work at least on v7 non of them work
[Magisk] baldomo:
Try FX File Explorer + Root Add-on. Best I've ever found so far.
[Magisk] thodibhen:
Is the 'Settings' section in Magisk Manager not fully functional? I notice that if I disable xposed in the modules list & reboot, xposed is still active (no checkbox next to it in Magisk Manager), if I go into the material Xposed Installer and uncheck it there, it does indeed deactivate on next boot. Also noticed the same behavior with phh Superuser, unchecking the box (in Magisk Manager) and restarting doesn't disable root (version in Magisk Manager shows r259, even though I've flashed r266. Setting root to "disabled" via phh's config also does not disable root (Safetynet passes regardless, so no big deal)

Ran the uninstallers before updating everything: Magisk v7, Manager 2.0, xposed 86.6, Superuser r259/r266

Hope we can get xposed status hidden to pass Safetynet again at some point
[Magisk] the_brad:
I did search for this a lot but couldn't find an answer:

How are all of you doing the magic with magisk (which requires an unlocked BL and a custom kernel (really?) and safetynet? I use a Sony Xperia Z5 Prem. and got magisk working along with SuperSU and safetynet checks gave me CTS Profile match: false.

I installed a custom kernel to be able to obtain TWRP and root (this one ) and don't know, where i took a wrong turn. Pure stock (no root) works with SN.
[Magisk] Wlkchnbndgr:
Yesterday morning i updated Magier (inklude phh su with hide) it works like it should and i pass safetynet.

Yesterday evenig i update my Rom and did the same like in the morning. Now i didnt pass saftynet anymore. Can somebuddy Plesse Help me.
[Magisk] locolyric:
v7 didn't work on lenovo k3 noe. V6 yes.

After flash v7 , phone continue boot loop in boot up logo.
[Magisk] MrSplaat:
nvmd - I'm an idiot
[Magisk] soder:
Maybe I'm an idiot top here, but, I can't get to understand the Viper4android mod. First, I have a OnePlus One, completely working with Magisk v7, Xposed systemless, SuperSu and suhide and using BBS, Pixel Launcher, SuperSu Helper, Xposed SDK23 Mods.

Since the new interface are really nice, I decided to try the Viper mod to. But, it's downloaded and installed, and the phone is rebooted, but I see no Viper app in the launcher. Should I?

Or is that mod just some kind of under the hood magic?

/Söder
[Magisk] teddy0209:
Just download the apk, search here at xda... ?
[Magisk] westeight:
You also need to install ViPER4Android_FX_v2401_A4.x-A6.x.apk :cowboy:
[Magisk] soder:
And this Viper app will be such a WOW thing, better then the default AudioFX thing I got in CyanogenOS by default?

/Söder
[Magisk] Weedy0104:
Hey I know about this Problem from many samsung devices. Install debloater Module from magisk Module Repo. Reboot. After reboot Download terminal from playstore type in su accept magisk superuser request and type in debloat. Then choose from the number list which Apps you want to debloat and reboot. After reboot the Apps will still be there, but now they arent System Apps any More so you can uninstall them from settings-Tab in your settings menu.

Greetz
[Magisk] jenslody:
If the apps are still there after debloating, they have been updated since installation. The updates for system apps through playstore etc. go into /data.