yashsingh1/xdaforums huggingface dataset:
[Magisk] swieder711:
I installed the SElinux switch and have it set to Permissive. No change. I will reinstall Magisk manager while set to permissive.

I will also check the log for denials

UPDATE: The Magisk log shows the following

07-11 14:46:51.638 809 810 E Magisk : mkdirs /sbin/.magisk/mirror/persist/magisk/riru-core failed with 28: No space left on device

07-11 14:46:51.638 809 810 E Magisk : open: /sbin/.magisk/mirror/persist/magisk/riru-core/sepolicy.rule failed with 2: No such file or directory

07-11 14:46:51.638 809 810 E Magisk : sendfile failed with 9: Bad file descriptor

Oddly, The /sbin/.magisk/mirror folder shows 1.7GB free, but the persist folder under it shows 0 free! Maybe I have store problem and need to reform it. Not sure how to do that without TWRP or if there might be a less drastic fix.

UPDATE2: I was just about ready to reformat my phone, when I found this https://xdaforums.com/showpost.php?p=81758921&postcount=1093

I deleted some old TWRP log file (not sure why they were there since I did a full wipe install of the OS) and then reinstalled GravityBox and it worked!
[Magisk] HippoMan:
The main Google-less software project is microG: https://microg.org/

There are also ROMs that are built specifically to use microG.

Lineage offers a number of them: see https://lineage.microg.org/ and https://download.lineage.microg.org/

Also, e.foundation (mentioned above) offers ROMs as well as specialized phones.

---------- Post added at 11:42 ---------- Previous post was at 11:16 ----------

I like this "App Mirror" idea! And here's another one of my "pigs might fly" proposals that could go along with it:

Some manufacturer makes a "Dual Phone". It will be two, complete pieces of Android-enabled hardware in one device case sharing the same screen, buttons, cameras, etc. Each one could be booted up and run separately and concurrently, controlled by a hardware switch on the device (and maybe via some sort of software, as well). One of them would use a pristine, boring, un-rooted stock ROM with a locked bootloader. The other could be unlocked, rooted, etc. All the apps that are affected by SafetyNet considerations would be running on the first, boring device. The apps that are set up via "App Mirror" as described above would run on the happy, rooted device and would delegate to the corresponding apps on the boring device.

We already have "A/B" bootable devices. Maybe some manufacturer would be willing to take this next "Dual Phone" step some time before pigs are flying around my neighborhood.

UPDATE: And here's another possibility: run Android via a device emulator on a desktop machine. Run the SafetyNet-sensitive apps via that emulator and use the "App Mirror" concept to delegate to those apps from the rooted device we carry around. Perhaps some sort of VPN or other specialized network connection could be set up between the mobile device and the desktop to make this work more efficiently.

.​
[Magisk] :
That's really odd. Because on my device it's enabled and working with PayPal, My Transport app, and more.

So, I reject your reality and substitute my own ;)

I enabled user independent in the settings of magiisk.

Not sure if that did the trick, but I assure you it's working on my Samsung A70 droid10 with a downgraded Google and Assistant. !!
[Magisk] Lughnasadh:
I don't doubt it's working, but Magisk Hide is disabled by default as of 20.4 . ;)

https://github.com/topjohnwu/magisk_files/blob/598fee44ab7528205b7088716d1197dd8e38532d/notes.md
[Magisk] :
I'm on 20.4

Pics probably misused View attachment 5058655View attachment 5058657
[Magisk] :
Thanks for the link btw
[Magisk] zgfg:
Magisk Hide option (not Hide Magisk Manager - these are two completely different things) is really not checked in your Magisk Manager settings?

Magisk Hide is no more checked/enabled by default since v20.4, if you don't believe you can look to the GitHub?

But it applies only for new installations - if you updated from an older Magisk (Manager), previous settings werere saved and therefore Magisk Hide will be checked in

Btw, I just disabled Magisk Hide and enabled User Independent, rebooted and Basic Integrity / SafetyNet is failing - hence User Integrity cannot substitute for Magisk Hide (at least on the latest Canary)

Edit:

In Magisk Hide window use menu and enable Show System apps and check is Magisk Hide enabled for Google Play Services and Google Services Framework (some of their components)
[Magisk] Fry-kun:
Thanks!

I remembered that I didn't re-apply my manual fix on this phone (not sure why attestation hasn't triggered for some months)

Anyway, after manually setting those and marking it RO, it's back to normal (also had to clear Play storage & Pay cache)
[Magisk] :
Thank you for taking the time to investigate. Great clarification and you are correct in regards to a backup. Cheers
[Magisk] smvsmv:
Did you ever figure this out? Somewhat the same issue with my UMIDIGI power 3 (MTK device). Magisk just won't work. Tried the patched boot img, stock Magisk and a couple of other versions out there. I understand that Magisk doesn't work well with GSIs.. trying to find out if anyone has figured out a work around.
[Magisk] mrspeccy:
Try Magisk 20.3. It seems that version 20.4 has issues with several GSIs (https://github.com/topjohnwu/Magisk/issues/2645) due to an update of the built-in SELinux library.
[Magisk] Eedo:
Hi there,

1st of all thanks for the hard work & sharing with us your experience,

Yes i did all the steps & pass Safety Net test also on Play Store the device is certified.

I have only one issue since a while ago, i'm using Magisk Canary "debug" but it's like not connected to anywhere, I can't check for any updates, can't make safety net test also I can't update any Module.

I've changed updated channel to stable, Canay, beta & custom ( https://raw.githubusercontent.com/topjohnwu/magisk_files/canary/release.json ) still the same issue.

Also i reinstalled Magisk & problem still exists.

Do you have any idea where is the problem ?

Thanks in advance for your time
[Magisk] zgfg:
Do you have any adblocker or firewall installed on the phone - disable, reboot and try again

If you hide Magisk Manager, unhide and try again

Can you open the json file from browser (it is debug - but release points to the same file):

https://raw.githubusercontent.com/topjohnwu/magisk_files/canary/debug.json

And can you download Magisk 20419 by browser:

https://raw.githubusercontent.com/topjohnwu/magisk_files/canary/magisk-debug.zip

If you cannot (and if you disabled adblocker and firewall on the phone), then try from another WiFi (maybe yours blocks access to raw. githubusercontent.com
[Magisk] enndub:
This is working on my pixel 4, but it sets the hardware id to 0 which breaks tinder. Does it have to be 0 or just unique?
[Magisk] amk316:
i have the same problem for several days

i can bypass this by using vpn

i think your site is blocking our country 'saudi arabia' by a security software by mistake or something

even xda site was blocked for some time but it came back
[Magisk] amk316:
thanks

it worked in my galaxy s10

but the only problem i saw is galaxy store stop working!!!
[Magisk] gringo80:
SafetyNet ... A Quick Solution !

here
[Magisk] dbjungle:
Magisk worked fine for me with GSIs in the past. I never got a resolution to this. I assumed they just don't want to support it anymore. I ended up using some device specific roms and Magisk of course works fine. I was using Magisk mainly for ANX Camera on Xiaomi phones. ANX Camera doesn't work very well for me anymore on Android 10 so I don't have a huge need for Magisk anymore. I've converted to GCam.
[Magisk] Atrate:
What would be the best way to inject custom hosts redirections as part of my module?
[Magisk] zgfg:
Use Systemless hosts.

Btw, that's how AdAway works
[Magisk] DiamondJohn:
Or do you want to insert extra hosts in addition to what is being created by another ad-blocker, such as adaway, independently? If you re-use the host file as used by adaway, it will be overwritten by the next adaway update.
[Magisk] Atrate:
I want to insert it in such a way as to be compatible with other ad-blockers.
[Magisk] DiamondJohn:
Just to be clear, do not wait for a soln from me, I do not have one off the top of my head (except maybe a service.d script to append my host redirection to the Magisk host file, if not present). I would need to do my own search and tests for your answer.
[Magisk] zgfg:
Be aware that on each automatic/manual update of hosts sources, e.g. AdAway will overwrite its changes to the hosts file. Hence you will have a clash between your redirections and AdAway's redirections to 0.0.0.0

Why don't you simply put your redirections to a file - at least in the new AdAway v5.0.5 (probably also in the old v4.3.5), you can add your local file:// (instead of an on-line https:// url) to the hosts sources list.

If added as last in the hosts sources list, AdAway will take care that its updates from on-line hosts sources will be properly merged with your own redirections from your local file

If somebody uses DNS66, Blokada, new AdAway v5.0.5 in VPN mode (instead of in hosts mode), or direct VPN to a DNS filtering server - in those cases AdBlockers do not utilize hosts file - redirections you put directly to the hosts file won't be considered by that AdBlockers

But still, if somebody uses DNS66, Blokada or new AdAway v5.0.5 in VPN mode, he can again add your local file with your redirections to his AdBlocker's list of sources, and AdBlocker will properly merge them together with its own blacklisted domains

Edit: DNS66 supports content:// type for hosts source and you can indeed point to any local file from Internal memory ?

However, AdAway supports file:// type instead and unfortunately I don't see how could I point to my local file to use it for hosts source/DNS redirections file (without running a local webserver)?
[Magisk] Hafiz0091:
founded why

its because magisk itself not compatible with USAP Pool that now been used as default in Paranoid Android rom (and might be on others rom too)
[Magisk] nilaytagde57:
My Jio app is detecting root after latest update ...anyone knows the solutions..I think magisk hide needs to be updated. .anyway if anyone know the solution plz tell
[Magisk] Didgeridoohan:
Care to share/link details or sources for that information?
[Magisk] mr-tical:
Hi

Every OTA I done with Magisk as described in GitHub worked for me.

But now I received notification from Google Play system update that "to continue installation restart device now or after 1am".

What should I do to keep root?

I'm on P3AXL, Jun update.
[Magisk] mr-tical:
Sorry, forgot attach screenshot.
[Magisk] Lughnasadh:
Google Play system update is totally different from the monthly OTAs you receive. You can safely update Google Play system without losing root.

EDIT: I'm assuming you are not talking about the monthly security OTA updates and are instead referring to the Google Play system updates.
[Magisk] vandyman:
I finally decided to try Android 11 on my Pixel 3aXL with a clean install (factory reset).

Magisk canary installed via patched boot image all went good. Now when I reboot Magisk root does not stick, I have to fastboot boot the image again. I looked at the logs and I do not see anything odd. I wonder if some how Magisk really never really uninstalled via the factory reset.
[Magisk] loadie:
seems to me i had to fastboot flash boot
[Magisk] mr-tical:
Yes, I'm talking about Google Play System Update.

I received this update through this way first time, that's why asked for help.
[Magisk] J.Michael:
Did you use a triple slash?

"file:///sdcard/myfile.txt" in the address field of my browser displays my file "/sdcard/myfile.txt".

I may have had to grant the browser some extra SD card permission to make it work. I remember that, when I first got the tablet, if I used a file manager to "launch" a local HTML file, the browser address bar had something like "content://0@media/external/file/101" in it.
[Magisk] vandyman:
Dah! I had a brain fart ..lol.. forgot the flash part. Thanks for the reminder.
[Magisk] loadie:
Wish I could say I've never done that..
[Magisk] QkiZMR:
Not working for me. Still getting CTS profile false and Basic integrity false. I cleared Google Play store data and Google Services data. dg.db locked with 440 mode. Moto Z3 Play here.
[Magisk] smvsmv:
One of the Magisk versions I used is actually 20.2 and that didn't work.. Getting error 1 on unofficial TWRP. I don't understand the mechanics behind this issue with Magisk and GSI, but wish it could be resolved.. Magisk is important for how I use my phone. I'll keep trying.
[Magisk] Lughnasadh:
Yeah, just update and you'll keep root.
[Magisk] zgfg:
This was about CTS Profile failing (forcing CTS Profile to use Basic instead of Hardware attestation), and this thing cannot help you for Basic Integrity

If Basic Integrity fails to you, you must have some other problem. First of all, have you enabled Magisk Hide in Magisk Manager settings - without, no chance for Basic Integrity to pass

Finally, if you installed EdExposed - sorry, don't even want to comment about (EdExposed and its problems should not be part of this thread. Sad that EdExposed developers and users do not maintain a dedicated thread and discuss there about tricks to pass SafetyNet with EdXposed and its modules)
[Magisk] zgfg:
AdAway does not allow content:// URL type, only https:// and file://

When adding a new source to the hosts sources list, if it starts with https:// or file:// you can add it, if it starts with anything else, Add button will be disabled (just change content:// to file:// and Add button becomes enabled) - see the screenshots

Actually, I installed in parallel DNS66 (it supports content:// type and gives you the option to open Files and navigate to your file), so I copy/pasted a working content:// type URL from there but then realized that AdAway immediately enables/disables Add button by looking to the URL type

Regarding to file:/// (three slashes) and Storage permissions - thanks, good point. However, AdAway does not ask for and I cannot grant it Storage permission, please see here (more about, with screenshots):

https://xdaforums.com/showpost.php?p=83063691&postcount=15097

(file:/// with three slashes starts with file:// with two slashes, hence you can pass the first step to 'add' file:// URL but it fails on the second step when you have to apply that new configuration)
[Magisk] QkiZMR:
Magisk Hide already enabled for all Google apps. I'm using stock firmware. Maybe it is EdXposed but before Google starts forcing hardware attestation it works fine with it. Blacklisting Google apps in EdXposed Manager helps to pass SN then.
[Magisk] mr-tical:
Delete please
[Magisk] zgfg:
Please understand that SafetyNet consists of two parts, Basic Integrity and CTS Profile. Failing Basic Integrity immediately triggers to fail also CTS Profile (but not vice versa)

E.g. (Ed)Xposed can causes Basic Integrity to fail. You can search back in this thread how to pass Basic Integrity with XPosed, but things change there (Canary, Riru, Tai Chi, whatever)

ONLY once you assure that you PASS Basic Integrity we can talk about CTS Profile and its new case with Hardware Attestation and this trick with ro.product.* props to force Basic Attestation to pass CTS Profile

Edit:

Instead of enabling Magisk Hide for all Google apps, better leave it exactly as will be confgured by default once you enable Magisk Hide on its master switch (just additionally enable Magisk Hide for banking apps, etc)

As of Magisk 20.4, Magisk Hide is disabled on the master switch - just enable on the master switch and better do not mingle to enable/disable it per Google applications and their activities.

That still comes properly configured by default, only that master switch for Magisk Hide is disabled for the new installations
[Magisk] textbook:
Passing integrity check and having EdXposed is very real.

I have a OnePlus 7 Pro running the latest magisk and the latest edxposed. I was failing integrity until I updated to the latest canary edxposed framework.

Just saying...
[Magisk] zgfg:
Perfect, one more trick for [MENTION=3834462]QkiZMR[/MENTION] and other XPosed fans to search for, study and apply

I didn't say it is not possible to pass Basic Integrity with XPosed, but I'm not using it and cannot give instructions to somebody how to pass it.I wrote to search back and read about - now I also recall that new Canary was at least two or three times mentioned here for helping to pasd Basic Integrity with XPosed - but people do not read from a day or two ago...

I just emhasized that Basic Integrity issues and CTS Profile failing due to Hardware attestation are different and independent things
[Magisk] textbook:
Do you see the disconnect and why someone might post at your first post to show that your lazy explanation of the current state of things might not add up to the reality,or at the very least that you are speaking on things that you clearly don't have direct knowledge of?

If you want to split hairs about what I said in an effort to clarify (backpedal) that's cool... But there are a lot of real answers to pass safetynet, and none of them are that complicated. Yes Google is changing things, but also there are a lot of people giving half hearted and frankly just mis information.

When you say edxposed causes basic integrity check to fail, that is false... I have absolutely nothing blacklisted in edxposed right now, and I completely pass. I am simply using all the right pieces that are available, and I made sure that the correct Google services/apps caches were clear.
[Magisk] pndwal:
Additionally re. Google's new basicIntegrity SafetyNet component detection (also recent):

https://xdaforums.com/apps/magisk/mod-magisk-v1-universal-systemless-t3432382/post82166469

Edit: FWIW, most members here, especially senior members, try to offer helpful information. At times we all mess up, but mistakes are usually quickly corrected by others/selves. Can we appreciate the genuine efforts of those who offer help, and correct mistakes in this spirit of offering assistance? I see no need to be offensive, or to take offense if no aspersions are cast.

Seems to me basicIntegrity fail w/ EdXposed is a matter of perspective.

EdXposed certainly tripped basicIntegrity with new Google detection initially. A fixed Canary channel build soon became available.

No-one has reported regular EdXposed passing basicIntegrity to date as far as I know, so stating EdXposed trips basicIntegrity may well still be true, at least with respect to regular builds... But feel free to correct me... (gently, if you please :D ) PW
[Magisk] textbook:
Forgive me if I sound like a jerk...

My point was that information like that is what makes people think rooting phones is too complicated...

Simple, direct information helps everyone.

Yes if you want to use edxposed and pass safetynet, then you should use the latest canary... But how is that abnormal? I get that there is some sort of perceived stability that you are gaining with a stable version... But the fact is... The canary build works and it achieves the desired affect of passing safetynet... I consider this a win. Not a workaround or a risky thing. It works.
[Magisk] Didgeridoohan:
What you're talking about there is the CTS profile check, not basic integrity. If you scroll down a bit here you'll find a table showing example responses
[Magisk] Haki!:
Even after hiding banking apps in magisk still apps says rooted device. some apps working some not. Any solution for that ?
[Magisk] pndwal:
Agreed, but troubleshooting IS often complicated.

Also, regular Magisk EdXposed module (stable, from Magisk repo) does trip SafetyNet as far many here are aware.

That is to say, the usual Magisk installation method has failed to date.

The fact that we can pass with Canary (debug version, available thru EdXposed Manager, Canary Channel) builds is a useful clarification, and it was announced here as soon as the fix came to light.

Also in EdXposed thread:

https://xdaforums.com/xposed/development/official-edxposed-successor-xposed-t4070199/post82071593

Your positive experience will no doubt help others too. :good: PW
[Magisk] zgfg:
Yes, right, uncertified ROM fails CTS Profile, not Basic Integrity
[Magisk] sidamos77:
Use Magisk Canary. I have the same problem with 20.4 for some banking apps.
[Magisk] Hafiz0091:
https://github.com/AOSPA/android_fr...r=93cea26d98047594cb62ada7a859f2b11455d099+34

start from e3ae2d80c46925d5da9c31fdcc7a186cb29cc8f9 commit
[Magisk] KaruyoT:
Root detected by app

Hello,

The root is detected by the new Bandai Namco game "Tales of Crestoria" on android even if the app is added in the hide section of Magisk.

Did someone know how to avoid it ?

Thank you.
[Magisk] bmg002:
I just tried it on my phone and had no issues. Do you pass saftynet? Is your device certified in the play store?

The game is currently in maintenance mode for me but I don't see any root related errors.
[Magisk] KaruyoT:
It doesn't tell me exactly that my phone is rooted but it close the app and send me to the KLabGames website that give me error 16882567 and it ask me to use a 'normal' device.

I saw on some other forums with same error code on the game 'Fate/Grand Order' that downgrading magisk to version 19.3 worked for them.

But if it works on your smartphone the problem is maybe not due to Magisk...

I tried to uninstall all programs that could be unwanted by games (Mod Edit: Reference to warez removed) but i still have the error.

I'm on Magisk 20.4 and the SafetyNet test is ok for both ctsProfile and basicIntegrity. My device is certified in play store/play protect.
[Magisk] KiNoys:
OnePlus X
[Magisk] NameLessThugZero:
I have an odd problem. When i apply the patch July boot img (Pixel 3a, Edxposed, ExKernal), the phone sees the root, but upon rebooting, my touch screen does not work at all. ADB and fastboot stays intact but I cannot do anything on the screen. Sidebuttons work just fine.

How I eventually got here:

- I saw that I had a "google play system update" and it needed to reboot my phone. I thought thought this was finally my july update so I went to Magisk and did the OTA uninstall routine listed on his github. So phone reboots, but hangs on the "G" screen for almost 30 minutes.

- I power it down and back on again, and when it booted, i didnt have root. Did some research and found that this was NOT an OTA. So i decided id just go ahead and manually update like I always do.

-I sideloaded the OTA update, booted to screen to let it finish, then after patching the July boot img, I reflashed boot to fastboot and flashed it.

- Once it finished, i tried to fastboot reboot but the device would not reboot at all and would only default back to the fastboot screen. After more research and wondering wth, I ended up flashing the stock img (without rewriting my data) and I eventually was able to reboot, just without root. I decided to redo the patching of the July boot img just to be sure, and reflashed boot.

- Phone booted, with root (i know this because I have my lockscreen PIN numbers scrambled)m but I had no touchscreen functionality. It seems the only way I can, is if I have the stock boot.img flashed.

Can anyone offer some help? Sorry for the long story.

(Edit: not sure how I posted this multiple times, sorry.)
[Magisk] snovvman:
With Android 11 Beta 2, I cannot update to the latest Canary Magisk Manager released a few days ago. The package installer just hangs. Are there any known solutions? If there is a Canary support thread, please point the way. Thanks.
[Magisk] zgfg:
Sounds OT here - aren't there forums for Pixels?!
[Magisk] QkiZMR:
Is it stable to everyday use? I'm asking about canary release.
[Magisk] NameLessThugZero:
Considering Im talking about the magisk patched img and overall process? How would this be off topic?