yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] fgl27:
RR comes with magisk pre installed I believed you are confusing project. if not produce appropriated logs of the problem
[Android Apps and Games] xda_joze:
Q: is there a way that I can find which properties are read by a certain application, so that I can (re)set them in the iSU->properties?
[Android Apps and Games] fgl27:
if you can't read the app sources, you can try logcat but that will only help if the app logs the fails or success, you can also decompile the apk and look for its constants by searching text strings that start with "ro." or wherever prop you are interesting, but some things are not a direct prop, google has add some tools that convert props to android variable during bootup (those are old tools they are there in android for ever) and to use those in a app you don't use a constant you use a java/android function and that can't be see by decompile the apk, but those are very little and all I know that matter are in props section Known props.
[Android Apps and Games] xda_joze:
It might help someone in my case I discovered that ISU stops working when I have installed ROM manager apk: https://play.google.com/store/apps/details?id=com.koushikdutta.rommanager&hl=en
[Android Apps and Games] sumitgp:
Dear sir

Yes u r right that rr 5.8.3 comes inbuilt magisk manager but it won't passed seftynet bcoz magisk have some issue with los based rom i tried magisk but not able to pass seftynet net but isu i have passed seftynet​ but having issue with finger print only known bug that i have encountered

Rest all ok

Thanks sir for responding my quarry
[Android Apps and Games] fgl27:
Yours problem has no relation to iSu. if you are so shore is the app problem unistall it problem solve, if unistall it doesn't solve how is a app problem?
[Android Apps and Games] sumitgp:
Thanks sir

I will try then tell u

Thanks for such a excellent tool
[Android Apps and Games] rohan164:
[MENTION=7556991]h_maharaj[/MENTION]

do i need to install magisk too?

or only iSU is enough?
[Android Apps and Games] h_maharaj:
You don't need to install anything else. Follow these steps:

Make sure you are on a rom with Lineage Su (you are using Tilak's rom right? If yes then that rom is prerooted with Lineage Su).

Install iSu and open the app. Under the 'Checks' tab, Su version should show '16 cm-su' and Reboot Support should show 'OK'.

Under 'Props' tab scroll down to 'Force set all known props' and tap on 'Safe Value'.

Under Settings tab:

1. Make sure that Deactivate Su at boot is toggled off (it should be by default)

2. Notifications are off by default. You can toggle on if you want a notification when you change Su state.

3. Change 'Selinux state when Su is activated' to Permissive. It is set to Enforcing by default.

**This step is optional. This is what I did to get device to show as Certified in the play store. Clear cache and data of play store and play services.

Reboot.

You can now add all the apps that check for root to the Deactivate list in iSu under the Monitor tab. Accessibility access needs to be toggled on first. Alternatively, you can make use of the widget and manually toggle Su state as needed - this is my preference.
[Android Apps and Games] rohan164:
all done as per above step.

but safety net check is failed. why?
[Android Apps and Games] h_maharaj:
Did you Deactivate Su before doing SN check either manually or having your SN check app in the Deactivate list? If you did Deactivate Su, was your SELinux state toggled to Enforcing as well?
[Android Apps and Games] rohan164:
Now I got safety net pass but when I install any app from play store it force close

I did wipe data and cache of play store and play service
[Android Apps and Games] h_maharaj:
Don't know about that. Never experienced such an issue. Give the following a try and see if it helps:

1. Dirty flash rom

2. If (1) doesn't work, wipe /system, reflash rom and gapps and follow steps to set up iSu again

3. Last resort would be starting from scratch with a clean flash.
[Android Apps and Games] sirdanmartin:
Sorry for the delayed reply, I was away. iSu does show as having reboot support however can confirm after having to re-flash my ROM many times that it does not. Maybe its just an anomaly with this ROM?

I now use the built in setting to automatically turn of and on the root when i open the needed apps, so its not so much an issue any more.

Cheers guys, and keep up the good work.
[Android Apps and Games] fgl27:
the only way to have reboot support is if you help... as I never see that problem on any device...

install the attached, open the app, deactivate then activate SU, close the app remove from recent, open again do the same deactivate active, close remove from recent and for the final open generate a log zip and share the file on the thread.
[Android Apps and Games] Kurajmo:
Can't work.

When I switch of su my phone lost GSM signal.

When I tried flash iSu_kernel_Reboot_Support_V_4_2_and_up_Permissive

In recovery I have error installation aborted.

I use Philz recovery, Cyanogen13.0.1-D310-160816-MONTHLY

on this htc.

Any help with this?
[Android Apps and Games] fgl27:
The app comes pre config to enforce selinux when su is deactivated, that can be disable in settings, but you can't pass safety net in permissive selinux.

If the device is in permissive is because selinux rules are not fully implemented, and that behavior can occurred, things will fail because the missing rules.

Selinux rules need to be write to the device request to the rom developer to write the rules so the device can at lest have selinux enforced after it finished Bootup.

I can only test the zips and make sure they work on TWRP, they are irrelevant if the app can't be used because of that selinux case.
[Android Apps and Games] Kurajmo:
I not fully understand. Cause I'm not Android developer for now.

But anyway thanks for all help.

I just wanted test Pokémon go on this htc.

But if I can't. I do not try to force this app to work.

I stopped playing this game month ago.

Anyway thanks for help
[Android Apps and Games] sirdanmartin:
I installed and ran the test app as you described and generated a log file.

This forum doesn't let me attach files or post external links as I am a new member, so I have sent you a direct message with the log file.

Thanks
[Android Apps and Games] rohan164:
hi

have u added google play services and google play store to deactivate SU list?

bcoz when i do so my playstore force stops...
[Android Apps and Games] h_maharaj:
I don't use the deactivate list. I prefer using the widget to manually deactivate/reactivate su. I have not had any force closes even with root deactivated when using the play store.
[Android Apps and Games] fgl27:
Did you use the app attached to that post?

Because only that one produces what I need and I don't see what I need on the shared log
[Android Apps and Games] sirdanmartin:
I thought I did. Do i need to remove the old app first? Ill try removing the old app and try it again.

Edit: I think I sent you an old log file by accident. I have re-sent a new log file. Thanks.
[Android Apps and Games] Kurajmo:
This error I have always. When I want flash any isu zip package.

On cm13, lineageos, resurrection remix etc.

On HTC Desire 310, with Philz recovery.

CWM 6.0 recovery version.

Any help with this?

I really want to disable su binary for Super Mario run. With root this game force close after Nintendo logo.

I may try Magisk for this.

But Magisk don't search automatically path for boot img. To flash kernel. I'm not Android developer. That's why i don't use Magisk for patch boot img.

I not know boot img patch etc.

I may brick my phone with Magisk.

Any help with isu maybe?

Anyone?
[Android Apps and Games] fgl27:
already give you a way in the above did I?
[Android Apps and Games] fgl27:
OK... when you try again, if you can't post links just add the link without the http:// it will be added and I can see and use it.
[Android Apps and Games] yakub234go:
iSu hangs whenever I try to deactivate SU

I have a zenfone 2 (ze550ml) x86 with the latest lineageos flashed
[Android Apps and Games] fgl27:
the log is not reading the reason way it fail.

can you change the others controls, selinux adb?

can you try to disable in settings, Extra selinux and Extra adb, then with selinux im permissive try to change SU?

even if fails try more the once, then after some tries share a new log and tell me the results...
[Android Apps and Games] fgl27:
App update V 4.6

No need to update reboot support

Changelog

Download Link

XDA LABS update

[IMG="XDA Labs"]https://img.xda-cdn.com/oshFRo1rSEHTP5__wCXMO3e3u-I=/http%3A%2F%2Fimgs.xda-labs.com%2F0621sigs%2Flarge%2Fcontributor.png[/IMG]

Enjoy it :good:
[Android Apps and Games] yakub234go:
I can toggle everything else without issues

Also my phone gets sluggish & hot after that
[Android Apps and Games] thalesbraga:
very nice mod man thanks, but seems not to be working on ressurection remix 5.8.3 (LINEAGE 14.1 BASED).

I am getting this "version not supported".

can you maybe work that around? thanks a bunch!
[Android Apps and Games] Genericxx:
Resurrection Remix uses Magisk. Uninstall it (search) and install regular addonsu from lineageos (search for it too). This App works flawlessly then. I am using it with RR.
[Android Apps and Games] thalesbraga:
Thanks. iSu working now, but I still can't get the app working. I get "app can't run in rooted device". I think the app checks it's a custom binary as well then doesnt work, cause I also tried on a not rooted custom rom.

I could only get it to work on not rooted stock firmware.

Any ideas?

I believe i need to reset flash counter, tried triangle way but apparently it doesn't work anymore.

Thanks in advance.
[Android Apps and Games] Genericxx:
Have you set the Dangerous props to Safe ones? Which App won't work?
[Android Apps and Games] josealvarezn:
How to install on Moto X 2nd Gen 2014 (victara)? I have a Cypher OS, based on CM.

Thanks!
[Android Apps and Games] Delichi:
Working perfectly on my Moto X 2013, with Mokee 6.0.1

Thank you so much! I've been looking forward for something like this!!! :)

Enviado desde mi Moto X
[Android Apps and Games] Timmmmaaahh!:
Same as you would on any device: MAKE BACKUPS (!!!), flash the correct zip according to your SELinux status (check settings) and install the apk to start 'playing with it'.

You're welcome!
[Android Apps and Games] josealvarezn:
Thanks! It's neccesary clean cache and dalvik cache?
[Android Apps and Games] Timmmmaaahh!:
No but it won't hurt. If you didn't and you encounter a bootloop you can still do that to attempt to fix it. I personally always clear caches after flashing anything.
[Android Apps and Games] josealvarezn:
Works excellent, thanks very much! [emoji119]
[Android Apps and Games] highmighty:
Sorry to ask but I couldn't find where that XDA CM thread is located? I sure would like to post in there to hopefully find a fix for my "security" issue...

Also, would you think the "security" issue on my Nexus 5 running CM14.1 would be related to a NIGHTLY versus a RELEASE build?

Thanks again
[Android Apps and Games] feplau:
Dont work for me, rhe pokemon go still say i incompatible só, the name of My su is 16 cm-su, is that the problem?
[Android Apps and Games] mrkhigh:
Then perhaps you weren't flashing official?

Download from here I believe this is your device yes?

http://xdaforums.com/google-nexus-5/orig-development/rom-cyanogenmod-14-nexus-5-t3447048/page93
[Android Apps and Games] highmighty:
Thanks for the advice, I flashed that latest CM14.1 CAF build for my Nexus ( cm-14.1-20161215-NIGHTLY-hammerheadcaf.zip), installed the kernel support, disabled SU in iSu and POGO won't still let me in :(

Quick question, when I first enable the root in the CM settings, should I choose "Apps and ADB" or APPS only? I'm currently using "Apps and ADB". Does it make a difference for those "security checks" Niantic is doing?

But I even tried having the root totally disabled in the CM settings and same, POGO doesn't like my phone....

Also, FYI, I'm using latest official bootloader and radio from Google and I also tried earlier an AOSP build (7.1.1) that has just been released for the Nexus 5 and same issues, but worst because that build was very unstable on my phone (taken from http://www.ibtimes.sg/lg-nexus-5-gets-android-7-1-1-update-via-aosp-rom-5525)

Thanks again for your time and support
[Android Apps and Games] mrkhigh:
Your settings are fine

Bhb is right at this point it is on the developer. Try posting in the forum I linked.
[Android Apps and Games] mrkhigh:
Try the non caf version

If I linked you that I was mistaken.

https://download.cyanogenmod.org/?device=hammerhead
[Android Apps and Games] highmighty:
I already tried that non-caf CM141 build named "cm-14.1-20161212-NIGHTLY-hammerhead.zip" and POGO wouldn't let me in... should I try with the latest, released 3 days later, named "cm-14.1-20161215-NIGHTLY-hammerhead.zip"?

FYI, those CM14.1 builds for the Nexus 5 are only "nightly" builds while the "release" builds are CM13 builds. In my case, I sure want a CM141 build and not a CM13 because those ones are the "same" Android version 6.0.1 as what Google is offering me. Hope it helps.

Thanks and regards
[Android Apps and Games] leonaheidern:
Hi would there be a way to script iSu to turn on when using a certain app using Automate?

There is something similar for RootSwitch 1.3.3.2 using Automate and Pokemon Go. Root Switch is using a .sh file to turn Pokemon go on and off.
[Android Apps and Games] Kurajmo:
Any change to add support for cm11?

I tried test this app.

But i cant install this app and Flash zip
[Android Apps and Games] power988:
Hello, i wanna report the boot truble with my phone: after flashing the zip, the boot is corrupted.

I have a G2 D802 with RR
[Android Apps and Games] fgl27:
I can make the app to install, but if will work I have no idea, I may make a kernel support but I have none cm-11 for the devices I own so is not possible to test...

I will research and some day make a experimental kernel support,don't know when I'm busy life holidays etc...

Test the app and let me know

https://www.androidfilehost.com/?w=files&flid=137107

If the app manage to deactivate SU, don't reboot with SU deactivated or you will loose SU.
[Android Apps and Games] fgl27:
Ok OS version?
[Android Apps and Games] power988:
7.1

rom link is this: http://xdaforums.com/lg-g2/development/rom-ressurrection-remix-m-t3271114 (in case you need further informations :D)

Thank you :)
[Android Apps and Games] fgl27:
7.1 sharing a cm-13 thread?

any way if is M or up I let you know when I manage to understand way.

The app even works? on the ROM you try, I mean you can disable SU and RUN none ROOT app?
[Android Apps and Games] thalesbraga:
Not sure what you mean? I go to "props" tab and do what?

Change special props? Known props list? Can you give me more details please?

The app is this,

https://play.google.com/store/apps/details?id=br.com.telecineplay.android

It's like Amazon prime video but for Brazil, need a paid account to use it.

Thx a lot [MENTION=5369313]Genericxx[/MENTION], really appreciated for the help.
[Android Apps and Games] Genericxx:
Just Switch all props to Safe ones and Check that your Kernel is enforcing instead of permissive. Reboot, clear App Data of your telecineplay and try if it works.

Edit: There's a Thank You Button, if you appreciate the help of people, don't spare using it ;)
[Android Apps and Games] fgl27:
App update V 4.7

No need to update reboot support

Changelog

Download Link

XDA LABS update

[IMG="XDA Labs"]https://img.xda-cdn.com/oshFRo1rSEHTP5__wCXMO3e3u-I=/http%3A%2F%2Fimgs.xda-labs.com%2F0621sigs%2Flarge%2Fcontributor.png[/IMG]

Enjoy it :good:
[Android Apps and Games] thalesbraga:
OK, props all set to "known safe value" in iSu. But under "controls" tab when I try to check "change SElinux state" it stays on permissive, nothing changes.

In Android setting it is also SElinux permissive.

I Rebooted and tried again but app still won't work.

How to change the kernel to enforcing? (on the boot I get the red message "kernel is not enforcing..."

BTW, I'm using RR.5.8.3 rom.

PS. I did thank you already on your first reply ;) thx again.
[Android Apps and Games] Skittles9823:
In your custom RR settings you should have a SeLinux toggle somewhere. Try to find that it will definitely work.
[Android Apps and Games] fgl27:
the app is doing same safety net check that other apps do...

I get the error if I don't disable SU and not enable selinux

but after disabling SU and enabling selinux is all ok

the message of root is gone and I can open the content (free content of course)

the possible thing that can prevent selinux from be changed is the kernel, ask the ROM/Kernel developer to fix it, if the device can boot with Selinux set to enforcing ask him to make it boot in permissive but without breaking selinux so after boot you and others can set it to enforcing.

is need the proper selinux rules to run in enforcing if the reason selinux is disable or "bricked" is because he did not wrote those rules, ask him to write the minimum rules so the device can at least have selinux set to enforce after the boot has finished.
[Android Apps and Games] Skittles9823:
RR ROMs should have the ability to switch selinux though. I'm pretty sure it's already in the source for it.
[Android Apps and Games] fgl27:
there is only one know way to change selinux the one used by the app is the same as RR or any know app uses, if selinux is disable or "bricked" on the kernel there is noting to be done until it is fixed there, and that is probably the case here.
[Android Apps and Games] thalesbraga:
Yes, I tried to change it to enforcing and toggle simply won't do it, stays in permissive. I even tried kernel adiutor mod from xda and Selinux toggle won't change.

No other way to make it work in permissive mode?I

---------- Post added at 09:20 AM ---------- Previous post was at 09:14 AM ----------

OK.
[Android Apps and Games] Ibuprophen:
I was just wondering if [MENTION=5747496]bhb27[/MENTION] had noticed the following LineageOS Biweekly Review from May 15th?

If you go to the following, direct link, and scroll down a bit, you'll see a title "Kernel su-hide to address an important vulnerabilty".

LineageOS' Biweekly Review #9 - Gello, Jelly and a security advisory {15 May 2017}

I posted it here as it does pertain to the devices SU file and what they had done.

I just wanted to provide a little friendly FYI...

Thanks!

"Live Long and Prosper..."

~Ambassador S'chn T'gai Spock

Sent via Communicator [D2VZW] from the Bridge of the U.S.S. Enterprise
[Android Apps and Games] fgl27:
I saw and tried it unfortunately the below is not true at least not to everyone:

I apply all the kernel patches to my device, disable SU in settings and safety net still fails. :eek:

the kernel patch is hiding SU but not completely...

the below commands can't see SU.

1|quark:/ $ su
/system/bin/sh: su: not found
127|quark:/ $ getprop init.svc.su_daemon
stopped
quark:/ $ stat /system/xbin/su
stat: '/system/xbin/su': No such file or directory
1|quark:/ $ ls /system/xbin/su
ls: /system/xbin/su: No such file or directory
1|quark:/ $

play is a priv-app and google give it special permissions (at least on Nougat did not try on older OS).

Or not!, just to proof that is a little hard to really hide a file.

I can see SU using "cat" or "strings"

quark:/ $ strings system/xbin/su | grep cm-su
16 cm-su
1|quark:/ $ cat system/xbin/su | grep version
-v, --version display version number and exit
-V display version code and exit,
quark:/ $

If I can see it, using normal shell commands, commands that can be used from any .java application without any special permission, google can do the same...

Good that they are trying to do something related to this but did not work on my device, the main reason I start this project was because the setting control over SU only prevent request to SU access it doesn't prevent SU from be seen by safety net or wherever is really trying to do so...

Hope they improve this, or that the current can really work for others.

:good:
[Android Apps and Games] meiser:
For kernel 3.10, you need an additional patch: https://review.lineageos.org/#/c/174289/

Any chance to hide su on kernel level for special apps? Even though the Google Play Store app shows "certified" and SafetyNet test passes, apps like Netflix or 'Super Mario Run' are not shown in the play store.

(Actually, I don't care about these two apps, but it could be that there will be an app which I care about.)
[Android Apps and Games] thalesbraga:
Same here. The su is not really hiding.
[Android Apps and Games] fgl27:
There was a dev that wanna to do something like that, but those things need to be build to the kernel, making it not easy to use as is need a patched kernel...

I have no idea what makes a device eligible for netflix and those app missing from play, if certified doesn't what does?

any way there is aptoid, apk mirror etc web or apps that allow us to have any apk, google or wherever app maker can't keep us from using they apk unless they do it for 100% of the users
[Android Apps and Games] fgl27:
App update V 4.8

No need to update reboot support

Changelog

Download Link

XDA LABS update

[IMG="XDA Labs"]https://img.xda-cdn.com/oshFRo1rSEHTP5__wCXMO3e3u-I=/http%3A%2F%2Fimgs.xda-labs.com%2F0621sigs%2Flarge%2Fcontributor.png[/IMG]

Enjoy it :good:
[Android Apps and Games] thalesbraga:
Sorry, doesn't work at all for several apps I have, maybe they have more advanced checks in the system....

Tried with lineage 14.1, dnd and RR on my Moto z play. Simply won't work for the apps I use.

Mario run

Globo apps (premiere play, telecine play)

Ourocard

Thx
[Android Apps and Games] zittorb:
i did try the 4.8 on a moto x pure with lineage 05/22 and even with android pay on the deactivate su list.. android pay won't work

is there a way to make it pass?

tnks

?
[Android Apps and Games] h_maharaj:
Did you set props to known safe value and then reboot?

Did you deactivate su before performing SafetyNet test?

Was SeLinux changed to enforcing?
[Android Apps and Games] zittorb:
i have no ideia about the values.. can u help me?

no

yes

?
[Android Apps and Games] h_maharaj:
1. Launch iSU and go to the "Props" tab. Scroll down to the heading "Force set all known props" and tap on "Safe Value". Scroll down to "Known Props" heading and double check that all the props have the green tick next to them.

2. Go to "Settings" tab and make sure that the option "Apply changes to props on boot" is toggled on. Also under settings tab scroll down to "SELinux" heading and make sure that:

2A) "Extra SELinux Controls" is toggled on.

2B) "SELinux state when SU is activated" and "SELinux state SU Deactivated" is set to Enforcing by default. You can leave these alone but if your ROM's kernel is set to Permissive by default then I suggest changing "SELinux state when SU is Activated" to Permissive.

3. Clear cache and data of Google Play Store and Google Play Services.

4. Reboot

5. Once booted up again, Deactivate SU (launch iSU>go to "controls" tab and tap on "Change SU State") and then run SN Test. You should be getting a CTS profile match now. If not try turning off USB debugging as this can be an issue on some devices and run SN Test again.

6. If you pass SN, log into the Play Store (with SU still disabled) and your device show now show as "Certified" in the play store under settings.

You can then configure iSU by adding apps that check for root to the "Deactivate SU" list under "Monitor" tab. Alternatively, you can make use of the widget to manually deactivate and reactivate SU as necessary.

Good Luck!
[Android Apps and Games] fgl27:
App update V 4.9

No need to update reboot support

Changelog

Download Link

XDA LABS update

[IMG="XDA Labs"]https://img.xda-cdn.com/oshFRo1rSEHTP5__wCXMO3e3u-I=/http%3A%2F%2Fimgs.xda-labs.com%2F0621sigs%2Flarge%2Fcontributor.png[/IMG]

Enjoy it :good: