yashsingh1/xdaforums huggingface dataset:
[Magisk] Didgeridoohan:
Then there's something wrong with your setup... Maybe device and/or ROM incompatibility.
[Magisk] Warbeast350:
Tried both ways.. Still the same.. While searching for a possible answer it seems like Google update something recently and now the bootloader needs to be locked for the SafetyNet to pass, so it seems like now it detects systemless root.. Android pay, PoGo, Fire Emblem Heroes won't work anymore..

Even with stock rom without any modifications gives me the error..

Had to lock bootloader and it works.. Unlock again and fails..
[Magisk] JakeyEck:
Very well could be. I've tried it on a bunch of different Roms on op3.
[Magisk] Didgeridoohan:
Magisk Hide hides the unlocked bootloader. There's also custom kernels that do the same (I use Franco Kernel, there are others as well).

Some tips:

https://xdaforums.com/showpost.php?p=70426733&postcount=7120
[Magisk] Adrao123:
I am unable to get it working either... On the latest version of magisk and I get the same error. No SuperSu
[Magisk] tiendat1295:
You can try changing SElinux from permissive to enforcing. That fixed the problem for me.
[Magisk] Warbeast350:
That didn't work for me either :(
[Magisk] MrCreel:
Turn off USB debugging to pass safetynet and turn on magisk hide.
[Magisk] dragonb0rn:
I did the following:

1. Flashed Magisk v11

2. Flashed phh SuperSu

3. Installed phh SuperSu app and Masgisk Manager

4. ADB was disabled already. Enabled Hide Magisk

Still fails SafetyNet :(
[Magisk] Warbeast350:
Still same problem
[Magisk] Didgeridoohan:
Skip step 2 and the first part of step 3. Since v11 Magisk Hide requires MagiskSU (installed automatically with Magisk) and root management is done with the Magisk Manager.
[Magisk] bhaskar96:
I was getting same error. i have clean installed rom without root. then flashed magisk v 11.1.zip. that's it.. now I am able to use all apps on my op3
[Magisk] gauner1986:
I needed to disable ADB and execute the following commands after every boot:

chmod 640 /sys/fs/selinux/enforce
chmod 440 /sys/fs/selinux/policy
[Magisk] Solution6996:
For me it works perfectly with magiskSU. Unroot and flash magisk, see if that works (and make sure that you're not using Xposed! that will trip it still!)
[Magisk] HeroCC:
Does a custom recovery interfere with this? I'm using TWRP on my GS6, as that is the only way I could think to flash the zip. I am using Magisk v11 and SuperSU 2.79.
[Magisk] Didgeridoohan:
Not a custom recovery, no. But SuperSU definitely does... MagiskSU required for Magisk Hide to function.
[Magisk] aeroxy:
Well, like 1.5 billion other people (45% of the internet), I cannot visit Google. https://en.wikipedia.org/wiki/Golden_Shield_Project
[Magisk] Deic:
Then: http://bfy.tw/C2sC

In a more troll way: http://bfy.tw/C2sH and you will get arrested xD
[Magisk] aeroxy:
Sadly the DuckDuckGo isn't available in the 'SafetyNet'.
[Magisk] Deic:
Did you means Golden Shield Project with 'SafetyNet' ? ?

Man, use a VPN or some Chinese search engine.
[Magisk] aeroxy:
Yes if you search safetynet on Chinese search engines they tell you it is a Chinese program meant to protect the netizens from unwanted misinformation.

BTW, I had a solution to my ACTUALLY IMPORTANT original question.
[Magisk] Shininggg:
Just wanted to share the info here in case it happened to someone else.

Everything was working fine, then I started to get safety net profile mismatch. I tried rebooting, enable/reenable magisk hide, disabling systemless nothing worked

Then I just decided to force stop magisk, and I instantly got notification for application updates available. Application that were otherwise not updating because of safetynet.

Reopened magisk and safetynet check passed
[Magisk] HTCOmega:
Permissive SELinux and/or ro.fingerprints be damned

So...I have a Samsung Note 4 (N910T) running EQB1 build w/ EPK2 BB, and Magisk w/ SafetyNet bypass worked just fine on rooted/deodex fugly stock, but refuses to cooperate on Twiztd N7 port (found here), and I think it's because of the lack of enforcing kernels.

I've unrooted w/ unSU before - and after - installing the ROM and/or Magisk, but SafetyNet fails even when unrooted. My only assumption at this point is the plethora of permissive kernels offered in the ROM thread above, and/or the fact it's a port w/ mismatched fingerprints(?), is causing my issue since it doesn't appear to be root or Xposed related like I usually see.

The deodex has an enforcing kernel, so that may be it...but again, I can't find an enforcing one for that ROM.

Just sharing my pain lol idk if it'll help anyone, but I'm throwing my two cents in with those who have said enforcing kernels are definitely a requirement of making this work.
[Magisk] SSH316:
** Magisk post-fs mode running...

** Magisk post-fs-data mode running...

* Running post-fs-data.d

post-fs-data.d: /magisk/.core/post-fs-data.d/ssh

* Loading core props

* Preparing modules

* Stage 1: Mount system and vendor mirrors

* Stage 2: Mount dummy skeletons

* Stage 3: Mount module items

* Stage 4: Execute module scripts

* Stage 5: Mount mirrored items back to dummy

** Magisk late_start service mode running...

* Linking binaries to /sbin

* Starting MagiskSU

* Running service.d

* Starting MagiskHide

MagiskHide: Moving and re-linking /sbin binaries

MagiskHide: Removing dangerous read-only system props

MagiskHide: resetprop by nkk71 & topjohnwu

Initializing...

Modify data structure: 'ro.debuggable'='0'

Existing property: 'ro.debuggable'='1'

Recheck property: 'ro.debuggable'='0'

Done!

MagiskHide: resetprop by nkk71 & topjohnwu

Initializing...

Modify data structure: 'ro.secure'='1'

Existing property: 'ro.secure'='0'

Recheck property: 'ro.secure'='1'

Done!

MagiskHide: Killing com.google.android.gms.unstable

MagiskHide: Starting MagiskHide daemon

MagiskHide: Update process/package list:

MagiskHide: [com.google.android.gms.unstable]

Zygote(0) ns=

MagiskHide: com.google.android.gms.unstable(PID=6549 ns=[0 6549 10033 com.google.android.gms.unstable service com.google.android.gms/.droidguard.DroidGuardService]

)

MagiskHide: Permissive detected

MagiskHide: Calling magiskpolicy for pseudo enforce mode
[Magisk] Didgeridoohan:
Your kernel probably doesn't support setns/mount namespace/is too old. Try a newer ROM/kernel (Android 6+/Linux 3.8+, or an older kernel with the necessary commits added).

https://xdaforums.com/apps/magisk/magisk-magisk-hide-troubleshooting-tips-t3561828
[Magisk] SSH316:
I'm on Xeon HD 7.1.2 (I9300), i've tried with default kernel and with boeffla kernel

Always i can't pass safetynet
[Magisk] Didgeridoohan:
And if you look at that ROM it says:

ROM Kernel: Linux 3.0.x

Which is a lot lower than 3.8...

And from the feature list of Boeffla kernel:

Upstreamed to Linux 3.0.101

Which is a lot lower than 3.8...

Like I said: too old and probably have not had the commits added to make it compatible with Magisk Hide.
[Magisk] SSH316:
Thank you for your answers

So, there's no hope for my S3 :/
[Magisk] coolerprog:
Actually, there is no need a kernel with exactly or greater then 3.8 version. Some kernels have backports.

There is more information on github, issue #209
[Magisk] Didgeridoohan:
I know, that's what I meant with "not had the commits added to make it compatible"...
[Magisk] :
Did you enable magisk hide? In the settings?
[Magisk] ommon4u:
Working for me. It won't work if you have xposed. Those who have xposed can disable it "Xposed Status" and reboot. Then hide magisku and everything will work perfectly.
[Magisk] kngkl:
Still i can't pass safetynet on lineage 14.1 os oneplus 2. Tried everything from here...
[Magisk] vipul.21dec:
Thank you everyone who commented .. SafetyNet failed untill I uninstalled Xposed Framework . After uninstalling xposed, safetynet passed (Running on LineageOS Marshmallow )
[Magisk] xlxcrossing:
This problem is so frustrating. I have tried every fix mentioned in this thread and nothing. Not only that when uninstalling and reinstalling magisk my system has lost stability and now settings app continually force closes and now my phone will not load (systemui crash). I just want away from this app until stable development emerges.
[Magisk] Didgeridoohan:
You do know that SafetyNet has been updated, right? https://xdaforums.com/apps/magisk/advisory-safetynet-to-updated-t3621403

There's a fix in the works...
[Magisk] cheis:
try this in settings enable only core and reboot and test again
[Magisk] ArclightX:
Read this...

https://www.xda-developers.com/magisk-developer-assures-next-magisk-beta-will-pass-safetynet-again/

It's not you, it's Google. Dev is on the case.
[Magisk] pennywaltz:
I am glad i check this before trying to reflash everything. safetynet passed every day for the last month (since i flash the may update for pixell and all of a sudden it doesn't work yesterday and i couldn't figure out why.

guess we have to wait
[Magisk] jwrezz:
Sorry, just read the post about SN update! I'm not smart! Wait for Magisk13!

I just can't get this to work. I'm on Nexus 6. PureNexus ROM latest build, and latest magisk. I sometimes even get "rooted but no root permissions" after a reboot, and almost always get the CTS error. Will try to post a log file.

---------- Post added at 12:43 PM ---------- Previous post was at 12:41 PM ----------

** Magisk post-fs mode running...

** Magisk post-fs-data mode running...

* Running post-fs-data.d

* Loading core props

* Preparing modules

* Stage 1: Mount system and vendor mirrors

* Stage 2: Mount dummy skeletons

* Stage 3: Mount module items

* Stage 4: Execute module scripts

* Stage 5: Mount mirrored items back to dummy

** Magisk late_start service mode running...

* Enabling systemless hosts file support

* Linking binaries to /sbin

* Starting MagiskSU

* Running service.d

MagiskHide: Moving and re-linking /sbin binaries

MagiskHide: Removing dangerous read-only system props

MagiskHide: resetprop by nkk71 & topjohnwu

Initializing...

Modify data structure: 'ro.boot.flash.locked'='1'

Existing property: 'ro.boot.flash.locked'='0'

Recheck property: 'ro.boot.flash.locked'='1'

Done!

MagiskHide: Killing com.google.android.gms.unstable

MagiskHide: Starting MagiskHide daemon

MagiskHide: Update process/package list:

MagiskHide: [com.google.android.gms.unstable]

Zygote(0) ns=mnt:[4026545156]

MagiskHide: com.google.android.gms.unstable(PID=10553 ns=mnt:[4026545224])

MagiskHide: Unmounted (/sbin)

MagiskHide: Unmounted (/magisk)

MagiskHide: Unmounted (/system/etc/hosts)

MagiskHide: Stopping MagiskHide daemon

MagiskHide: Killing com.google.android.gms.unstable

MagiskHide: Removing dangerous read-only system props

MagiskHide: Killing com.google.android.gms.unstable

MagiskHide: Starting MagiskHide daemon

MagiskHide: Update process/package list:

MagiskHide: [com.google.android.gms.unstable]

Zygote(0) ns=mnt:[4026545156]

MagiskHide: Stopping MagiskHide daemon

MagiskHide: Killing com.google.android.gms.unstable

MagiskHide: Removing dangerous read-only system props

MagiskHide: Killing com.google.android.gms.unstable

MagiskHide: Starting MagiskHide daemon

MagiskHide: Update process/package list:

MagiskHide: [com.google.android.gms.unstable]

Zygote(0) ns=mnt:[4026545156]

MagiskHide: com.google.android.gms.unstable(PID=10746 ns=mnt:[4026545224])

MagiskHide: Unmounted (/sbin)

MagiskHide: Unmounted (/magisk)

MagiskHide: Stopping MagiskHide daemon

MagiskHide: Killing com.google.android.gms.unstable

MagiskHide: Removing dangerous read-only system props

MagiskHide: Killing com.google.android.gms.unstable

MagiskHide: Starting MagiskHide daemon

MagiskHide: Update process/package list:

MagiskHide: [com.google.android.gms.unstable]

Zygote(0) ns=mnt:[4026545156]

MagiskHide: com.google.android.gms.unstable(PID=11968 ns=mnt:[4026545271])

MagiskHide: Unmounted (/sbin)

MagiskHide: Unmounted (/magisk)
[Magisk] aus_pixon12:
This worked for me. Just updated Lineage to 14.1 20170621 Nightly on my S5 and SafetyNet failed and apps using it failed. Changing to core modules only in settings and reboot fixed everything for me.

:highfive:
[Magisk] grgbls:
So here is what happened to me... I yesterday installed SuperSU and rooted my device. I wanted to hide my root so I decided to unroot my device, uninstall SuperSU and install Magisk. I did it but I have the same issue. It seems like SuperSu left something. Forgot to mention that any time I go into recovery mode(I have TWRP BTW) and restart it tells me that my device isn't rooted and it asks me if I want to install SuperSU. However the Root Checker tells me that I have root. Any ideas?
[Magisk] red_phase:
whats the harm in using a device with safetynet failed?
[Magisk] Didgeridoohan:
None. As long as you're not using any apps that utilise it (Pokemon Go, Android Pay, Netflix can't be found in the Play store, etc) you can ignore it.
[Magisk] red_phase:
Netflix doesnt work after the device is rooted. But we can surely install the Netflix apk externally and use it? In this way we might not get updates though.
[Magisk] Didgeridoohan:
Netflix works just fine in a rooted device. They haven't gone that far just yet...

But yes, if you can't get your device to be certified in the Play store it's, like you say, perfectly possible to install it manually. And you'll have to also update manually.
[Magisk] Dr.Aitch:
Core mode worked

Just wanted to chime in that enabling Core Mode worked for me (in addition to having USB debugging deselected). Moto X Pure with Nougat 7.0 installed.
[Magisk] mbze430:
Enabling only core with v13.1 fails BOTH checks now for me on a HTC 10 running Viper Rom

HA! turned off enable only core is working now... Android Play back to normal
[Magisk] jeffreymcclain:
Disabling core only mode worked for me as well, weird. You'd think keeping it enable would make it harder to break safety net, not easier.

- Nexus 6P
[Magisk] vegetaleb:
Since yesterday when I downloaded the new 13.1 updated safetynet is not working anymore!

I installed a SVN of my Rom but still not working

Installed the downloaded zip of magisk with TWRP but still no differences

I checked-unchecked Core only and USB debugging but also no difference!

S8 Renovate rom

I don't use safetynet right now but samsung account expired is bugging me every 5 minutes now
[Magisk] Didgeridoohan:
Have you toggled MagiskHide off and on?

There's a bug with Core Only mode in v13.1. It'll disable MagiskHide on boot... You don't need it anyway, since that was only necessary to pass SafetyNet on v12.

And................... Logs! Please...
[Magisk] thaianhpsp:
I can't pass in Batmanrom samsung galaxy S7. Anybody knows how to fix it, thanks all.
[Magisk] drrayc:
To thaianhpsp

I'm on Ambasadii rom but I had the same safetynet not passing after updating to version 13.1. I had the same settings but eventually got it to pass by enabling systemless hosts and rebooting.
[Magisk] thaianhpsp:
Still not working with my device :(
[Magisk] drrayc:
Hmm.. It took a number of tries to get safetynet to pass. I also uninstalled the universal fix from modules when I had 13 beta installed. Not sure if a reboot was need but I always did.
[Magisk] vegetaleb:
Ok here the log
[Magisk] SYnN420:
Is anyone else having problems passing safety net today? It was working fine last night and I woke up this morning and now I'm getting this. Also here is my log if it helps at all.
[Magisk] alter-sacker:
saftynet failed

i have the same problem since some minutes
[Magisk] SYnN420:
Which is strange because as of like 3:30am, it was working perfectly fine...
[Magisk] ykokam:
Me too !!!!!
[Magisk] SYnN420:
Did anyone notice if google play services updated or something today?
[Magisk] Jdban:
Started failing for me about an hour ago. I am on v12.
[Magisk] Sarusani:
Same here, also failing since today. (13.2/5.0.6)

I uninstalled magisk via TWRP, uninstalled app, re-flashed boot/system/cache, cleared dalvic/art cache and disabled USB debugging. Im still failing safetynet...

Don't know what else to try.

(Nexus 5 / Stock)
[Magisk] xeqtorcreed:
I have the same issue since an hour ago (Samsung Galaxy S8 / BatStockRom 1.2)
[Magisk] ali.ahmad:
Google updated the safetynet, so we should wait for a update of magisk
[Magisk] Daryuszs:
Same problem,last version of magisk.
[Magisk] bracero:
Having the same issue for hours, Was driving me mad. Been spending hours trying to fix it, to no avail.
[Magisk] nikomaniaC:
As of last night I'm falling safety net also. Samsung galaxy tab s2 smt710
[Magisk] katerpanne:
this worked with miui 7.7.7/13 on mi6 / magisk v12 / v2 Beta 4 Universal SafetyNet Fix

use a terminal ...

su

resetprop --delete init.svc.magisk_pfs

resetprop --delete init.svc.magisk_pfsd

resetprop --delete init.svc.magisk_service

resetprop --delete persist.magisk.hide

resetprop --delete magisk.version

resetprop --delete persist.magisk.busybox

After the last two added commands it was working (thx rodries)

After this commands magisk will tell you that it is not installed. That doesnt matter. PokemonGo and all root apps are working fine.

If you reboot your phone you have to run the script again.
[Magisk] AoS_HJ:
You beauty! That did the trick and will serve as a short term fix until Magisk get it sorted more permanently. Many thanks for posting that here. ??

I should say that I'm on a Samsung S8+ UK. Magisk 13.2.
[Magisk] Ukreskowane:
SafetyNet passed only when:

1. Switched Magisk setting:

Magisk Core Only Module: off

Magisk Hide: on

Systemless hosts: on

2. Removed all Magisk prop

https://xdaforums.com/showpost.php?p=73056617&postcount=64

Device info:

HTC M8, Marshmallow 6.0

ROM: Skydragon v4.0.0. Sense 8

Magisk 13.2
[Magisk] Dr.Aitch:
I wondered what was wrong. I was passing SafetyNet as of Saturday. Went to try Android Pay a few minutes ago and got the failure message, and then noticed SafetyNet was failing again. Looking forward to a fix.
[Magisk] paskalion:
https://xdaforums.com/apps/magisk/safetynet-fix-pass-safetynet-2017-07-17-t3637801
[Magisk] thatasiankid:
Finally found a fix after trying everything. Installed the universal safetynet fix under the downloads tap in Magisk. Turn on magisk hide and voila ! Safetynet passed ! PS: I'm using Lenovo A6000 on RR
[Magisk] smohanv:
If you can sacrifice from running any magisk module, then enable core only mode in magisk settings and restart your device. Now check for SafetyNet and you can see in passes.
[Magisk] Frosthaxx:
13.3 which is latest fixed all these issues.please note though if your using xposed magisk safety net will fail regardless.if you do use systems xposed make sure you have the latest material xposed installer from dvdandroid and when you click the xpised status and reboot your phone safety net will work again.note:you have to use the magisk systemless version of course for the status ticker to work
[Magisk] ultigigantic:
Since you are using a custom ROM, I suggest you:

1. Reboot into recovery.

2. Download and run 0sm0sis's UnSU script.

3. Reflash latest Magisk and reboot into your system.

4. Now install Magisk Manager and download the universal safetynet fix module.

5. Reboot and I think there won't be any CTS profile mismatch error.

These ways worked for me so I suggested them to you. Hope you will it working as well :) By the way, using xposed will always trigger safetynet.
[Magisk] MBechirM:
after installing magisk manager, go to "magisk hide" and select everything then go to downloads and download "Universal SafetyNet Fix" by Deiki then reboot. should work perfectly as it did on my j5 running lineage os 14.1

if it works please give me a thumbs up, if it doesn't try uninstalling any app that requires root like xposed installer app
[Magisk] Abboz:
Nexus 6p, last oreo 8.0.0 Rom Stock. Magisk 14.0 and CTS profile: false.

Anyone has this problem? how should i fix it?
[Magisk] Didgeridoohan:
Every 6P user on the 017 september update has that issue... Google messed up. Update to 019.
[Magisk] adeich:
is installed without errors, but the safetynet does not pass

logs
[Magisk] Fif_:
There's something wrong with your Magisk install, it throws errors when creating the /system overlays. Please file a bug on the Magisk GitHub and post your log files there.
[Magisk] luki210:
Hello !

Instead of starting a new thread I just post here, as my issue concerns SafetyNet as well. I'm pretty new to Magisk, so bare with me if I make rookie mistakes :D

I used to be on stock ROM, but I decided to take the step to update to a newer Android. Factory reset of the stock ROM Stock, flashing of TWRP through Odin, then Resurrection Remix, OpenGApps 7.1, MagiskSU v14.0.

After having installed MagiskManager v5.4.0, I checked the SafetyNet, without passing it (not CTS profile mismatch nor Basic integrity), and that's when the problems get started..

I looked online (mainly here on XDA) to try different fixes, but none of them worked.

Here's a list of all I tried:

- Flashed UPDATE-unSu-signed (as I initially rooted with KingRoot) and VerfiedBootSigner (didn't work on my phone)

- Flashed Universal SafetyNet Fix | Universal Hide [v2 Beta 5]

- Changed permissions of "policy" and "enforcement" with RootExplorer

- Erased Play Store data

- Tried"Magisk Core Only Mode", "Systemless hosts", and every possible combination

- Tried with SELinux in "Enforcing" and in "Permissive"

- Retried the whole installation process (actually a few times), without success

I don't have Xposed, nor SuperSU. USB Debugging is off, as are the developping options.

To give it a go I clean installed LineageOS to check if it's changing anything, and even without having it rooted (so without Magisk installed) it didn't pass SafetyNet. I tried to go back to my stock ROM, and there I can pass it. I read that SafetyNet isn't ROM related, but maybe it is and I don't know it ? :rolleyes:

Also, if I'm not mistaken it might be a kernel issue, but I couldn't find any custom kernel which is compatible with my Alpha..

Read multiple times through this thread, without solving the issue: https://xdaforums.com/apps/magisk/guide-magisk-troubleshooting-t3641417

Attached are screenshots of my "About phone" section, and here the log taken from MagiskManager: https://pastebin.com/FMwhvqar

If any other info is needed, just ask and I'll post it asap :angel:

Can anyone help me there ? Or am I doomed to not have access to certain apps ? :confused:
[Magisk] DodoGTA:
Can you try to install RootBeer Sample, add it to the Magisk Hide list and screenshot the results?
[Magisk] luki210:
As requested: i64.tinypic.com/118q7mp.png (cannot post a link if I'm under 10 posts :rolleyes:)
[Magisk] DodoGTA:
Do you fail both basicIntegrity and ctsProfile in unrooted LineageOS ROM?
[Magisk] luki210:
Yes, I only installed LOS without Magisk nor any root, RootChecker confirmed that it isn't rooted but SafetyNet Checker showed that I didn't pass any of the 2 checks.. :mad:

Edit: [MENTION=6429309]DodoGTA[/MENTION], I tried it again in case I did something wrong the first time, clean install of LOS and GApps Aroma, only downloaded RootChecker and SafetyNetHelper, and still the same problem..
[Magisk] adeich:
Where and how to do it?

Magisk 14.0 works good
[Magisk] prarywolf:
Magisk 15.3 fixed my existing issue

I recently had purchased a HTC U11 Life that right out of the box took an upgrade to Oreo. The upgrade went less than smooth. Seems like phone upgrading from Nougat to Oreo have lost the recovery partition. I have seen this loss of recovery on all 4 phones I have upgraded, two from HTC, One from Motorola, and One from Asus. I digress.

Waiting for a compatible version of TWRP and Tmobile to release the Stock Rom took a little over a month, I just had to deal with it. Upon finding the stock roms available I reloaded the phone.

To my surprise the CTS failed right out of the new reload, NO ROOT Applied. Im guessing this had to do with the unlocked bootloader required to install TWRP. Not sure though.

I at this point decided to root the phone as it didnt pass safety check anyway. The Magisk 15.3 fixed the existing problem.

Who knew rooting a phone would fix issues with stock rom..

Give a new version a try, see if that fixes things for you.