yashsingh1/xdaforums huggingface dataset:
[Magisk] huskydg:
I wish LSPosed group will respect users request which can improve their software a bit rather than muting/baning them. Shamiko 0.5.2 is released to fix zygisk detection which I mentioned before based on user request. Momo 0.4.3 is released to fix false detection of code injection also based on user request.
[Magisk] huskydg:
Shamiko can still not hide zygisk if modules don't unload itself (Example, Isolation Storage, Pixelify,...) , so riru is still better
[Magisk] sieger007:
I see newer Magisk has Writable SePolicy where you can upload Sepolicy. But I am squat on SeLinux - can someone point me to actual examples where SePolicy was modified using Magisk. How do I do it. I need to change Sepolicy to permit bind mounting SD Card folders . Problem is Even with setenforce 0 it will NOT log errors to logcat. How then do I go about understanding what Sepolicy changes needed to made to acheive this ? In the absence of logcat possibly where could it log violations when setenforce is 0 on my Samsung M20
[Magisk] sieger007:
another Q ?

zygote denylist : is there a performance overhead if you put pretty much every app that doesnt need root into that denylist. I wrote a script that did this and the list is exhaustive. MY magisk has Shamiko and Safetynet installed and ever since my phone has been running in 2nd gear...aka slow . MY keyboard strokes from gboard come too late and literally that keyboard pop out will freesze after I press any key. I wonder if there was something that caused a sudden performance penalty .
[Magisk] zgfg:
Why do you need all those apps in DenyList. That's the 'easiest': put everything - instead, you need to think about which apps need to be listed

GBoaed, Chrome, etc, etc, have never been reported about causing issues

There have been literally hundreds of posts here and in Magisk thread about hiding root and I NEVER saw any single one suggesting to put too many apps to DenyList - to the contrary

Eg, I have a dozen of them in the list only
[Magisk] martyfender:
This reminds me of what topjohnwu posted many years ago on twitter concerning magiskhide, when it was still in magisk.

Why are you doing this? Even he said it was stupid without using those words. If I had the link to the post, I would have quoted it here.
[Magisk] pndwal:
W/ traditional hidelist, certainly. Please go back in links from here:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-86275191

These mention reasons why older hide daemon's passive reaction speed etc produced instability w/ more than a few processes selected, and that things may well have changed w/ hijacking Zygote ability etc...

Nb. Hide and Deny functions differ significantly also; hide doesn't revert all Magisk modifications in a process while deny doesn't conceal as many root traces for example.

Nb. 2 If you want to have proper Hide functionality using whitelist mode, Shamiko already provides this. However dev notes caution (even if there are speed / stability improvements with ability to hijack app processes):

https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87172845

👀 PW
[Magisk] huskydg:
@pndwal whitelist will break many modules or crash your system
[Magisk] pndwal:
(Ping for sieger007)

Yup... That potential* is detailed in the linked info, especially in Magisk Lite docs/comments... It is also (only) partly implied by the dev comment above.

*Nb. I'm not sure of progress with fixes for module issues, but it is interesting that it's not specifically mentioned in Shamiko changelog; issues may well be significantly reduced by Zygisk-based hiding, latest module template changes etc... Whitelist user's, please report any testing results... PW
[Magisk] martyfender:
Yes, I tried the whitelist mode briefly, but it didn't appear to do anything useful for me that I could see, but I did notice a slow down of the system.
[Magisk] amn1987:
Due to the issue with Shamiko I had experienced I decided to give Magisk Delta a try. It worked well in an older unencrypted device running A10 but in my Poco F1 running A12 and encrypted (FBE) after boot the usual prompt was missing. I then installed the app but it was no better. Both devices were running Magisk 25.2 which I had uninstalled first. Does Delta doesn't work with FBE encryption or only at the time of first flashing the ROM?

Edit: Worked after flashing Delta as module in official Magisk.
[Magisk] sieger007:
Wanna bring this thread home.... in other words.. its worthwhiile keepng denylist for zygote minimum instead of maximum ? Long S Short. Well I did that now but I dont see much performance changes...maybe tis too short a time to tell .....
[Magisk] pndwal:
Several custom forks (also downgrading TJW Magisk, or upgrading missing several incremental updates) require full Magisk uninstall, or direct install forked Magisk and delete files in /data/adb before rebooting to rebuild config, as Magisk configuration is not always compatible especially with versions altering deny / hide and other mechanisms...

I'm guessing there will be similar issues migrating to/from delta where magisk.db at least is not rebuilt...

Flashing Magisk zip installer as a module may force db rebuild etc...PW
[Magisk] pndwal:
I've always kept hide/deny items to minimum, and never played with whilelist so don't have personal observations; I've just linked John's observations / cautions re instability / performance hit / broken webview etc when processes are added indiscriminately / module issues.

FWIW, here's a bit more on module issues from Lite TG (Chinese translated);

https://t.me/MagiskLite/4

I understand @zgfg and others here have played with whitelist mode hiding in vvb2060 Lite Magisk, and possibly in Shamiko and @huskydg Delta Magisk also... They may be in a better position to assess issues from experience... PW
[Magisk] 73sydney:
whitelist mode seems to me like it should be renamed to:

reverse insane granularity mode

or just removed

whichever is easier to implement....

just my personal take on it :)
[Magisk] huskydg:
@pndwal whitelist mode is mainly for testing
[Magisk] huskydg:
@pndwal the whitelist mode in shamiko does not same as magisk-lite.

On Magisk-lite, after boot completed, magiskhide will directly unmount magisk and its modules from zygote process to cause all apps (apps are subprocesses of zygote) lost root and magisk. When any app in magiskhide list is opened, it will then mount magisk. In short: hide by default, mount if whitelist

And shamiko it will unmount every apps whenever they launch and ignore apps on granted root access. Some apps might launch at same time, too many unmount process run at same time will cause system unstable
[Magisk] huskydg:
Zygisk only allows modules to run in system_server and app process, does not allow modules to run directly in zygote
[Magisk] huskydg:
But Shamiko can't still hide zygisk for some apps and games
[Magisk] metropical:
looking to install Xposed framework on HTC U11 Pie so I can turn on dark mode.

Have Magisk 25.2/Zydisk, Riru 26.1.6.r527 & Universal SafetyNet Fix 2.3.1 installed.

I tried to install EdXposed 0.5.2.2. EdXposed Installer said "unsuccessful".

Not following what is the next step to take?
[Magisk] zgfg:
Riru is not compatible with Zygisk - one of those with not work properly

EdXposed was abondoned long, long, long, ago and everybody switched to LSPosed (for Zygisk)

If you didn't (?!), pease read the first page

Assuming you are talking about TJW Magisk (not Delta)
[Magisk] Phil21185:
Hey all,

Trying to flash a Tab S4 lte (T835) with Magisk and its like pulling teeth. I'm not new to this, but not exactly an expert either.

Daughter has a T830 (wifi only) which I flashed ages ago and has been fine. Just upgraded son to "the same" device from an ageing Tab S2 and I cannot for the life of me get Magisk in without bootlooping after.

I can successfully flash the latest stock fw from Frija, but either patching the boot image, or installing an older version of Magisk via TWRP just lands me in bootloopland.

First boot after flashing patched AP (along with BL,CP,CSC) I get a brief blue screen with "updating system", then it reboots. After that it loops.

Anyone have any ideas? I'm obviously missing something here, and thats after trying what must be every tutorial on the internet...

A10, Latest magisk for patch method, 22.1 for TWRP method.

TIA

EDIT: I do flash DM verity if trying TWRP method
[Magisk] metropical:
Thanks. A little confused reading 1st page with the newer method and apps [obviously].

On the LSposed github page:

LSPosed-v1.8.3-6552-zygisk-release.zip

and

LSPosed-v1.8.3-6552-riru-release.zip.

Which should I use ?

Or should I uninstall Magisk 25.2 and start from scratch with the boot.img?

I'm on OEM ROM other than rooted.
[Magisk] zgfg:
As said Riru is not compatible with Zygisk. Hence you should not use Riru, neither Riru-LSPosed.

Hence with Zygisk, you must obviously use Zygisk-LSPosed

If you want Riru, go back to Magisk v23 or earlier. Or use unificiral Magisk Delta fork (but the support thread was recently closed - generally, would not suggest to somebu who is new with Magisk v24-v25)
[Magisk] metropical:
K. Don't care about Riru, just misread it was a way to [Xposed] LSposed.

As I said, mostly looking to get dark theme to Gmail and perhaps explore other modules.

So, should I uninstall Magisk 25.2 and start from scratch with the boot.img to accomplish that?
[Magisk] metropical:
hmmm, thought I had followed thru with LSposed, but apparently not.

Just installed again from Magisk and it's shows active in Magisk.

Now wait for app to show in drawer.

Onto finding modules.
[Magisk] jons99:
you are waiting for the app to show up? why not just install it from the play store?

https://play.google.com/store/apps/details?id=org.lsposed.manager&hl=en&gl=US

xposed repo (for your convenience)

Module overview | Xposed Module Repository

repo.xposed.info
[Magisk] metropical:
for some reason I thought this might be a Goog "illegal" app and not in Play. Thanks.

But alas, still no dark themed gmail.

Perhaps there are some other check boxes that need to be.
[Magisk] metropical:
nope. apparently only compatible with gmail version s up to 5.22.

Gmail Dark Theme Enabler | Xposed Module Repository

repo.xposed.info
[Magisk] sieger007:
I asked this earlier. How do I use ( if that's poss ) magiskpolicy tool to customize my selinux so i can custom mount my sdcard partition RW. RIght now I can do so using senenforce 0 which I dont like doin.

this is what magiskpolicy tool has to offer

root@m20lte:/data/adb/magisk # magiskpolicy --help
One policy statement should be treated as one parameter;
this means each policy statement should be enclosed in quotes.
Multiple policy statements can be provided in a single command.

Statements has a format of "<rule_name> [args...]".
Arguments labeled with (^) can accept one or more entries. Multiple
entries consist of a space separated list enclosed in braces ({}).
Arguments labeled with (*) are the same as (^), but additionally
support the match-all operator (*).

Example: "allow { s1 s2 } { t1 t2 } class *"
Will be expanded to:

allow s1 t1 class { all-permissions-of-class }
allow s1 t2 class { all-permissions-of-class }
allow s2 t1 class { all-permissions-of-class }
allow s2 t2 class { all-permissions-of-class }

Supported policy statements:

"allow *source_type *target_type *class *perm_set"
"deny *source_type *target_type *class *perm_set"
"auditallow *source_type *target_type *class *perm_set"
"dontaudit *source_type *target_type *class *perm_set"

"allowxperm *source_type *target_type *class operation xperm_set"
"auditallowxperm *source_type *target_type *class operation xperm_set"
"dontauditxperm *source_type *target_type *class operation xperm_set"
- The only supported operation is 'ioctl'
- xperm_set format is either 'low-high', 'value', or '*'.
'*' will be treated as '0x0000-0xFFFF'.
All values should be written in hexadecimal.

"permissive ^type"
"enforce ^type"

"typeattribute ^type ^attribute"

"type type_name ^(attribute)"
- Argument 'attribute' is optional, default to 'domain'

"attribute attribute_name"

"type_transition source_type target_type class default_type (object_name)"
- Argument 'object_name' is optional

"type_change source_type target_type class default_type"
"type_member source_type target_type class default_type"

"genfscon fs_name partial_path fs_context"

I compiled bindfs for the same but ain't useful. I can whatsapp can rename files ( == non root app ) but not download new ones

note in my phone as mentioned earlier my logcat does not pick up avc denials and I think that maybe related to vendor ( samsung m20 ) custom selinux . I dont know how I can turn that on or if avc denial logging is there where else should I be looking other than logcat. With AVC denal logging I hope to nail down on the offending component and rewrite Selinux policy
[Magisk] huskydg:
They still offer Riru support for LSPosed because Shamiko cannot perfectly hide zygisk. I see they discussed in LSPosed that zygisk has no hiding function for modules at all. Example, modules such as Storage Isolation cannot be hidden. Shamiko v0.5.2 is the partial bypass for apps such as Livin according to my report but not for apps use 360 reinforcement. That's also the reason why Magisk Alpha didn't remove MagiskHide yet. (Ofc I don't force you to come back to Riru)
[Magisk] huskydg:
Not all apps detect zygisk
[Magisk] dr4go:
I suppose this should mean Delta, right? 😉
[Magisk] huskydg:
I don't want to promote Delta. To be honest, Magisk Delta has been widespreaded too fast that might cause some problem for me.
[Magisk] huskydg:
Delta is my personal fork and it serves my users' needs. And I don't care how many people will use my fork.
[Magisk] m0han:
Does Magisk Alpha (still) have MagiskHide?
[Magisk] huskydg:
It still has
[Magisk] svendsvin:
No matter what I try my banking app detects root. I try something and it works for a couple of days and it detects root. Really frustrating so I have taken the consequence and bought a new phone that will be my primary phone and it is not going to have root access! Very strange after +12 years with rooted phones.

I will follow this thread closely in the future in the hope of a solution.
[Magisk] dr4go:
I also wasn't aware of this as it is not promoted anymore in the Alpha builds.
[Magisk] pndwal:
Chinese translated:

Info:

Dec 20

"Why restore MagiskHide?

Complying with the exclusion list is tied to Zygisk, which may conflict with Riru, thus preventing Riru from loading. Considering that Riru still has a large number of users, and only a few modules are based on Zygisk, all of these modules have Riru-based versions. Therefore, the ability to hide Magisk needs to be restored for Riru users. For Zygisk users, it is recommended to turn off the compliance exclusion list* and use Shamiko for hiding...."

https://t.me/magiskalpha/397

*Read denylist

Jan 15

"Alpha will remove magiskhide once all popular Riru modules have released zygisk version and magisk stable version has officially released zygisk."

https://t.me/magiskalpha/406

Latest:

June 18

"According to telemetry data, the number of zygisk users has reached 78.3%, and after more than 85%, alpha will remove magiskhide."

https://t.me/magiskalpha/511

👀 PW
[Magisk] huskydg:
@pndwal look at my previous message, you will see vvb2060 said "zygisk has no hiding function" at all and "recommended to use riru" for modules such as storage isolation.

I guess the telemetry already reached over 85% because almost everyone has switched to zygisk
[Magisk] pndwal:
🤔 The question was about MagiskHide, not some 'ZygiskHide'... :

... You said:

Other member said:

I gave official statements about MagiskHide in Alpha... No-one mentioned Zygisk! 😜 PW
[Magisk] huskydg:
@pndwal btw just some piece of information. Shamiko is hard to hide zygisk because of the nature of zygisk. So i think zygisk should be changed to make it easy to hide then
[Magisk] pndwal:
Great! ... How can we do that? PW
[Magisk] metropical:
finally. ! Used CX Explorer on internal storage to remove and set gmail back to factory version then updated to version that works with [LSposed} Xposed module. 2022.05.15.451247947.Release (universal).

Gmail Dark Theme Enabler

[Partially abandoned - READ THE DESCRIPTION] Allow to use the official dark theme in Gmail on Android 9 and earlier.

modules.lsposed.org
[Magisk] xt7xda:
I installed magisk 25.2 on my primary phone.

Enabled zygisk and denylist.

Still few banking apps are detecting root.

Device: OnePlus 9r

Running on Nameless-AOSP_kebab-12.1-20220708-0926-Official

Any suggestions?
[Magisk] Phil21185:
This perhaps *isn't* the place for this after all as I feel like I'm derailing a conversation, but I thought I'd folllow up with what I''ve learned since I posted.

Seems like theres an issue with at least the two latest versions of the T835 firmware (list as per SamMobile).

I've learned that these are revision 5 firmware with security patches from Nov 21 and Mar 22 respectively.

I've also learned that I cannot flash a revision older than this (errors about fuse 5 blown > FW 4, or to that effect)

So, I am now flashing the earliest revision 5 firmware, which I understand dates to March 21. Looks like its taken ok (still doing first boot so will see), and I'll try installing Magisk (boot image) from there.

If revision 5 is not rootable, then I am stuffed as this tablet came to me already updated...

EDIT: Well, 45 minutes of adb pull later and no dice. Earliest R5 bootloops like the others. Entering recovery and factory resetting after flashing Magisk doesn't help either.
[Magisk] Phil21185:
Universal SafetyNet Fix?

Check attestation with an app like YASNAC.

I also remember having to pull my device ID hex value (I cant remember how), and registering the device with google on their certification website, so that my phone would be certified in google play.

More recently, I had to use Magisk Build Prop editor to change the signature of my phone to an older (a11) firmware so that Google Pay would work.

You can probably tell I'm no expert, so hopefully someone clever can come along and convert my garbage into something useful for you!
[Magisk] 73sydney:
Just a heads up that you should be able to revert the MagiskHide Props Config module fingerprint change (uninstall the module) and install this Universal SafetyNet Fix (modded) module to pass SafetyNet and have Google Pay working, seamlessly after doing so. This is currently the preferred way with least side effects per device. What it does, as explained in the post, is spoof an early Android version ONLY to Google Play SafetyNet, and otherwise retains your devices other props. Its a clever solution. Give @Displax a like if it works for you...

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87198517
[Magisk] huskydg:
Turn zygisk memory into anonymous memory same as RiruHide did (don't know if shamiko is doing this) or fully refactor zygisk change the way to inject zygisk (use native bridge instead of LD_PRELOAD)

Since there are not much apps detect for zygisk, we should still be fine with zygisk. I hope banking apps don't block rooted users, just give a warning.
[Magisk] pndwal:
Ah yes, I knew about:

Could it do this as a module?... Or would we need a PR for an integrated fix?

Guess this would be an internal Magisk implementation... and you / other dev would need to make a PR... Is it doable?

Are you not sure this hasn't been happening already?... You seemed sure a number of banks were doing this... PW
[Magisk] sieger007:
swimming in TWRP boot hell ...dunno if anyone can hear my holler. I downgraded from 25 to 24.4 but it was still a performance nightmare and nothing felt like being on 23. So finally decided to downgrade to 23. After whatever std proc I used , I am now STUCK a Samsung Logo ( last step ) . I uninstalled several times , manually del /data/adb but Samsung M20 will cycle twice , get stuck in bootloop @ very last step and come back to TWRP. I say this last step , cos I know from the placement of the logo changing from center to lower right (after resolution change. ). WHY WHAT and HOW please to get out of this hell. Does the issue seem with decrypting my data aka data format needed or something with the boot image ? ? Partof my try - hits was a TWRP backup of boot image being restored. Even after restore the magisk uninstall log said there is magisk in ramdisk - no backup found and restoring from internal storage some like that
[Magisk] ipdev:
Hi all. 🙂

SafetyNet has been depreciated and is being replaced by Play Integrity.

xda Member @1nikolas made an app to check Play Integrity. (y)

[Discussion] Google Pay Magisk Discussion Thread - [xdaThread] - Post # 2,775.​

Update OP Post #4 Apps to include it.

Cheers all. :cowboy:
[Magisk] nourpon:
Hello guys,

Does anybody know why after installing module in magisk an click reboot my device reboot in recovery and i need to reboot in system and it work normally, but if I reboot normally (with classisc system boot) everything is fine and my system is bug free and magisk modules work perfectly.

Thank you if somebody find me the answer ;)
[Magisk] pndwal:
So disable denylist!!!... And read release notes (readme.md)! 😛

And was the previous failing CTS profile match issue due to a module???... Which? PW
[Magisk] Depressed T.Bear:
I found out why S-PushTan and other banking apps refuse to work for me. It's due to XPrivacyLua. All other things have working hiding methods while XPrivacyLua doesn't seem to have something like that.

So I guess I'll have to give up privacy in order to be able to use banking stuff.

Also, while resarching I found a zygisk module to hide the modified init.rc changes made by Magisk. You can check it out here: https://xdaforums.com/t/module-initrchider.4369285/#post-86232575 works as intended :)
[Magisk] zgfg:
You could try if hiding XPrivacyLua by Hide My Apps (another XPosed modules) would help - usually HMA helps.

You need to create a template to hide all XPosed modules and the XPosed mngr, and apply that template (blacklist, all methods) to your banking app.
[Magisk] Robbo.5000:
I posted a solution that i found and that worked for me, a couple of pages back, yesterday.

https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-86338459

Give that a go.
[Magisk] pndwal:
Do you have ramdisk = no, but patch / flashed boot image? (Guessing you may have Xiaomi device?) Did you patch with Recovery mode selected however? Or have it selected now if you click Magisk, Install?... PW
[Magisk] lm089:
Thx a lot, this sure helped run a first install on an old A9 tablet (Sony Xperia tablet w/ LOS 16 as stated in my signature). Needed 2 attempts to get USNF installed (got a "failed to install" on first attempt. Then after a reboot tried again and it worked). It's apparently working nicely now.
[Magisk] nourpon:
Yes, yes,yes and yes ;)
[Magisk] oulouloul:
Thank you but hide my applist lsposed can't hide root too. On magisk 23, only momo hider was working and hiding root. idk should I try this with android 12 and mahisk 24.1
[Magisk] oulouloul:
I'm not sure which module caused
[Magisk] pndwal:
Guessing you've sorted it by now with yes, yes, no, no?... PW
[Magisk] nourpon:
So should I uninstall totally magisk and reinstall it via recovery or there is a trick ?
[Magisk] pndwal:
Ok...

But did you try bank app after TURNING OFF Enforce denylist? (And clearing bank apps data)?????? If not, please read stuff you're told... If so, does Shamiko say 'working' or 'not working'?

I'm assuming you have bank app enabled in denylist.... PW
[Magisk] lm089:
Unfortunately didn't work for me. Tried several variations as are mentioned in the "Santander" thread but to no avail. Used TB to do the freezing BTW, but I don't that should make a difference, or would it?

Once again, no problem really, I just was curious
[Magisk] Robbo.5000:
Although i was initially looking for info on HMA, the solution i found was a lot more simple.

It would seem that, lately, many banking apps are able to detect Magisk Manager even after it's hidden/repackaged. The simple step of freezing the Magisk Manager app seems to work in many of these cases. No need to install LSPosed, no need for HMA.