yashsingh1/xdaforums huggingface dataset:
[Magisk] zilan:
so what's wrong with my setup? did you enable enforce denylist or not? i disable enforce denylist
[Magisk] xcl1pse:
Just shamiko, PIF and lsposed
[Magisk] pndwal:
Per Alpha TG, some Shamiko builds required Alpha as that had compatibility issues... Presumably these builds addressed peculiarities in NB-Z... No harm not using an mentioned, but I don't know of other proper hiding solutions for Zygisk memory and other root traces... Riru hooking had Riruhide (inbuilt) since moved to native bridge loading (@canyie's initiative)... Magisk 24+ has had no proper hiding inbuilt, but more call for such as Zygisk wasn't even hideable... We have had LSP teams Shamiko (@canyie's baby) to hide what it could since soon after 24.0...

Now we have NB loaded Zygisk with same hideable (anonymous) memory tested and improved in Metagisk and built in Alpha since March by LSP Devs... Recently this was merged in TJW master branch, and I've also been running the CI builds... Now I've moved back to Canary as 26402 (TJW) final has NB-Z!... 🎉👏 (No need for Alpha or CI builds to test this now)... Note, Zygisk is 'beta' again in Canary and may possibly remain a 'beta' component once we get 27.0 Beta or 27.x Stable...

I have late Shamiko v0.7.4 (188) (from Alpha TG discussion thread) working fine with TJW 26402 Canary, but I installed it when on Alpha... v0.7.4 (189) refuses to load (says must install Alpha), but I'd say next release will work with TJW Magisk builds since they now have NB-Z... I'm not sure which publicly released Shamiko builds will load w/ TJW Magisk, but note that they've all been NB-Z compatible for some time.

Shamiko works to hide root from countless banking apps that simply wouldn't run without it and alternatively loaded Zygisk (so couldn't work w/ TJW Magisk until latest Canary), but apart from for root trace hiding it's not essential...

Nb Zygisk-Next (formerly Zygisk for KernelSU) has another alternative good (hideable) loading mechanism; it was using native bridge for some time but recently moved to ptrace with fuse loading... Apparently many are having good success with this hiding for stubborn apps also, especially when used with KernelSU instead of Magisk... Eg the notorious Starling Bank doesn't detect this Zygisk in KernelSU, but it must be run without Shamiko or PIF unless these are adapted (eg this workaround:

cp /data/adb/modules/playintegrityfix/resetprop /data/adb/ksu/bin/resetprop.bin
echo 'resetprop.bin -n $*' > /data/adb/ksu/bin/resetprop
chmod 755 /data/adb/ksu/bin/resetprop ) since Starling also cleverly detects (Magisk) Resetprop utility used in Shamiko, PIF etc...

Obviously Shamiko etc need (much) more work, but that is the best root hiding solution available to date.

Nb. DenyList is NOT for/proper hiding...

👀 PW
[Magisk] rodken:
Not to mention increased resource consumption, instability, corrupted data and in some cases loss of unsaved data.

The worst case that I've seen was a need for a system reinstall.
[Magisk] huskydg:
ChatGPT statements? It does not correctly explain why the author wants to unshare magiskd?

I don't think this is necessary. Many apps and many modules rely on this internal mountpoint to get the original files.

Not correct: "This can prevent accidental wiping of all data on your device."

This means Alpha will not unlock all devices to read-write to support remounting read-write operation

Not correct: "This can prevent apps from being denied permission"

This is correct but not clear

This is incorrect: "This can prevent accidental wiping of all data on your device."

I don't think so ¯\_(ツ)_/¯

This is right

This translation is actually: Allow DenyList to work when Zygisk is disabled (logcat MagiskHide)

This is incorrect: This can help you prevent apps from accessing sensitive data.

This is author decision, but this is not correct: Addon.d is an old API used for adding custom modules and configuration files.

I don't think it can "improve Magisk's performance and security."

Wrong, author want modules and apps like Adaway to modify /data/adb/modules/hosts/system/etc/hosts instead of /system/etc/hosts because Magisk switch to mount read-only to prevent problem related to f2fs

Yes, this is correct

This does not explain clearly: This can help you [prevent] apps [from running as root]>

??

Yes, it is correct, but in safe mode, all of third party apps are disabled

Some statements are incorrect,

Are you using ChatGPT and asking it to explain these words? 😄
[Magisk] rodken:
No one in their right mind would use ChatGPT considering how inaccurate most results are. In case you need to know, my findings were translated using a web-based translator [pick your choice] from the language posted in the app center.

Considering that the language utilized in the creation of the changelog is not my native language, if the translation is incorrect, feel free to make corrective propositions instead of implying or suggesting something that is not true.

Incidentally, as of this writing there is another update:

Version f7e47161-alpha (26402)

Dec 12, 2023 at 11:01

12.47 MB
[Magisk] xcl1pse:
Hmm but if refers to inbuilt ota, theres no description of the changes, the changelog is just a list about what change in magisk alpha

btw this is new changelog in latest magisk alpha

Magisk Alpha

Major behavior change: magiskd is now in the independent mount namespace, which is also the global mount namespace for su. Most su use cases are unaffected; if you need the init mount namespace, change to su -t 1.

Major behavioral change: magiskd internal mount points are hidden from the public and uninstalled when no longer in use.

Magisk (f7e47161-alpha)

[App] Delete backup file after boot image restore.

[General] Do not automatically unlock device blocks

[App] Do not actively request permissions

[General] Keep ROOTOVL temp files.

[Zygisk] Unmount mount without skipping com.android.systemui

[App] Check and download updates via appcenter

[App] Add telemetry https://t.me/s/magiskalpha/473

[General] Make denylist work when zygisk is not enabled

[General] Remove addon.d support

[General] Hide and clean up magiskd internal mount points

[General] Remove /system/etc/hosts writable exception, please modify /data/adb/modules/hosts/system/etc/hosts

[MagiskSU] Support for removing privileges.

[General] Support user-restricted root privileges [applications using older libsu versions will be incorrectly recognized as rootless].

[General] Automatically copy files after initial installation

[App] Add alternate DoH server

[General] Safe mode no longer mounts su to /system/bin/su, use /debug_ramdisk/su for adb shell.

[MagiskBoot] cpio backup with compressed files.

[General] Atomic mounting of module files

[Zygisk] Support Android14 QPR2

Upstream Update Log

Magisk (1dcf3255) (26402)

[Zygisk] Introduced new code injection mechanism

Different from v26.4

[Zygisk] Introduced a new code injection mechanism.
[Magisk] huskydg:
It's okay to use translator but please don't draw more text (which you are not sure it's correct or not)
[Magisk] rodken:
Version ca25935d-alpha (26403)

Dec 14, 2023 at 07:30

12.47 MB

Breaking behavior change: magiskd is now in a separate mount namespace, which is also su's global mount namespace. Most su use cases will not be affected. If you need init to mount the namespace, change su -t 1.

Major behavior change: magiskd internal mount points are hidden from the outside and uninstalled when no longer in use.

Magisk (ca25935d-alpha)

[App] Delete backup files after restoring boot image

[General] Do not automatically unlock device blocks

[App] does not actively request permissions

[General] Keep ROOTOVL temporary files

[Zygisk] Uninstall and mount without skipping com.android.systemui

[App] Check and download updates via appcenter

[App] Add telemetry https://t.me/s/magiskalpha/473

[General] Make blocklist work when zygisk is not enabled

[General] Remove addon.d support

[General] Hide and clean magiskd internal mount points

[General] Cancel the writable exception of /system/etc/hosts, please modify /data/adb/modules/hosts/system/etc/hosts

[MagiskSU] Support removal capabilities

[General] Support users to limit Root capabilities [Applications using older versions of libsu will be mistakenly identified as non-root]

[General] Automatically copy files after initial installation

[App] Add backup DoH server

[General] Safe mode no longer mounts su to /system/bin/su. Please use /debug_ramdisk/su for adb shell.

[MagiskBoot] Compress files during cpio backup

Upstream update log

Magisk (d7750b72) (26403)

[Zygisk] Introduce new code injection mechanism

[Zygisk] Support new signature introduced in U QPR2

Diffs to v26.4

[Zygisk] Introduce new code injection mechanism

[Zygisk] Support new signature introduced in U QPR2
[Magisk] rodken:
Version ca25935d-2-alpha (26403)

Dec 15, 2023 at 00:39

12.48 MB

Breaking behavior change: magiskd is now in a separate mount namespace, which is also su's global mount namespace. Most su use cases will not be affected. If you need init to mount the namespace, change su -t 1.

Major behavior change: magiskd internal mount points are hidden from the outside and uninstalled when no longer in use.

Magisk (ca25935d-2-alpha)

[App] Delete backup files after restoring boot image

[General] Do not automatically unlock device blocks

[App] does not actively request permissions

[General] Keep ROOTOVL temporary files

[Zygisk] Uninstall and mount without skipping com.android.systemui

[App] Check and download updates via appcenter

[App] Add telemetry https://t.me/s/magiskalpha/473

[General] Make blocklist work when zygisk is not enabled

[General] Remove addon.d support

[General] Hide and clean magiskd internal mount points

[General] Cancel the writable exception of /system/etc/hosts, please modify /data/adb/modules/hosts/system/etc/hosts

[MagiskSU] Support removal capabilities

[General] Support users to limit Root capabilities [Applications using older versions of libsu will be mistakenly identified as non-root]

[General] Automatically copy files after initial installation

[App] Add backup DoH server

[General] Safe mode no longer mounts su to /system/bin/su. Please use /debug_ramdisk/su for adb shell.

[MagiskBoot] Compress files during cpio backup

Upstream update log

Magisk (d7750b72) (26403)

[Zygisk] Introduce new code injection mechanism

[Zygisk] Support new signature introduced in U QPR2

Diffs to v26.4

[Zygisk] Introduce new code injection mechanism

[Zygisk] Support new signature introduced in U QPR2
[Magisk] عبدالرحمان:
هل توجد طريقة لإخفاء الملفين ل zygisk لأن لدي تطبيق يكشف zygisk بالرغم من انني قمت بتتبيث hide & shamiko

لقد قمت بتغيير صلاحيات الملفين عن طريق recovery لكن يظهر magisk غير مثبت

Is it possible to hide the reading of the two files because the application detects it? I tried to install shamiko & hide, but the application detects zygisk

I changed the read permissions but it says "Magisk is not installed"
[Magisk] xcl1pse:
Dont use zygisk
[Magisk] Nekromantik:
you need it for PIF so if you want g pay you have no choice
[Magisk] xcl1pse:
He didnt elaborate more his problem like what app and his setup so I recommend him dont use zygisk
[Magisk] عبدالرحمان:
But I want use zygisk to fix play integrity by chitroma
[Magisk] rodken:
Version 6cda6c2f-alph (26403)

Dec 18, 2023 at 12:50

12.49 MB

Breaking behavior change: magiskd is now in a separate mount namespace, which is also su's global mount namespace. Most su use cases will not be affected. If you need init to mount the namespace, change su -t 1.

Major behavior change: magiskd internal mount points are hidden from the outside and uninstalled when no longer in use.

Magisk (6cda6c2f-alpha)

[App] Delete backup files after restoring boot image

[General] Do not automatically unlock device blocks

[App] does not actively request permissions

[General] Keep ROOTOVL temporary files

[Zygisk] Uninstall and mount without skipping com.android.systemui

[App] Check and download updates via appcenter

[App] Add telemetry https://t.me/s/magiskalpha/473

[General] Make blocklist work when zygisk is not enabled

[General] Remove addon.d support

[General] Hide and clean magiskd internal mount points

[General] Cancel the writable exception of /system/etc/hosts, please modify /data/adb/modules/hosts/system/etc/hosts

[MagiskSU] Support removal capabilities

[General] Support users to limit Root capabilities [Applications using older versions of libsu will be mistakenly identified as non-root]

[General] Automatically copy files after initial installation

[App] Add backup DoH server

[General] Safe mode no longer mounts su to /system/bin/su. Please use /debug_ramdisk/su for adb shell.

Upstream update log

Magisk (d7750b72) (26403)

[Zygisk] Introduce new code injection mechanism

[Zygisk] Support new signature introduced in U QPR2

Diffs to v26.4

[Zygisk] Introduce new code injection mechanism

[Zygisk] Support new signature introduced in U QPR2
[Magisk] rodken:
Version 1057cb3e-alpha 26403.apk

Dec 24, 2023 at 14:36

12.47 MB
[Magisk] Homeboy76:
Magisk Canary Update

app-release (65207f96) (26404)

Magisk (65207f96) (26404)

[SEPolicy] Update libsepol to properly set some policy config bits

[MagiskBoot] Support compressing init so Magisk is installable on devices with small boot partitions

[Reset Prop] Add new wait for property feature

resetprop -w

Diffs to v26.4

[Zygisk] Introduce new code injection mechanism

[Zygisk] Support new signature introduced in U QPR2

[SEPolicy] Update libsepol to properly set some policy config bits

[MagiskBoot] Support compressing init so Magisk is installable on

devices with small boot partitions

Download

Tap app-release.apk

Tap the three dot menu across from

Code

Blame

Tap Download
[Magisk] HippoMan:
I clicked on the "app-release ..." link above, and I got a "file finder" page with the following clickable items:

app-debug.apk

app-release.apk

notes.md

sub-debug.apk

stub-release.apk

But when I click on app-release.apk or app-debug.apk, I just get a mostly empty page with the following message ...

(Sorry about that, but we can’t show files that are this big right now.)

What am I doing wrong?
[Magisk] Homeboy76:
Tap

CLICK TO SHOW CONTENT

post #486

Read Download
[Magisk] HippoMan:
Oh, I misunderstood the "three dot menu" thing. Thank you, that worked.
[Magisk] HippoMan:
Oh ... one more thing I'm confused about:

Is this considered to be a Magisk Alpha release? I thought so, because it's being announced here in the Magisk Alpha thread.

However, when installing the app-release.apk mentioned here, it installs a Magisk Manager app called "Magisk", not "Alpha", and its package name is com.topjohnwu.magisk.

So, am I correct in assuming that this above-announced release is actually Standard Magisk and not Magisk Alpha?
[Magisk] Homeboy76:
No, it is Magisk Canary release 26404.

Why post it on a Magisk Alpha thread?

I did it to alert Magisk alpha users a new Magisk alpha 26404 will be released soon. :-)
[Magisk] HippoMan:
Oh, I see. Thank you for explaining.
[Magisk] dr.ketan:
There are multiple report of bootloop after updating to Magisk Alpha 26404 on Smsung S23 Ultra
[Magisk] rodken:
I can only suggest utilizing this method to ensure smooth sailings.
[Magisk] rodken:
Version a0b8aa4d-alpha (26404)

Jan 02, 2024 at 13:40

12.47 MB

alpha update log

Breaking behavior change: magiskd is now in a separate mount namespace, which is also su's global mount namespace. Most su use cases will not be affected. If you need init to mount the namespace, change su -t 1.

Major behavior change: magiskd's internal mount points are hidden from the outside world and uninstalled when no longer in use.

Magisk (a0b8aa4d-alpha)

[App] Delete backup files after restoring boot image

[General] Do not automatically unlock device blocks

[App] does not actively request permissions

[General] Keep ROOTOVL temporary files

[Zygisk] Uninstall and mount without skipping com.android.systemui

[App] Check and download updates via appcenter

[App] Add telemetry https://t.me/s/magiskalpha/473

[General] Make blocklist work when zygisk is not enabled

[General] Remove addon.d support

[General] Hide and clean magiskd internal mount points

[General] Cancel the writable exception of /system/etc/hosts, please modify /data/adb/modules/hosts/system/etc/hosts

[MagiskSU] Support removal capabilities

[General] Support users to limit Root capabilities [Applications using older versions of libsu will be mistakenly identified as non-root]

[General] Automatically copy files after initial installation

[App] Add backup DoH server

[General] Safe mode no longer mounts su to /system/bin/su. Please use /debug_ramdisk/su for adb shell.

[MagiskInit] Avoid patching init files for 2SI devices

[MagiskInit] Check init.rc full path

Upstream update log

Magisk (65207f96) (26404)​

[SEPolicy] Update libsepol to properly set some policy config bits

[MagiskBoot] Support compressing init so Magisk is installable on devices with small boot partitions

[ResetProp] Add new wait for property feature resetprop -w

Diffs to v26.4​

[Zygisk] Introduce new code injection mechanism

[Zygisk] Support new signature introduced in U QPR2

[SEPolicy] Update libsepol to properly set some policy config bits

[MagiskBoot] Support compressing init so Magisk is installable on devices with small boot partitions
[Magisk] zgfg:
Be aware that with the latest Kitsune you can no more properly use eg BusyBox NDK or similarly any other module that wants to install symlinks to /system/bin or /system/xbin

In the best case you will have busybox binary in the path but not the applets

Instead of <applet> you will have to call busybox <applet>

Be aware that this is 'broken' ('feature' - whatever you want to call it) specifically in Kitsune, there is no problem with the latest Magisk Canary

And that 'feature' does not 'help' to hide the root - if something looks for busybox binary (and finds it - although it shouldn't if DenyList is properly used in the official Magisk or Unmount Modules in Kitsune), it will still find it the same way, the above problem affects only the applets

---

Anyway, since the last Kitsune, I can no more connect to WiFi Internet on my Xiaomi A11. I used this phone for 5 years, and that same A11 (MIUI 12 5) ROM for the last two years rooted with various official Magisk Canary and Magisk Delta versions - with no problem.

Now, with the latest Kitsune it can no more use DNS provided by the WiFi DHCP and hence Internet is useless (that old phone is without SIM to test the Mobile Internet)

To make it worse, after installing Kitsune app, patching and flashing boot.img, and after reboot, I was asked to "Finish the installation and reboot" (as usually for Delta). Now after that, DNS and hence Internet is broken and I cannot even open the Kitsune app anymore, etc...

Btw, it was the clean installation after Factory reset, hence there were no modules, Adaway or whatever. I didn't set.Private DNS or anything (as it complains me now)

It was Factory reset, one time booting to complete the usual new Android installation (language, Google account, etc) - at that time Internet perfectly worked, then patching and flashing Kitsune... Now, no Internet anymore

Time to move back to the official Magisk😬
[Magisk] xcl1pse:
Its not broken, its feature to prevent unintended use 😂. In kitsune, injecting binaries now move to /apex
[Magisk] xcl1pse:
The latest Alpha retracted from app center because of the problem. So vvb release that version again with fix and enable log output by default. Now in installed magisk it will show (D). Well seems that latest release in app center is alive without log output enable but still with fix tho
[Magisk] zgfg:
The point of installing BB is not in installing the busybox binary but the 360 or so applets

Just for the single binary file busybox you don't need the module, you can call BB (with su -c)

/data/adb/magisk/busybox

And then every <applet> with:

/data/adb/magisk/busybox <applet>

But that's too much of unneeded typing. And some scripts (not like customize.sh, post-fs-data.sh, service.sh or uninstall.sh scripts in the modules that execute from a different environment seeing directly the built-in busybox and its applets) call the applets directly:

<applet>

and not by:

busybox <applet>

Hence they will fail to execute

---

About the apex, you can try the following

Install the BB NDK module:

https://github.com/Magisk-Modules-Repo/busybox-ndk

Download link:

https://xdaforums.com/attachments/update-busybox-installer-v1-36

Upon rebooting, go to:

/data/adb/modules/busybox-ndk/system/

And rename bin subfolder to apex

Then reboot again and compare your:

/data/adb/modules/busybox-ndk/system/apex

against

/apex

or

/system/apex

And check did Kitsune mount all 360+ applets (applets are not binaries but symlinks ln -s to the busybox binary) from the data to apex, namely:

[
[[
acpid
adjtimex
ar
arch
arp
arping
ascii
ash
awk
base32
base64
basename
...
watch
watchdog
wc
wget
which
whoami
whois
xargs
xxd
xz
xzcat
yes
zcat
zcip
[Magisk] WhoIsJohnGalt1979:
@zgfg Hope you are doing well. Am using the latest Zygisk Next with the latest Magisk Alpha (native Zygisk disabled). Since the recent developments, I have a zygisk module zygisk-detach which previously used to show a CLI interface when run from termux using "detach". Now the same gives an inaccessible error message. However in termux if i use "/data/adb/modules/zygisk-detach/system/bin/detach, it works fine. I did a clear wipe flash just 2 hours back, and was in the process of setting up my phone when I encountered this, not sure if the recent builds break something or is in line with your previous posts?
[Magisk] zgfg:
Sorry, IDK, I don't use Alpha, neither Zygisk Next

Still, check in /data/adb/modules/<zygisk-next-module>

Is there a folder system with a subfolder bin or xbin

IMO, if there Zygisk Next had a detach binary/applet, it might have been there and Magisk should have mount it to /system/(x)bin

If nothing else, you could call it with the full path.

I also don't use Termux (I use NetHunter Terminal althought without Kali), but check if the PATH is correctly configured (Termux sometimes requires manual configuration) to include /system/(x)bin

PS:

Thanks, I'm good but tired of XDA and so, hence minimizing the time spending to read and specially to post

Also, I had troubles with my both phones. I ended up by clean reinstalling the ROMs on both and I'm still installing amd setting my apps (for some I had to call eg the bank to authorize, etc)

In fact, I then also had a problem with a password for my Xiaomi account. It was saved on the phones but since I reset both phones I was not able to login on the PC to change the forgotten password. Without that password I was not able (for three days, until I recovered the forgotten password the other way) to even unlock my phones to be able to open the newly installed ROMs (Xiaomi protection in case of lost or stolen phones - a thief cannot start using the reset phone as long as he cannot authorize himself with the Xiaomi account that was previously used on the phone)

To make things worse I had a prepaid SIM card that I overlooked tp extend (I never used for outgoing calls or messages and they sent me the final SMS warning that the number will be irreversibly disabled while I was waiting to recover the Xiaomi password hence I couldn't read and react - but still, it was purely my risk and fault by counting on the prepaid SIM card that I last time deposited half a year ago). But I had 2 Factor Authorization for eg GitHub set to that number, hence I'm now in the process of recovering my GitHub account.

It's also a pain in the ass, I cannot login without the code that GitHub sends me to that inactive phone number, and I don't have a GitHub app (since both phones were factory reset) to authenticate myself that alternative way

All that is currently in my primary focus hence I don't even read XDA every days and there are threads and PM groups that I didn't follow since XMas, and now I don't dare to open, knowing that I would have to read tens of pages to get back to track

But frankly, it makes the life much easier😬