yashsingh1/xdaforums huggingface dataset:
[Magisk] evtoofly:
Wanted to completely avoid asking for help ,but after reading the guide over and over ,and reading the comments as much as possible, I can't seem to get app list detector to not detect the lsposed modules with hma

For starters this is my current device setup:

-Google pixel 6a stock rom with latest magisk stable 25.2 , 1.8.6 zygisk lsposed, systemless hosts

-I'm running latest USNF 2.4.0 with shamkiko and enforced deny list off

Initially my goal was to pass safetynet with playintegrity and YASNAC. After spending a whole day doing all the methods , I finally came to the idea of just disabling my modules and figuring out which one caused the checks to fail. Turns out the whole time it was lsposed which I should of known from the beginning. Fast forward , I decided to see if I could hide lsposed modules and still pass safetynet. After tinkering with it all day with no results, I wanted to focus on the root problem which was app list detector and ruru still detecting my modules.

So this brings me to where I'm stuck at.

Following the guide to the bone , I made sure that HMA was selected for system framework only, created a "root" template with nothing but my lsposed modules ,HMA, and hidden magisk. I then used the app manager to hide playintegritychecker, applist detector ,and ruru, and applied it to the template created. I didn't need banks on there so I didn't bother for now. I made sure everything saved, closed the app and restarted my device . At first I was guilty of not waiting 5 mins and checking right away if modules were still detected ,but after seeing it not work, I waited 5 minutes and cleared the data of each detector with sdmaid to see if would make a difference. Same thing, all modules were still detected. I will post screenshots below of my HMA setup and app list detector. I even tried leaving out some modules on purpose and adding the detectors without applying it to the template just to see if it would make a difference.

I don't know if this makes a difference or not but in my magisk deny configure list, I have applist detector, and integritychecker enabled, but not ruru.
[Magisk] 73sydney:
Some of this is going to be general advise not necessarily directed at the core issue

Tip #1: discussing Lucky Patcher even tangentially is a no go on XDA - aka i wont help troubleshoot any issue as long as thats enabled. So im going to assume you remove that before following the following advice.

1) Every lsposed module should added to the root template - triple check you have them ALL added to the root template, along with HMA - ive done it myself, forget one and wonder why HMA and modules are flagged

2) on first run it can take ages on latest HMA to correctly hide the apps - to the point where even when ive been patient and waited even longer ive thought it was broken. Please try waiting a good length of time before testing and clear Ruru data again before each attempt

3) General comment: whatever youre trying to hide from other apps with HMA you still need to select first in Magisk Managers Deny List, this includes Ruru and every other detection app

HMA merely tries to aid apps from dectecting the presence of other apps, as some apps look for certain apps to detect root other than at the magisk level. aka it wont stop underlying normal methods of root detection

4) Be aware we have already had one user mention (to him) less than ideal circumstances when using XprivacyLUA under HMA and trying to restrict google services) here - dont know if you have done similar: https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-4-0.4217823/post-88010513

not saying it has any bearing on the HMA module slisting, but it may have side effects for safetynet/integrity check.....

5) you havent said if you have passed integrity check (and that should be a check you do):

Play Integrity API Checker - Apps on Google Play

Get info about your Device Integrity through the Play Intergrity API

play.google.com

if you fail that: put device in airplane mode, clear data for google play services (this will sever any wearables connections like Watches, fyi - so be aware) and google play store, reboot, take device out of airplane mode, wait 5 minutes and do an integrity test again.

6) I would enable just one lsposed module, pick one thats 100% safe and known to have no issues, any of the 3 below would be a fair bet, see if its detected when added to the list, alogn with HMA, and then work from there.

p.s. i use a Pixel 6 Pro.....use many of the same modules..AOSP Mods, Classic Power Menu, XposedSMSCode (my fave)

p.s.s. I often lag behind the latest releases of magisk, HMA etc due to chronic laziness, but i updated all whilst writing this post and have not experienced any issues
[Magisk] zgfg:
I don't understand your "Select apps" screenshot. If that's the blacklist template, then why you ticked there Applist detector - that's detector, not something to be hidden from detectors

Anyway, here you have my screenshots:

Blacklist template - only Magisk app (I use Magisk Delta, hence it has different package name than the official TJW Magisk) plus my LSPosed modules.

Only those apps, nothing else

Manage apps - detectors from whom I hide those apps listed in the Blacklist template

App settings - settings for each detector (and banking app) ticked in Manage apps.

Observe that circled "Using 1 template" - click on that and select your previously created Blacklist template
[Magisk] evtoofly:
I was thinking the same thing , but for some reason, whatever detectors I add to the app manager automatically gets added to the actual blacklist template as well . If I take it off from the template however ,it also takes it off from the app manager so it puts me in a tricky situation
[Magisk] zgfg:
Never saw anything like that

You enter Template manage and App manage through a different buttons

Uninstall HMA, install and configure again
[Magisk] evtoofly:
I won't mention anything about lucky patcher, but regarding the other modules, are you saying that HMA is either all together or nothing ? In short , will it only hide it from the detectors if all the modules are ticked? If so , that may be my issue because I'm trying to do it on an individual basis where I leave some checked and leave the the other modules unchecked. Regarding xprivacy, I only have the default system framework checked ,so no I don't have any Google services checked with it.

As far as safetynet goes , I did pass , but only when lsposed in magisk was turned off ;This is why originally I wanted to see if I could use HMA to hide the modules so I could pass safetynet whether I had Lsposed turned on or not. Should I already be passing prior to using HMA? If so then that may be another problem for me to figure out all over again .

Thank you for all the information though . I will make sure every detector is still marked in magisk ,and work one module at a time with HMA if I need to . I will give you a status update after I do some more testing.
[Magisk] 73sydney:
sorry gents this thread got away from me, i encountered a weird issue when i updated to USNF 2.40 as part of testing for this thread where my phone would no longer charge :)

Which kind of trumped this thread...especially as i was down to 15% and have a busy day ahead...

@zgfg - thanks for perhaps setting the standard for ruling out confusion with the labelled screenshots, because of course under different sections the heading "Select Apps" is used, but can be 2 unrelated sections

@evtoofly

cheers for taking the hint on LP.

HMA:

Perhaps this basic visual guide will help

Think of the Root Template List as containing things you dont want your say banking app to see, because it might be actively looking for them to detect that you have a modified system...so that would include root (magisk), HMA, and EVERY LSposed module.

So whats on the left in this example (root template list) is full of things we want to hide from the right (app manage list), because the things on the right (app manage list) are actively looking for them

Root Template List Contents	App Manage List Contents

(actively looking for items on root template list)
magisk	banking apps/google pay
hma	detector apps
lsposed modules

and yes, as i said ALL Lsposed modules need to be in the root template to be hidden from the detectors, in the app manage list - most of the detectors know how to detect LSposed modules. it s not pick and choose which LSposed modules to include in the root template, its ALL

thanks and understood on the XPrivacyLUA setup
[Magisk] evtoofly:
Yup. That did the trick. Just like @zgfg said , I reinstalled the module and started from scratch. Following your instructions, I made sure every lsposed module was checked off this time , with all detectors on magisk denylist. Passed ruru and applist detector after clearing data. Only thing now is , Im still failing basic and device integrity with playintegrity checker and yasnac. I'm guessing it's due to xprivacy being detected . I'm not really sure but I'll figure out eventually. Nonetheless, Thank you for all the help
[Magisk] m0han:
I am a bit confused. How do I add LSPosed to Root Template list? And, I don't find that in @zgfg's screenshot - reproduced here, along with mine. (I have to add YMusic also; otherwise I get an extra detection in Ruru app.)

My endeavour continues to be to get the detections regarding Xposed Edge and HMA removed from Ruru app. Any help on this would be appreciated.
[Magisk] 73sydney:
Sorry, i had been up about 26 hours when i made that table it should have only had Lsposed modules in it, sometimes things begin to blur together when youre sleep deprived :)

YMusic from memory always sets off detection, i think it comes up under LSPatch....think i tried it once and saw that, i removed it

In other news, i still havent been to sleep, i expect to crash soon
[Magisk] zgfg:
LSPosed cannot be added to HMA Blacklist template since it does not install as an app.

What you see on the home-screen is shortcut, not an icon pointing to the app.

You will not find LSPosed as installed on your phone (Settings/Apps, pm list packages, etc)

I can only tell you my setup:

Two phones, one A11, the other A12, both Xiaomi. (MIUI, not LOS or something)

First phone TJW Canary, the other Delta Canary, both latest versions

Both with Zygisk enabled and latest Zygisk-LSPosed

Latest Ruru, Ruru in DenyList (TJW Magisk) and MagiskHide (Delta)

Latest HMA, hiding all my LSPosed modules from Ruru on both phones

I have only those modules as listed on my screenshot

No XSPosed Edge Pro, neither YMusic (LSPatch? - uninstall them and try without?!)

Also, I have this module on both phones (without that module, Ruru detects me something under Libc and Syscall):

GitHub - stylemessiah/AppDataIsolation: An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+)

An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+) - GitHub - stylemessiah/AppDataIsolation: An attempt to block apps from accessing other apps' priva...

github.com

Of course, I don't have XPrivacy Lua (if you do, uninstall and try without?!)

As said, I have Zygisk enabled on my Delta, hence I have no Riru modules (and therefore I have Zygisk, not Riru LSPosed)

Ruru fully passing on both phones
[Magisk] m0han:
Well I'm on the Riru route. Could that be why I cannot get rid of those two detections? Maybe I'll try Zygisk (again) one of these days.

Like I showed in my earlier post with screenshots 4&5, I can get rid of YMusic LSPatch detection by adding it to the blacklist template. I have AppData Isolation and I don't have XPrivacy Lua.
[Magisk] zgfg:
No experience with Riru, maybe check on Delta TG group
[Magisk] bacevs:
Hey guys, anyone know why my app list is showing empty? Screen recording here:
[Magisk] bacevs:
Nvm, I'm stupid, had to go back and add apps from previous screen. Working now.
[Magisk] 73sydney:
Please note:

I will no longer be participating in this thread, or forum, and therefore there will be no further updates by me to the guide.

Please see a friendly mod like @mrjuniork who is good at updating dormant thread OP's when the need arises and the content may have significantly changed.
[Magisk] pndwal:
Why? 🤔 PW
[Magisk] mrjuniork:
He won't be able to reply for the next couple of days. Not more I can share as of now.

Cheers
[Magisk] pndwal:
Ah...

Interesting traditional Sammy shell vuln/exploit project here: 🤪

https://xdaforums.com/t/system-shel...mobile-devices-no-bl-unlock-required.4543071/

Sorry if OT... 🙃 PW
[Magisk] pndwal:
Re.

73sydney​

Account currently disabled​

and

Very much hope this changes after a few nights of proper sleep mate... Wouldn't be the same here without you. 😦

All best, PW... 💪
[Magisk] mrjuniork:
It's definitely OT, but let's wait and see what the thread owner has to say, once being back with a snatch of sleep 😉
[Magisk] Beefheart:
Followed instructions but no matter what I do I can't get the Santander UK app working, it immediately tells me its closing the app for my own safety.
[Magisk] martyfender:
I am located in the USA. I downloaded both the Santander US app and the Santander UK app. With the US app I can get to the login screen just fine. However with the UK app I get the same result as you. My wild guess is this is because of the EU's stricter requirement, but I am just speculating here.
[Magisk] bombadier:
Im in the uk and just tried the Santander mobile app, at what point does the app close for you? I can get to the login screen but am not a customer so cannot go further, check your config, i added santander to the deny list in magisk and added it to hide my applist and it seems to work as far as login
[Magisk] Beefheart:
This now works now I've blocked it in Magisk, cheers . The instructions in the OP states not to do this unless I misread them.

I have had it working previously but it stops after a few days. Hopefully that isn't the case here.
[Magisk] zgfg:
What do you 'block' now?

If it is that banking app, yes, you always have to put it to the Denylist (or MagiskHide if you use Magisk Delta)

No guide should say the opposite.

If the guide says that you should not Enforce DenyList when using Shamiko, it doesn't mean that the banking app should not be checked in the Denylist (in that case Shamiko will process DenyList and that's again the reason why 'banking' apps must be in DenyList)
[Magisk] martyfender:
I tried this on my second Onn 8 1st gen. with Magisk Delta with both zygisk and magisk hide turned on and the app works on it.
[Magisk] bombadier:
Good to know, i had a problem with the halifax app a while ago and tried delta with hide but it didnt work for me, tried hidemyapplist and had success so have stuck with it
[Magisk] wipeyourbuttocks:
This did not work for the app TNG eWallet. Idk if it's detecting any systems apps from LOS.
[Magisk] martyfender:
I spoke too soon. After a day or so, the Santander UK app detected root. And to top that off, that app would launch every time I launch the Magisk app and maybe when I launched some other (maybe root?) apps. It got so annoying that I uninstalled the Santander UK app. I don't have an account for it here in the USA, only an auto loan account with the here. By the way, the Santander US app never detects root, Yet, but I will eventually uninstall it to I can't access my auto loan through that app.
[Magisk] oliversum:
Google Wallet suddenly detects root and doesn't allow NFC payments anymore. Did someone figure out proper settings for Google Wallet?
[Magisk] zgfg:
HMA won't help for Wallet

Look to the corresponding reports about issues with Wallet in the Google Pay Magisk thread, Universal Safety Net Fix thread, Play Integrity API thread, maybe it was also mentioned in the Magisk General thread
[Magisk] 73sydney:
Please see OP for new home of the HMA Guide

It has moved for several reasons, not least to make it easier to keep up to date

Cheers
[Magisk] m0han:
At least you're NOT 'Account currently disabled'. Welcome back, mate. :D
[Magisk] BYRMN13:
Hi There! Could someone help me with this issue, I just install hide my applist in my new phone but it seems something is wrong this time, cause I cannot see any app in applied apps section in templete setting, I don't have any idea how to fix this issue, please help, thank you in advance.

Edit: NVM, I forgot to select app in deny list. :')
[Magisk] crok.bic:
I second this: I do it with the same method when I see problematic apps && ROMs in my hands and whitelist "method" always works "better" for some reason.
[Magisk] ipdev:
Hi. 🙂

I do not follow HMA that much. 🙃

I use it to hide some apps from others using black list(s).

I thought you could mix the two methods. :unsure:

What happens if you:

- Configure a black list and apply it to the apps that work better with a black list.

- Use white list on the apps that work better with a white list.

Cheers. :cowboy:
[Magisk] TraderJack:
You can certainly do that.

It's just in my experience HMA is mainly used to hide "offensive" apps (those usually used to modify the device) from other apps that don't want them there.

Usually this is banking apps, but could be games or others.

In every case I've come across these "complaining" apps don't have the need to see *anything* else, and therefore you can simply configure the Whitelist option which effectively blocks them from seeing anything else.

For me, this seems to work better and had the side effect of being more secure as it "fails closed" instead of "fails open."

For instance, using the instructions in this guide, if you install another "offensive" app, you would need to make sure to update your template to exclude this new app.

The way I configure you wouldn't need to do this. It seems much less likely that an app would actually need to know of the existence of another and if there happened to be a use case for that you can simply add that individually to the particular apps' whitelist.

The other option is privacy. For instance, maybe an app like Facebook can access data from another app (even though modern Android os should limit this). In this case you would want to restrict Facebook from seeing all other apps. Once again, I feel the Whitelist option is the better choice.

I'm certainly open to being proven wrong by other use cases...I just don't see them.
[Magisk] ipdev:
I am not out to prove anyone wrong. 🙃

That is why I am asking if a mix of using while list and black list mode works.

If it does, then including it in the guide would be a great idea. 👍

I might ask you to help with the PR request about it. ;)​

---

I use a modified version of YouTube and YouTube Music that I do not want PlayStore to update.

So I include both in a black list and apply it to PlayStore.

If I used HMA in white list mode for PlayStore.

I would have to create a white list of every app that I still want to be updated.

Then apply that white list to PlayStore.

So using black list mode for PlayStore is the better option in this case.

If you use the white list option for 'STC Pay' and the black list option for 'Applist Detector' do you get the best of both options or is there a conflict?

Does STC give error when you have it using the white list option and Detector using the black list option?

Does Detector give error when you have it using the black list option and STC using the white list option?​

Cheers. :cowboy:
[Magisk] TraderJack:
A better option is probably to use the Lsposed module UpdateLocker. It will prevent updates to specific apps from Play and is designed specifically for that.

You can use the white and black lists independently for each app, there is no conflict.

While I can't think of a scenario, if you have two apps that need to talk to each other they would both need to be allowed on each's respective lists if you are using HMA for both
[Magisk] zgfg:
Just a short question please. What version of HMA do you use?

I also use UpdateLocker (actually, I did use HMA for detaching but then switched to UpdateLocker - and the reason I switched is related to my question above)
[Magisk] ipdev:
I updated to v3.1.1 last month.

Prior to that I was using v3.1.0-Beta.

Cheers. :cowboy:

Edit.

PS.

I keep LSPosed updated using the zygisk version.

Magisk..

Personal (snapshot) builds. I build right from John's repo.

So basically the same as the current CI builds.
[Magisk] zgfg:
Asked bcs I have the following problem (it started when I updated from v2 to v3):

- App manage, Google Play Store (com.android.vending), Enable hide

- Blacklist mode, using a template or even not

After that I can no more open Google Play Store - splash screen with the triangle icon stays forever

Also in Play Integrity API Checker, Check spins forever (even there is no timeout to stop)

On both my two phones, official Canary and Delta

Disable hide for PlayStore and everything works fine again

Therefore, I had to stop using HMA for detaching YT (and few other apps) from PlayStore and instead I switched to UpdateLocker

For 'normal' hiding I use HMA

---

Edit:

If Vold Data Isolation in HMA Settings is disabled, then PlayStore opens and PI API Checker works

However, then Ruru detects Libc and Syscall (although I also have another module App Data Isolation installed)

To put everything to work (PlayStore, PI API Checker and Ruru passing) I have to:

- enabled Vold Data Isolation in HMA

- not use HMA for detaching apps from PlayStore but to use UpdateLocker

See:

[Bug] Issue With Play Store · Issue #247 · Dr-TSNG/Hide-My-Applist

Steps to reproduce/复现步骤 1-Created a blacklist with Youtube & Plus Messenger. 2-Applied the Blacklist to Google play store Expected behaviour/预期行为 What is expected to happen that the store should wo...

github.com
[Magisk] TraderJack:
Does anyone have any reference for what the "vold data isolation" function is?

I can't find reference of what it is or what the features is supposed to do anywhere.

I believe it has to do with the "Android Volume Daemon" which I assume (?) has to do with mounted disk volumes? But I'm not sure what benefits or drawbacks it is supposed to have for use with HMA.

thanks
[Magisk] zgfg:
Ok, thanks.

I just converted settings for all Manage apps in HMA.

On both my phones, one with Magisk Canary, the other Delta

Previously I had one Blacklist template with Magisk app and all LSPosed modules listed.

And for all Manage apps I used default Blacklist mode, with that template

Now I put Whitelist mode and checked to Exclude System apps - as on the screenshot

And everything works fine / passes as previously

This way it's indeed more simple for the future. When I add another LSPosed module(s), I will not need to extend my Blacklist template
[Magisk] TraderJack:
Cool. FYI everything will probably work even without system apps being excluded...at least they do with everything I need.

Theoretically I think excluding system apps may likely help in some situations but may not be compatible with some apps which need to access certain system functions.

That being said, I probably wouldn't even use that option unless needed for a certain app. That also means one less tap per app to set it up.

Either/or though probably doesn't matter much.
[Magisk] zgfg:
Apps that call Play Integrity (or the old SafetyNet) need to have Exclude enabled

Or, I would have to use Whitelist template with GMS

Otherwise they cannot access Google Play Services (GMS) to call the API

Eg, TB-Checker and SCheck
[Magisk] Tomek0000:
Hi,

1. I configured HMA using official documentation. First time I added to app list Google Play Store and Services (doc shows only store to add , services does not).

My widgets stoped working.

I removed google play services from app list and widget of Weather service started to work, but widgets of FairMail still are black and empty.

When google play store is removed from app list , the widgets of FairMail work correct.

What does it mean ? Does FairMail wrong support own widgets or I configure HMA wrong ?

2. Applist detector sees "found:Xposed hooks" in Abnormal Env. How can I add LSPosed to the black list ? Is it possible ? (There is "suspicious:XPrivacyLua" too in the same list)