Any ideas on the ETA of the next OTA? - Verizon Galaxy Note 3 Q&A, Help & Troubleshooting

I had thought it was supposed to be in January and I am still not even seeing rumors for it, has anyone heard anything?

If you are a rooter, Mandatory mode for SELinux (Android 4.4) is only likely to make your life more difficult.
So I would say - be careful what you wish for.

bftb0 said:
If you are a rooter, Mandatory mode for SELinux (Android 4.4) is only likely to make your life more difficult.
So I would say - be careful what you wish for.
Click to expand...
Click to collapse
Is it already confirmed in the release? Or just a rumor? Also would that block root? or just recovery and roms?

Morkai Almandragon said:
Is it already confirmed in the release? Or just a rumor? Also would that block root? or just recovery and roms?
Click to expand...
Click to collapse
It isn't a rumor - SELinux has been present in Android since 4.2, but operating in "permissive" mode (which basically blocks no violations, but logs the violations which occur). This was done to give an opportunity to app/framework developers to modify their apps so that they will not fault once SELinux changes over to enforcing in KitKat (4.4). This has been in the Google road map for a long time.
Of course, it can be turned back to permissive mode in a full custom ROM, so my comment applies to stock or near-stock situations. In particular, the initial rooting operations may get more technically difficult to acheive.
(With SELinux enforcing mode, a root user identity obtained by an exploit can have very limited capabilities, depending on the process context of the attack vector)
For instance if you were to accept an OTA on lightly-rooted stock, and then lose root during an OTA upgrade, it might be quite difficult to re-attain root.
Recovery and ROMs are already quite limited (for retail VZW N3 devices) because of the trusted boot enforcement.

Related

[Q] Just bought an S4 and did the 4.3 OTA and have Knox, should I return the phone?

Hi everyone, I have about 7 days left on my "14 day return policy" from the Sprint store. I love XDA and it's been a HUGE help to me in the last few years. I like the phone, it's pretty snappy, and the camera is great. But I can't use a phone without root (who can??) and eventually Samsung will stop pushing updates to this phone so I'm going to need to flash custom ROMs (cyanogenmod did wonders on my last phone, the Galaxy S1). I also know that I can't mount SMB or CFS shares without flashing a kernel that supports it and I'm not sure if the S4's official firmware supports the ability to do so (which I believe requires root anyway, so I guess I answered my own question.
I have a couple of questions about the S4 that I'm hoping someone who has experience can tell me about this.
1) Can I root using VRoot and NOT trip the Knox warranty bit?
2) After rooting, can I install a recovery (I've read that Philz CWM recovery works but can't find definitive answers on this).
3) Should I even care about the Knox software?
I don't need to use the phone in an enterprise environment, but I also don't want the phone's bootloader locked to Samsung firmwares if it means I won't be able to install custom FW's or kernels.
Should I return the phone? I'll pay the $35 restocking fee just to save myself from having to deal with Samsung's (and this my opinion) bonehead move of abandoning its developer userbase.
Any and all responses would be appreciated. Thanks for reading and helping!
epi4gtn said:
Hi everyone, I have about 7 days left on my "14 day return policy" from the Sprint store. I love XDA and it's been a HUGE help to me in the last few years. I like the phone, it's pretty snappy, and the camera is great. But I can't use a phone without root (who can??) and eventually Samsung will stop pushing updates to this phone so I'm going to need to flash custom ROMs (cyanogenmod did wonders on my last phone, the Galaxy S1). I also know that I can't mount SMB or CFS shares without flashing a kernel that supports it and I'm not sure if the S4's official firmware supports the ability to do so (which I believe requires root anyway, so I guess I answered my own question.
I have a couple of questions about the S4 that I'm hoping someone who has experience can tell me about this.
1) Can I root using VRoot and NOT trip the Knox warranty bit?
2) After rooting, can I install a recovery (I've read that Philz CWM recovery works but can't find definitive answers on this).
3) Should I even care about the Knox software?
I don't need to use the phone in an enterprise environment, but I also don't want the phone's bootloader locked to Samsung firmwares if it means I won't be able to install custom FW's or kernels.
Should I return the phone? I'll pay the $35 restocking fee just to save myself from having to deal with Samsung's (and this my opinion) bonehead move of abandoning its developer userbase.
Any and all responses would be appreciated. Thanks for reading and helping!
Click to expand...
Click to collapse
I am not worried about the Knox bit. Mine is tripped and it's not preventing anything, AFAIK. I can still install Sammy firmwares, ROM's that are at the correct version/level, mods, apps, etc. It seems it's really only a flag for enterprise users. I agree it kind of sucks, and I'm not a fan of it, but it doesn't seem to be causing any real harm at this point warranty or service wise. Some say it may prevent Samsung from honoring the warranty, but I'm not sure that's true, based on reading the forums.
As far as Samsung stopping pushing firmwares to this phone, that should be a long way off since this is their flagship smartphone at this point. It's a great phone and I've been very happy with mine, which I got the weekend they were released. Rooted, stock rom, hotspot mod. So much better phone than my old HTC Androids!
jejb said:
I am not worried about the Knox bit. Mine is tripped and it's not preventing anything, AFAIK. I can still install Sammy firmwares, ROM's that are at the correct version/level, mods, apps, etc. It seems it's really only a flag for enterprise users. I agree it kind of sucks, and I'm not a fan of it, but it doesn't seem to be causing any real harm at this point warranty or service wise. Some say it may prevent Samsung from honoring the warranty, but I'm not sure that's true, based on reading the forums.
As far as Samsung stopping pushing firmwares to this phone, that should be a long way off since this is their flagship smartphone at this point. It's a great phone and I've been very happy with mine, which I got the weekend they were released. Rooted, stock rom, hotspot mod. So much better phone than my old HTC Androids!
Click to expand...
Click to collapse
This is just a thought... but... check your phone, when I got mine not too long back it still came with 4.2 on it. If yours still has 4.2 you wouldn't have to worry about knox as long as you didn't take the OTA. You could root it and rom it all you wanted.
Yes you should return the phone. That way you **** all the people who return their phones for legitimate warranty/insurance reasons with higher costs.
Sent from my SPH-L720 using Tapatalk
frostedunit said:
Yes you should return the phone. That way you **** all the people who return their phones for legitimate warranty/insurance reasons with higher costs.
Sent from my SPH-L720 using Tapatalk
Click to expand...
Click to collapse
I haven't done any type of rooting or modification to the phone yet. That's the reason I'm asking, I haven't tripped the counter. I'm just aggravated by not having root and being able to remove this crapware. I wouldn't be ****ing anyone. Please don't be a ****.
jejb said:
I am not worried about the Knox bit. Mine is tripped and it's not preventing anything, AFAIK. I can still install Sammy firmwares, ROM's that are at the correct version/level, mods, apps, etc. It seems it's really only a flag for enterprise users. I agree it kind of sucks, and I'm not a fan of it, but it doesn't seem to be causing any real harm at this point warranty or service wise. Some say it may prevent Samsung from honoring the warranty, but I'm not sure that's true, based on reading the forums.
As far as Samsung stopping pushing firmwares to this phone, that should be a long way off since this is their flagship smartphone at this point. It's a great phone and I've been very happy with mine, which I got the weekend they were released. Rooted, stock rom, hotspot mod. So much better phone than my old HTC Androids!
Click to expand...
Click to collapse
This is great news, can you point me to the tool you used to root the phone? I've read the Chinese VRoot method doesn't trip the counter, but installs "Superuser" which can subsequently be removed and replaced with SuperSU. I think using SuperSU and something like DroidWall to monitor the device to make sure nothing fishy is going on will help us determine whether or not VRoot is really malware (I've read comments saying that it's some kind of spyware but I'm not sure of the technical prowess of those commenters).
What recovery are you using to flash custom ROMs?
And as asked in a previous post-- Did you root before taking the OTA? Or did you take the OTA and do you see the Knox Warranty Bit marked as 0x1 in the stock recovery?
Thanks for the replies, appreciate all the info guys!
epi4gtn said:
I haven't done any type of rooting or modification to the phone yet. That's the reason I'm asking, I haven't tripped the counter. I'm just aggravated by not having root and being able to remove this crapware. I wouldn't be ****ing anyone. Please don't be a ****.
This is great news, can you point me to the tool you used to root the phone? I've read the Chinese VRoot method doesn't trip the counter, but installs "Superuser" which can subsequently be removed and replaced with SuperSU. I think using SuperSU and something like DroidWall to monitor the device to make sure nothing fishy is going on will help us determine whether or not VRoot is really malware (I've read comments saying that it's some kind of spyware but I'm not sure of the technical prowess of those commenters).
What recovery are you using to flash custom ROMs?
And as asked in a previous post-- Did you root before taking the OTA? Or did you take the OTA and do you see the Knox Warranty Bit marked as 0x1 in the stock recovery?
Thanks for the replies, appreciate all the info guys![/QUOTE
I used an app from thePlayStore called Triangle Away to reset the counter. You have to be rooted, but it works perfectly. Just an FYI.
Click to expand...
Click to collapse
epi4gtn said:
I haven't done any type of rooting or modification to the phone yet. That's the reason I'm asking, I haven't tripped the counter. I'm just aggravated by not having root and being able to remove this crapware. I wouldn't be ****ing anyone. Please don't be a ****.
This is great news, can you point me to the tool you used to root the phone? I've read the Chinese VRoot method doesn't trip the counter, but installs "Superuser" which can subsequently be removed and replaced with SuperSU. I think using SuperSU and something like DroidWall to monitor the device to make sure nothing fishy is going on will help us determine whether or not VRoot is really malware (I've read comments saying that it's some kind of spyware but I'm not sure of the technical prowess of those commenters).
What recovery are you using to flash custom ROMs?
And as asked in a previous post-- Did you root before taking the OTA? Or did you take the OTA and do you see the Knox Warranty Bit marked as 0x1 in the stock recovery?
Thanks for the replies, appreciate all the info guys!
Click to expand...
Click to collapse
Dont use vroot. Until some dev can pin point what the chinese root method actually does. And if your on 4.2.2 your ok but once ota to 4.3 then you have knox bootloader meaning you cant downgrade firmwares. It wont stop you from changing kernels and roms. Knox flag just voids your warranty with samsung but if you have insurance with sprint they can care less about it tripped. I updated to 4.3 and tripped the knox amd I havent seen no problems really. Btw please make research this has been talked about lately too much.
SoFaKiNgStOkeD said:
epi4gtn said:
I haven't done any type of rooting or modification to the phone yet. That's the reason I'm asking, I haven't tripped the counter. I'm just aggravated by not having root and being able to remove this crapware. I wouldn't be ****ing anyone. Please don't be a ****.
This is great news, can you point me to the tool you used to root the phone? I've read the Chinese VRoot method doesn't trip the counter, but installs "Superuser" which can subsequently be removed and replaced with SuperSU. I think using SuperSU and something like DroidWall to monitor the device to make sure nothing fishy is going on will help us determine whether or not VRoot is really malware (I've read comments saying that it's some kind of spyware but I'm not sure of the technical prowess of those commenters).
What recovery are you using to flash custom ROMs?
And as asked in a previous post-- Did you root before taking the OTA? Or did you take the OTA and do you see the Knox Warranty Bit marked as 0x1 in the stock recovery?
Thanks for the replies, appreciate all the info guys![/QUOTE
I used an app from thePlayStore called Triangle Away to reset the counter. You have to be rooted, but it works perfectly. Just an FYI.
Click to expand...
Click to collapse
That only works if your on 4.2. It wont reset the knox bootloader counter.
Sent from my SPH-L720 using xda app-developers app
Click to expand...
Click to collapse
epi4gtn said:
This is great news, can you point me to the tool you used to root the phone? I've read the Chinese VRoot method doesn't trip the counter, but installs "Superuser" which can subsequently be removed and replaced with SuperSU. I think using SuperSU and something like DroidWall to monitor the device to make sure nothing fishy is going on will help us determine whether or not VRoot is really malware (I've read comments saying that it's some kind of spyware but I'm not sure of the technical prowess of those commenters).
What recovery are you using to flash custom ROMs?
And as asked in a previous post-- Did you root before taking the OTA? Or did you take the OTA and do you see the Knox Warranty Bit marked as 0x1 in the stock recovery?
Thanks for the replies, appreciate all the info guys!
Click to expand...
Click to collapse
Yes, my Knox bit it tripped/set. It is 0x1 on the download screen. Can't view it in recovery. I just used CF Auto Root after going to 4.3. Should be easy to search and find that thread. I'm on the stock rom with tweaks.
Using TWRP recovery, but I've tried several, including Philz and OUDHS. It seems Philz is the flavor of the month, so you might want to go with that just to be safe.
I did not root before taking the OTA. I don't think I'd try it that way. I was rooted, but went back to stock to take the update. If you get back to stock, reset the custom bits on your download screen (triangle away and RTN's seem to do that, but might have to do more than one), recover your apps/data and then take the OTA, it should be the most sure fire method. Then root, custom recovery, nandroid backup and play from there.
jejb said:
Yes, my Knox bit it tripped/set. It is 0x1 on the download screen. Can't view it in recovery. I just used CF Auto Root after going to 4.3. Should be easy to search and find that thread. I'm on the stock rom with tweaks.
Using TWRP recovery, but I've tried several, including Philz and OUDHS. It seems Philz is the flavor of the month, so you might want to go with that just to be safe.
I did not root before taking the OTA. I don't think I'd try it that way. I was rooted, but went back to stock to take the update. If you get back to stock, reset the custom bits on your download screen (triangle away and RTN's seem to do that, but might have to do more than one), recover your apps/data and then take the OTA, it should be the most sure fire method. Then root, custom recovery, nandroid backup and play from there.
Click to expand...
Click to collapse
Thank you, I plan to just use CF-Auto-Root to root the phone. I'm starting to care less about the Knox bit getting tripped.
I came across this post by rawintellect that seems to have everything I'd need out of the phone, rooted/deodexed MK2 with all the bloat removed, BUT it says in the description that the Knox Bootloader is removed *EDIT: After thinking about the statement some more, I think he means the Knox bootloader is NOT included in the rom, but this raises another question, can I install it on a phone WITH the knox bootloader?), so I'm afraid of attempting to flash it because as I understand it, it's impossible to replace the knox bootloader.
Here's the post: http://forum.xda-developers.com/showpost.php?p=48516106
This individual seems to have gotten everything working: http://forum.xda-developers.com/showpost.php?p=48516106&postcount=88
Do you know if anyone is able to flash Philz through Odin successfully on the MJA/knox bootloader?
I took mine back after I took the OTA. I was honest about why I was returning it, that the firmware introduces restrictions and annoying features (I cited the multiple WiFi security warnings in particular) I was not willing to accept, and the independent store I was dealing with gave me an exchange to a new phone with 4.2. I first asked if they could downgrade the phone to 4.2, including the bootloader, they researched that option, finding it impossible.
If they had not given me the exchange, I would have picked a different color and done it that way.
Try this Guide
http://forum.xda-developers.com/showthread.php?t=2572000
MrTasselhof

[Q] Who doesn't Loki work on MF3?

Hello everyone,
So, I've been looking into the status of unlocking the bootloader for MF3 updates (I downloaded it and read too late that they locked the bootloader in the update, sneaky bastards) and it appears this issue still hasn't been fixed. From what I understand, Dan Rosenberg waited until the Verizon update was released before he revealed the Loki exploit but, from what I've read, this exploit does not work on the MF3 update.
My question is now what is it that stops this from working with the MF3 version? Wasn't that the initial point of the release was to solve this particular issue?
I'm trying to understand some of the specifics as I've read a number of articles and links (both in XDA as well as others) and I'm still a bit confused as to where we're at with this. From what I can see, it doesn't appear there is any workaround in sight if the Loki exploit doesn't fix it. Am I more than likely stuck with a locked bootloader for the life of this phone?
Realistically, I am still able to get root access, so it's really not the end of the world but I'd definitely like to be able to flash custom roms if I wanted to. It sounds like I can indirectly do that via Safestrap (does it basically just protect all the crucial stuff that can break the fuse on the device and allow you just use TW based roms, just not custom kernals, is that correct?). But as of now, I believe that's my only option, if I understand correctly.
I realize a number of these issues have been addressed probably a number of times but, due to the amount of details and updates that seem to be changing, I just want to make sure I have a good understanding of everything so I know what my options are. If anyone wants to address this, I'd appreciate it but if these have all been answered a million times in one form or another, I understand that as well.
Thanks for your help!
(I put my questions in bold just to draw attention to them so anyone reading it doesn't have to search through my message to find them to address them, I'm not trying to come off like I'm yelling).
jbrookley said:
Hello everyone,
So, I've been looking into the status of unlocking the bootloader for MF3 updates (I downloaded it and read too late that they locked the bootloader in the update, sneaky bastards) and it appears this issue still hasn't been fixed. From what I understand, Dan Rosenberg waited until the Verizon update was released before he revealed the Loki exploit but, from what I've read, this exploit does not work on the MF3 update.
My question is now what is it that stops this from working with the MF3 version? Wasn't that the initial point of the release was to solve this particular issue?
I'm trying to understand some of the specifics as I've read a number of articles and links (both in XDA as well as others) and I'm still a bit confused as to where we're at with this. From what I can see, it doesn't appear there is any workaround in sight if the Loki exploit doesn't fix it. Am I more than likely stuck with a locked bootloader for the life of this phone?
Realistically, I am still able to get root access, so it's really not the end of the world but I'd definitely like to be able to flash custom roms if I wanted to. It sounds like I can indirectly do that via Safestrap (does it basically just protect all the crucial stuff that can break the fuse on the device and allow you just use TW based roms, just not custom kernals, is that correct?). But as of now, I believe that's my only option, if I understand correctly.
I realize a number of these issues have been addressed probably a number of times but, due to the amount of details and updates that seem to be changing, I just want to make sure I have a good understanding of everything so I know what my options are. If anyone wants to address this, I'd appreciate it but if these have all been answered a million times in one form or another, I understand that as well.
Thanks for your help!
(I put my questions in bold just to draw attention to them so anyone reading it doesn't have to search through my message to find them to address them, I'm not trying to come off like I'm yelling).
Click to expand...
Click to collapse
When Samsung released the MF3 update they used a two-prong attack to close the Loki exploit... those being
1. Closing the exploit in the code itself.
2. Blowing a qFuse on the board to prevent us from flashing any firmware lower then MF3.
I don't really want to get into the technical aspects of how this happened... I'll let someone else answer it if they wish.
jbrookley said:
Hello everyone,
what is it that stops this from working with the MF3 version? Wasn't that the initial point of the release was to solve this particular issue?
Am I more than likely stuck with a locked bootloader for the life of this phone?
does it basically just protect all the crucial stuff that can break the fuse on the device and allow you just use TW based roms, just not custom kernals, is that correct?
Click to expand...
Click to collapse
Nighthawk gave the short answer for the first two. Also, it's possible the update mentioned may have been the MDB>MDL update or verizon equivalent.
Technically even MDL people are stuck with a locked bootloader, but they have an exploit. People are working on an exploit for MF3+, but I can't say how likely it is one will be found.
Safestrap lets you do anything a normal recovery can except flash kernels. This is why you can only flash TW ROMs, as the AOSP and TW kernels are not compatible. Kernels would trip the bootloader checks. However, to add a bit to this and the last answer, something called kexec is in progress of being implemented into Safestrap. The exploit found allows loading unsigned modules, which in turn allows loading a kexec module, which would then load a kernel over the stock kernel while in the boot process. So if this works, it would be the next best thing to a bootloader exploit in that it would give us the same result, though I don't know if kernels will require tweaks to load in kexec.
DeadlySin9 said:
Nighthawk gave the short answer for the first two. Also, it's possible the update mentioned may have been the MDB>MDL update or verizon equivalent.
Technically even MDL people are stuck with a locked bootloader, but they have an exploit. People are working on an exploit for MF3+, but I can't say how likely it is one will be found.
Safestrap lets you do anything a normal recovery can except flash kernels. This is why you can only flash TW ROMs, as the AOSP and TW kernels are not compatible. Kernels would trip the bootloader checks. However, to add a bit to this and the last answer, something called kexec is in progress of being implemented into Safestrap. The exploit found allows loading unsigned modules, which in turn allows loading a kexec module, which would then load a kernel over the stock kernel while in the boot process. So if this works, it would be the next best thing to a bootloader exploit in that it would give us the same result, though I don't know if kernels will require tweaks to load in kexec.
Click to expand...
Click to collapse
Thanks for taking the time to explain that!
A somewhat related question, if my S4 ever gets an OTA update for 4.3, should I deny the update in case they create more obstructions for updates or should I take it since that's the only way my phone will get 4.3 at this point?
jbrookley said:
Thanks for taking the time to explain that!
A somewhat related question, if my S4 ever gets an OTA update for 4.3, should I deny the update in case they create more obstructions for updates or should I take it since that's the only way my phone will get 4.3 at this point?
Click to expand...
Click to collapse
I believe the kexec exploit is being worked on for mk2? But I'm not too sure you will have to review the threads.
Sent from my GT-I9505 using xda premium
jbrookley said:
Thanks for taking the time to explain that!
A somewhat related question, if my S4 ever gets an OTA update for 4.3, should I deny the update in case they create more obstructions for updates or should I take it since that's the only way my phone will get 4.3 at this point?
Click to expand...
Click to collapse
[email protected] said:
I believe the kexec exploit is being worked on for mk2? But I'm not too sure you will have to review the threads.
Sent from my GT-I9505 using xda premium
Click to expand...
Click to collapse
It is MK2 exclusive since the MK2 root method gives access to kernel memory and allows it. However, once on MK2 you should definitely not take any and I'm not sure whether the security policy updates are safe or not.

[Q] need permissive...help

Hi folks,
I need a stock/near stock kernel (for 900P NE5 firmware) with SE set to permissive. I need it to be able to run my Appradio.
I don't care about messing with the clock speeds or voltage or anything!
I was running the Governaa but that's ND2 and seems to not be getting revisions.
So can anyone help me out? Maybe change the stock kernel over or tell me exactly how (what programs I need and what lines to change)
I can upload what ever files needed, just tell me what and where they are.
All I need is permissive
Thanks
bigred97 said:
I need a stock/near stock kernel (for 900P NE5 firmware) with SE set to permissive. I need it to be able to run my Appradio.
Click to expand...
Click to collapse
I can only assume that you didn't look at the Sprint forum at all. Or do a search, because everything you want is in clearly labeled threads near the top of the forums. It's a good habit to look first before posting. Often you can get an immediate answer and it lets you pose more informed questions.
Lots of firmware and kernels to choose from. You could simply keep your existing NE5 (if you want), root it and then add a custom kernel. You need a custom kernel to gain Permissive status.
It's unclear what you mean by seems to not be getting revisions.? That sounds like you might mean OTA updates. It's not smart to allow automatic updates if you have a rooted phone and custom kernel. An update is likely to remove your root and other grief. If you really feel that you need automatic updates, you should buy and use either Mobile Odin Pro or Super Su Pro, both of which have features that try to retain or restore root after an update. That is not a guarantee that you will keep root, but it works pretty well.
The thread below has links to the firmware and custom ROMs (if you wish) or just to the rooting guides and custom kernels.
http://forum.xda-developers.com/showthread.php?t=2742994
Enjoy
.
fffft said:
I can only assume that you didn't look at the Sprint forum at all. Or do a search, because everything you want is in clearly labeled threads near the top of the forums. It's a good habit to look first before posting. Often you can get an immediate answer and it lets you pose more informed questions.
Lots of firmware and kernels to choose from. You could simply keep your existing NE5 (if you want), root it and then add a custom kernel. You need a custom kernel to gain Permissive status.
It's unclear what you mean by seems to not be getting revisions.? That sounds like you might mean OTA updates. It's not smart to allow automatic updates if you have a rooted phone and custom kernel. An update is likely to remove your root and other grief. If you really feel that you need automatic updates, you should buy and use either Mobile Odin Pro or Super Su Pro, both of which have features that try to retain or restore root after an update. That is not a guarantee that you will keep root, but it works pretty well.
The thread below has links to the firmware and custom ROMs (if you wish) or just to the rooting guides and custom kernels.
http://forum.xda-developers.com/showthread.php?t=2742994
Enjoy
.
Click to expand...
Click to collapse
Actually I did/do look in the sprint section, all the time. I had just go done going through every available kernel before I posted this. So maybe I wasn't clear on what I'm after, or maybe you shouldnt be so quick to assume...
Clearly the phone is already rooted if I'm looking to change kernels.
What I meant by " seems to not be getting revisions" was in reference to the "Governaa" kernel I mentioned IN THE SAME SENTENCE. Sorry if that was not clear.
That kernel has not been revised for newer firmware so I cannot use it. Nothing I said has anything to do with OTA updates.
All of the available kernels are way more involved than I need/want.
So for anyone that would like to be helpful, and is unsure what I am looking for: I need a stock/near stock kernel with SE status set to permissive. I don't need/want any bells and whistles
Alternative: guidance on what files/code I would need to alter to get stock kernel to permissive (if that is even possible)
MODS feel free to move this to the sprint section if you feel it's better suited there
bigred97 said:
Clearly the phone is already rooted if I'm looking to change kernels.
What I meant by " seems to not be getting revisions" was in reference to the "Governaa" kernel I mentioned IN THE SAME SENTENCE. Sorry if that was not clear.
Click to expand...
Click to collapse
What you want is clear like mud. You are making lots of unstated assumptions. You did not say that your phone was already rooted, nor does it follow that it would already be rooted if you were looking to change kernels. You don't understand what or how permissive works.
And you (still) didn't explain what you meant by seems to not be getting revisions. You didn't even clarify that "Governaa" was the name of a kernel in your original post. And you assume that we are familiar with this specific kernel and how that might relate to "getting revisions", rather than simply stating what the issue is.
What is clear is that helping you further would be challenging, so I'll leave you to your own devices. Nevertheless, everything that you need is in the thread that I linked to. If you still don't want to read a few posts there in your own best interests.. well that's your choice.
.
So if any one that isn't a giant Dbag, can help me I'd appreciate that. If what I'm looking for is not clear I'd be very happy to try to explain better. (Just ask instead of calling me dumb and lazy)
As far as not knowing what or how, ya you're right. What I do know is I need it in order for my app radio to work with my phone and i know it's in the kernel. Other than that I know nothing nor do I care to

S7, Samsung Health, Knox 0x1

Hey All:
I'm looking to splice various questions together.
I just reset my S7 to fully stock. Of course, I've tripped the e-fuse (Knox 0x1). My goal in resetting was to be able to use the newly-available (in Canada) Android Pay, which does in fact work. At least Google's fine with us resetting.
...but of course Samsung isn't, so now I can't use Samsung Health. Obviously I don't want to root, but it seems that I do need to edit build.prop (it looks like that is still a viable workaround, correct?). I also see @NilayNoob 's Superstock kernel method, but I'm almost convinced that this will trip SafetyNet and therefore I won't have Android Pay.
Is there any way to get Samsung Health AND Android Pay working at the same time on a Knox 0x1 device, with the knowledge that root is unimportant (i.e. if I can install and then uninstall it, same goes with TWRP, I'm fine with that)? What modifications can I make to my phone (e.g. TWRP) that won't trip SafetyNet?
Thanks.
--Databoy2k
databoy2k said:
Hey All:
I'm looking to splice various questions together.
I just reset my S7 to fully stock. Of course, I've tripped the e-fuse (Knox 0x1). My goal in resetting was to be able to use the newly-available (in Canada) Android Pay, which does in fact work. At least Google's fine with us resetting.
...but of course Samsung isn't, so now I can't use Samsung Health. Obviously I don't want to root, but it seems that I do need to edit build.prop (it looks like that is still a viable workaround, correct?). I also see @NilayNoob 's Superstock kernel method, but I'm almost convinced that this will trip SafetyNet and therefore I won't have Android Pay.
Is there any way to get Samsung Health AND Android Pay working at the same time on a Knox 0x1 device, with the knowledge that root is unimportant (i.e. if I can install and then uninstall it, same goes with TWRP, I'm fine with that)? What modifications can I make to my phone (e.g. TWRP) that won't trip SafetyNet?
Thanks.
--Databoy2k
Click to expand...
Click to collapse
I've read this:
Downgraded to 6.0.1. stock. Started SHealth, and again upgraded to Nougat.
databoy2k said:
Hey All:
I'm looking to splice various questions together.
I just reset my S7 to fully stock. Of course, I've tripped the e-fuse (Knox 0x1). My goal in resetting was to be able to use the newly-available (in Canada) Android Pay, which does in fact work. At least Google's fine with us resetting.
...but of course Samsung isn't, so now I can't use Samsung Health. Obviously I don't want to root, but it seems that I do need to edit build.prop (it looks like that is still a viable workaround, correct?). I also see @NilayNoob 's Superstock kernel method, but I'm almost convinced that this will trip SafetyNet and therefore I won't have Android Pay.
Is there any way to get Samsung Health AND Android Pay working at the same time on a Knox 0x1 device, with the knowledge that root is unimportant (i.e. if I can install and then uninstall it, same goes with TWRP, I'm fine with that)? What modifications can I make to my phone (e.g. TWRP) that won't trip SafetyNet?
Thanks.
--Databoy2k
Click to expand...
Click to collapse
https://forum.xda-developers.com/showpost.php?p=70712537&postcount=16
databoy2k said:
Hey All:
I'm looking to splice various questions together.
I just reset my S7 to fully stock. Of course, I've tripped the e-fuse (Knox 0x1). My goal in resetting was to be able to use the newly-available (in Canada) Android Pay, which does in fact work. At least Google's fine with us resetting.
...but of course Samsung isn't, so now I can't use Samsung Health. Obviously I don't want to root, but it seems that I do need to edit build.prop (it looks like that is still a viable workaround, correct?). I also see @NilayNoob 's Superstock kernel method, but I'm almost convinced that this will trip SafetyNet and therefore I won't have Android Pay.
Is there any way to get Samsung Health AND Android Pay working at the same time on a Knox 0x1 device, with the knowledge that root is unimportant (i.e. if I can install and then uninstall it, same goes with TWRP, I'm fine with that)? What modifications can I make to my phone (e.g. TWRP) that won't trip SafetyNet?
Thanks.
--Databoy2k
Click to expand...
Click to collapse
You could flash a custom ROM with Magisk installed to have everything working including AndroidPay
Magisk Bypasses Safteynet
Im currently using Superstock Rom and its great ... Playing PokemonGo, using banking apps and AndroidPay on a daily basis.
(and yes Shealth works)
EasyAndroidPro said:
You could flash a custom ROM with Magisk installed to have everything working including AndroidPay
Magisk Bypasses Safteynet
Im currently using Superstock Rom and its great ... Playing PokemonGo, using banking apps and AndroidPay on a daily basis.
(and yes Shealth works)
Click to expand...
Click to collapse
I've had exactly zero luck with Magisk in the past, albeit that was before the proper W8 firmware came out so I was also fighting through issues of using improper firmwares (which have just never worked quite right for me; it seems our Canadian W8's aren't just a CSC change from the F). I was also having problems accessing my carrier's resources, etc. Maybe it's fixed, but my goal was to go back to 100% stock (or as close to as possible). I guess I'm just finally giving up my flashing addiction for the time being.
mashardpro said:
I've read this:
Downgraded to 6.0.1. stock. Started SHealth, and again upgraded to Nougat.
Click to expand...
Click to collapse
Yep worked. Thanks; anyone looking for the updated solution this is certainly one. It did suck to not be able to use Google's app restore function though (as my Nougat backup didn't register as usable on Marshmallow). But I'm up and running and SHealth is happily purring away.
webjunky said:
https://forum.xda-developers.com/showpost.php?p=70712537&postcount=16
Click to expand...
Click to collapse
Thanks, but this had to be crossed with the recommendation above. I was mostly looking to see if there had been an update that I missed.

[Discussion] Monthly Security Patch Updates

The brilliance of Project Treble is that it allows us to flash to /system a generic AOSP Oreo build and have it boot without needing to modify anything else.
However, monthly security patches often require fixes in vendor, boot, or other partitions, which phhusson's ROM won't cover. The AOSP build will only patch vulnerabilities against the Android Framework, but nothing else.
So the question is, what would be the best way to handle monthly security patches? Thinking about it and discussing with phhusson, it seems like it will be a pain in the ass. You would have to download a monthly full OTA, extract all of the non-system partitions, and fastboot flash each of the images. This can probably be automated, but it's not as simple as other ROM updates.
That's a good question, and something I've wondered about also. Would a vendor send out updates for just the (new) vendor partition? Would they only be included in full updates (necessitating reflashing an after market rom)?
And, as you mention, what about security updates? If it involves hardware, will the vendors now handle that?
It's pretty confusing, but, if updates and everything all come at once (and we have to wait for them all to be done), then why are we doing Treble anyway?
Seems the answers are YTBD.
AsItLies said:
That's a good question, and something I've wondered about also. Would a vendor send out updates for just the (new) vendor partition? Would they only be included in full updates (necessitating reflashing an after market rom)?
And, as you mention, what about security updates? If it involves hardware, will the vendors now handle that?
It's pretty confusing, but, if updates and everything all come at once (and we have to wait for them all to be done), then why are we doing Treble anyway?
Seems the answers are YTBD.
Click to expand...
Click to collapse
The OEMs are the ones who are still pushing updates. Vendors patch their stuff and then send the source code or the patched binaries to the device maker (OEM).
The stuff we would need would only be included in full OTAs.
We already know how this should be handled, it's just a massive PITA right now because you have to download the full OTA, extract all the patched partitions, then flash them over your existing ones (save for /system which is the AOSP build).
Wouldn't... At least for A/B devices... Something like flashfire work exceedingly well...
As @Chainfire wrote the program... It will take OTAs and split them... At least it did on my Nexus 6...
I'm sure flashfire isn't FOSS... But I'd bet that someone could make something similar without stealing... And then the other slot would get the update as a one click...
For the A only... Having it work similar to the way flashfire does now would be acceptable? No?
Sent from my PH-1 using Tapatalk
Hmm, this is probably a big reason why the uptake on Treble has been almost zero. Makes things more difficult to maintain.
Maybe it could be handled in TWRP? If automated at all.
MishaalRahman said:
Vendors patch their stuff and then send the source code or the patched binaries to the device maker (OEM).
Click to expand...
Click to collapse
You mean "ODM".
CosmicDan said:
Hmm, this is probably a big reason why the uptake on Treble has been almost zero. Makes things more difficult to maintain.
Maybe it could be handled in TWRP? If automated at all.
You mean "ODM".
Click to expand...
Click to collapse
Yeah I'm quite surprised that treble is not really popular
Many devices have treble support now and even though there are some issues it means that devices will get many updates in the future
MishaalRahman said:
The brilliance of Project Treble is that it allows us to flash to /system a generic AOSP Oreo build and have it boot without needing to modify anything else.
However, monthly security patches often require fixes in vendor, boot, or other partitions, which phhusson's ROM won't cover. The AOSP build will only patch vulnerabilities against the Android Framework, but nothing else.
So the question is, what would be the best way to handle monthly security patches? Thinking about it and discussing with phhusson, it seems like it will be a pain in the ass. You would have to download a monthly full OTA, extract all of the non-system partitions, and fastboot flash each of the images. This can probably be automated, but it's not as simple as other ROM updates.
Click to expand...
Click to collapse
Is there a reason we can't just copy exactly how the OEM's send their updates?

Categories

Resources