[Q] Knox hindering setting Security Enhanced to permissive! - Galaxy S 4 Q&A, Help & Troubleshooting

Hello,
First I'm sorry to post in the S4 Section but the Forums for the S4 VE somehow don't accept any new posts.
I've rooted my GT-I9515 running Lollipop 5.0.1 a few days ago and am pretty happy with the features.
Seeing that my WhatsApp Media Folder takes to much space on sd0 I used Folder Mount to put it on ext.
It seemed fine till WhatsApp wasn't able to download Pictures anymore only showing the Thumbnail and stating the file is not on the SD.
This is a Bug with Folder Mount on Lollipop 5.0.1 and is fixable with setting the Security Enhanced Linux to "permissive".
I first tried that with the App for it, the author wrote that it doesn't work well with Knox.
I researched and frooze the Knox Application with Titanium (no effect), after that I removed them and rebooted my system (No effect but theyre not there anymore), as a last resort I downloaded Android Terminal Emulator and tried it with "su pm disable com.sec.knox.seandroid".
After the reboot I tried it with the App but it didn't work, I tried it via "su setenforce 0" but it also had no effect.
Right now it shows under About Device like the uploaded image.
i.imgur. com/RWNqtYw.png (Sorry for the format am new user!)
I don't know what to do, how can I remove Knox to set SE to permissive?
It still gets displayed under About Device.
Thanks for help!

Install a custom kernel, as the custom kernels are all set to permissive.

Strephon Alkhalikoi said:
Install a custom kernel, as the custom kernels are all set to permissive.
Click to expand...
Click to collapse
I heard that I can only use the i9515 Kernel otherwise Touch, WiFi, Bluetooth and etc. won't work.
I only found a Kernel for the i9515 here (http://forum.xda-developers.com/galaxy-s4/i9505-develop/kernel-s4-value-edition-i9515-t3031044) but it says it's a stock Kernel so I guess it wouldn't help me with my problem right?

Right. You'll need to find someone who can either modify the stock kernel so SELinux is permissive, or create a kernel from source.

Related

S4 Mini i9190 root done - I confirm

Dear i9190 owners
I have applied the root method of the i9195 to my i9190 and the root suceeded. use the same files and the same recovery but apply the su application using recovery instead downloading it from the market.
My i9190 now is rooted and works perfectly.
kind regards
Update:
after you install the kernel and recovery and the su app you might get an annoying message saying : Detection Information - The device has detected an application attempting unpermitted actions. To protect your device, it is recommended you reboot"
to stop this message from appearing do this :
1. Use File Manager with root explorer instead and mount SYSTEM as WRITABLE.
2. Go to: /data/data/ look for com.sec.knox.seandroid and rename it to 000.knox.seandroid or whathever you wish.. Same thing applies to com.sec.knox.store
3. Go to: /system/app/ and DELETE: KNOXAgent.apk, KNOXAgent.odex, KNOXStore.apk, KNOXStore.odex
4. Restart
Tips? Help plz
LibyaDroid said:
Dear i9190 owners
I have applied the root method of the i9195 to my i9190 and the root suceeded. use the same files and the same recovery but apply the su application using recovery instead downloading it from the market.
My i9190 now is rooted and works perfectly.
kind regards
Click to expand...
Click to collapse
Yeah, i dit the same, even tried the files (from todat) at development forum.
Everything workes fine, until today. (before and after folloing the new guide) same problem.
My locksreen hangs and give me "wait" or "ok" choice, all the time. Programs that worked before begin to fail me, hangs and not work.
No sound from spotify, etc.
Dont know what to do, i have restarted my phone, i had a full wipe. sad, cant do anything almost.
Any tips?
Just to be sure, Timsung, did you apply the 9195 root on the 9190?
Timsung said:
Yeah, i dit the same, even tried the files (from todat) at development forum.
Everything workes fine, until today. (before and after folloing the new guide) same problem.
My locksreen hangs and give me "wait" or "ok" choice, all the time. Programs that worked before begin to fail me, hangs and not work.
No sound from spotify, etc.
Dont know what to do, i have restarted my phone, i had a full wipe. sad, cant do anything almost.
Any tips?
Click to expand...
Click to collapse
I applied the root of this thread exactly and didn't see any troubles. [RECOVERY][ROOT] Samsung Galaxy S4 Mini (GT-I9195)
my phone works perfectly and rooted and has recovery.
I think you need to flash stock firmware and apply the root again from the above thread of i9195
by the way .. after the root if you download the su application from the play store it will not work. you need to flash it through recovery.
I checked recently the recovery/boot files of both models I9190 and I9195.
The partitions is exactly the same, and the addres of them too. (mmcblkxx)
it's also the same harware except the nfc and the lte, so there is nothing to fear.
Hello,
I intend to purchase a S4 Mini and turn it "Google Edition", but I have some questions regarding it.
What implications does it have? I assume the touchwiz specific functions will not work, but will the phone/android specific functions work? GPS, navigation, google maps, etc?
Can the functionality of the camera and music player be improved with apps (like more camera options that touchwiz has, but not a Google edition)? I'd like to use the active notification app, will I be able to?
Since Android is free, will I get the latest automated updates as soon as it hits the Nexus?
Here is the rooting tutorial, does it tell all that is to know?
http://forum.xda-developers.com/showthread.php?t=2364980
This tutorial has a video, but is for the i9505, can it still be used as a guideline?
http://www.technobuffalo.com/videos/how-to-turn-a-galaxy-s4-into-a-google-edition-phone/
There isn't a Google edition rom for the S4 Mini. You should just flash CyanogenMod 10.1 on it if you want something like that. All the functions you mentioned are working on CM10.1.
The camera in Google stock roms (upon which CM is based) has less features than the Samsung stock camera.
The activenotification app works fine on CM. TouchWiz is the interface used in Samsung stock roms and does not exist on these custom roms based on the Google stock roms.
Thanks. What I mean to say is that I want to install stock Google android (4.3) on the phone and get rid of touchwiz. I need to get more information about CyanogenMod to decide,
I'm sure it has neat features, but all I need really is a phone the size of the S4 mini and to run stock android on it (hence my decision to go with it, otherwise I could buy one of the google edition phones right away). I just wondered if it still has stuff like navigation and if the camera would work normally and such. Also whether I would get the automatic updates of android or am stuck with the version I installed.
Are you planning to get the LTE version? CyanogenMod 10.1 is currently only available on the LTE model.
You should read about what CyanogenMod is about @ http://www.cyanogenmod.org/about
I feel that it suits your needs
The one I'm getting is LTE.
So with the CyanogenMod I can still have that pure stock Google android look, but can change themes and stuff? Having choices and options is great but I want that pure and simple 100% stock android look.
I wonder how stable it is and how do I update that? Do I need to flash it each time? Stock android gets automatic updates, but if I use CM, than I don't want to fiddle around with installing updates again risking data and the phone.
I see 10.2 (4.3) is out.
Custom roms need to be tailored for each phone. There is only 10.1 available for the GT-I9195 for now. Support for 10.2 will come later when 10.1 is more stable.
There are automatic update notifications for updates to CyanogenMod. The latest builds commonly are based on the latest version of that Android release available on open source.
Incremental CyanogenMod updates don't wipe your data.
I put CM10.1 on it. I love the stock google look, so much more pleasant. The set of options is great.
Thanks to arco68 for the rooting tutorial and you for the rom installation.
I didn't backup the previous rom though, is there a way to reset it if necessary?
Is there a way to use the "System/Notification drawer/Widget buttons" on the "Lock screen/Slider shortcuts"?
I'd like to use the "Go to sleep" function by sliding the lock screen to the left to shut off the screen as opposed to sliding it left to unlock.
I tried some lock screen apps. Two work excellent, just as I want, but the one wakes screen up right after shutting it and the other stays open as app in the background. A third works but not so great.
having problem
LibyaDroid said:
Dear i9190 owners
I have applied the root method of the i9195 to my i9190 and the root suceeded. use the same files and the same recovery but apply the su application using recovery instead downloading it from the market.
My i9190 now is rooted and works perfectly.
kind regards
Update:
after you install the kernel and recovery and the su app you might get an annoying message saying : Detection Information - The device has detected an application attempting unpermitted actions. To protect your device, it is recommended you reboot"
to stop this message from appearing do this :
1. Use File Manager with root explorer instead and mount SYSTEM as WRITABLE.
2. Go to: /data/data/ look for com.sec.knox.seandroid and rename it to 000.knox.seandroid or whathever you wish.. Same thing applies to com.sec.knox.store
3. Go to: /system/app/ and DELETE: KNOXAgent.apk, KNOXAgent.odex, KNOXStore.apk, KNOXStore.odex
4. Restart
Click to expand...
Click to collapse
it shows this!!!!what can i do????

[Q] OMNI 4.4 on N7000

I installed OMNI 4.4 on my N7000 two days ago. Now i've some questions:
1. App2SD doesn't work, message: App couldn't move to SD. Why, the same app is moveable with CM10.2.
2. Yesterday my battery went down to 0% in less then 2 hours. The most energy is used by Google+, why?
3. How could i select if i want to used location based on GPS or on WLAN (or other wireless Networks)?
dc7os said:
I installed OMNI 4.4 on my N7000 two days ago. Now i've some questions:
1. App2SD doesn't work, message: App couldn't move to SD. Why, the same app is moveable with CM10.2.
2. Yesterday my battery went down to 0% in less then 2 hours. The most energy is used by Google+, why?
3. How could i select if i want to used location based on GPS or on WLAN (or other wireless Networks)?
Click to expand...
Click to collapse
1) CM10.2 is based on Android 4.3, Omni is 4.4.x. Other than that, I don't know what might cause that to not work.
2) Google+ can be a SERIOUS battery hog. I had it kill my old phone's battery in 2 hours flat, but my new one it is fine on. Seems to be no correlation.
3) Go to settings, locations. It might be in your Google Account settings now. Check there.
Google made a lot of changes to storage with 4.4 - As it is older devices are barely working and having numerous weird issues with storage with the new changes.
Among other things, it used to be that Google used a special fuse daemon to do permissions remapping of /data/media to /sdcard on newer devices. Now they're doing the exact opposite - FAT partitions must be remapped using a special fuse daemon which seems VERY inefficient. I've seen media scanning on first boot take as long as 30-45 minutes, pegging the CPU. Seems to only occur on first boot though.
It kind of reminds me of the old 4.1 mediascanner issues but worse, since I think it affects any device with a FAT partition for /sdcard
I saw another nice Feature, take a look at http://sdrv.ms/1kt6BdJ But i don't run an OTA update...
Entropy512 said:
Google made a lot of changes to storage with 4.4 - As it is older devices are barely working and having numerous weird issues with storage with the new changes.
Click to expand...
Click to collapse
Storage changes might be weird, but the inability to move apps to SD card and install some of the apps from Google store are down to enforcing Selinux for the n7000.
If you use terminal emulator to disable enforcing (su, setenforce 0) all the problems disappear and you can move and install stuff with no problems whatsoever.
Until you reboot, that is. Then everything moved and installed simply vanishes into thin air because the policy is back to enforcing.
chasmodo said:
Storage changes might be weird, but the inability to move apps to SD card and install some of the apps from Google store are down to enforcing Selinux for the n7000.
If you use terminal emulator to disable enforcing (su, setenforce 0) all the problems disappear and you can move and install stuff with no problems whatsoever.
Until you reboot, that is. Then everything moved and installed simply vanishes into thin air because the policy is back to enforcing.
Click to expand...
Click to collapse
But how should i do it, SuperSU doesn't work right. If i start an application that want to use SU rights, there's no popup from SuperSU. I flashed SuperSU 1.72 Beta after the latest nightly. But i don't get the needed rights.
dc7os said:
But how should i do it, SuperSU doesn't work right. If i start an application that want to use SU rights, there's no popup from SuperSU. I flashed SuperSU 1.72 Beta after the latest nightly. But i don't get the needed rights.
Click to expand...
Click to collapse
1.72 is old; flash 1.80 from here.

Having issues removing system apps in Kitkat?

Since having an xperia arc, I have used system tuner pro/es file explorer/titanium backup in order to remove system apps.
However in CM11, I have been having difficulty removing system apps, I get the messages "could not remove application" or "failed to remove application" etc etc depending what app I was trying to remove things with.
I've just discovered why this happens and how to solve it easily.
This may help others in same situation.
So... from googleing a bit I found this thread:
http://forum.xda-developers.com/showthread.php?t=2602670
Which led to this thread:
http://forum.xda-developers.com/showthread.php?t=2592456
Which led to this thread:
http://forum.xda-developers.com/showthread.php?t=2524485
So from what I've read, Kitkat has introduced some security features... I'll cut and paste the rest.
Remember to go say thanks to the dev!
"There are lots of folks around who already has KitKat on their devices. But kitkat comes with new secutity enhancement, SELinux, put into "enforcing mode". Maybe This thing is good from the point of security, but it breaks some Root Apps, like my Ultimate Dynamic Navbar, so I created this app.
What does it do? This app can change modes of SELinux:
Run app, give root access, select the mode you want SELinux to be in(permissive or enforcing) and that's all. Every time you reboot your device app will execute the script to change SELinux to the mode you've selected. Simple and stupid."
http://forum.xda-developers.com/showthread.php?t=2524485

Stock ROM: Magisk v15.1 and S-Health, secure boot, incognito mode in Samsun Browser

Hi,
I use stock firmware and my Knox is tripped already.
If I understand correctly, Magisk enables to obtain root privileges without being detected.
Does it mean, I can use it to modify /system/build.prop in order to make S-Health work ? Will all security-critical apps (like android pay, secure boot, etc.) still work or the system will detect modification of the /system partition and security critical apps will refuse to run and device status will change to unofficial (no more automatic system updates)?
adrianf0 said:
Hi,
I use stock firmware and my Knox is tripped already.
If I understand correctly, Magisk enables to obtain root privileges without being detected.
Does it mean, I can use it to modify /system/build.prop in order to make S-Health work ? Will all security-critical apps (like android pay, secure boot, etc.) still work or the system will detect modification of the /system partition and security critical apps will refuse to run and device status will change to unofficial (no more automatic system updates)?
Click to expand...
Click to collapse
No. U still detected with magisk and device status in unoffical. U need fake knox 0x0 rom!
@andrei1412 could you be more specific?
Currently, (stock rom and tripped Knox), my device has the official status and I can use all security-critical apps (like android pay, secure boot, bank apps etc.).
The Magick should remain undetected, right? My concern is that by editing build.prop the device will detect system partition modification and the mentioned security-critical apps will not work anymore.
adrianf0 said:
@andrei1412 could you be more specific?
Currently, (stock rom and tripped Knox), my device has the official status and I can use all security-critical apps (like android pay, secure boot, bank apps etc.).
The Magick should remain undetected, right? My concern is that by editing build.prop the device will detect system partition modification and the mentioned security-critical apps will not work anymore.
Click to expand...
Click to collapse
Yeah magisk is hidden.
Well, my main question remains unanswered.

Secure Folder on stockish Android 10

Smali Patcher with Knox bypass used to work on Pie but it won't work on Q for some reason
It says that it's been flashed successfully and all and everything goes well but secure Folder won't work at all.
I got SHealth to work by changing buildprop's tima to 0 and Secret Mode on Samsung's Internet by changing Knox's version to v00 but Secure Folder won't work at all
Does anyone know why? I don't think that I've done anything wrong as that's what I did to get it work on Pie and sadly Its very hard to revert back to pie from q and I've tried resetting my phone and doing it over again still it didn't work
what use will you give it?
I say this, because I used it to duplicate pokemon go, and / or hide the root of the applications. but then I started using storage isolation
btw, after odin updating my a20, theoretically, the safe folder worked normally (I never finished activating it) but, unlike Android pie, it was already running at least.
Solved, I had to use smali patcher right away after flashing and then running through the setup

Categories

Resources