Database Users

Issues with XPrivacy and PMP

I have successfully installed Magisk v8, SuperSU and Xposed. However, the xposed module xprivacy and PMP do not seem to work. PMP says that it does not get root access. xprivacy freezes the phone.
Did anyone successfully install these modules or did you run into similar issues? Many thanks.
EDIT: I believe the issues can be solved if PHH's Superuser is used instead of SuperSU. Further testing needed.

After I switched to PHH, PMP (Protect My Privacy) works. However, xprivacy does still not work. The problem is that the normal xprivacy window (that allows you to grant or deny permissions) does not appear.
Has anyone successfully installed xprivacy on the Le Pro 3? Thanks.
EDIT: I finally managed to properly enable xprivacy. It was my fault. Not all xprivacy-related processes were enabled in EUI's autostart manager. It is not sufficient to simply enable xprivacy in xposed.

Question about Ads blocker apps

What apps do you guys use to block ads and still get OTA updates?
I just got a Mi A1 and I intend to root it and install xposed, but with the OTA updates in mind.
If you guys have any suggestions they will be very much appretiated.

def.man said:
What apps do you guys use to block ads and still get OTA updates?
I just got a Mi A1 and I intend to root it and install xposed, but with the OTA updates in mind.
If you guys have any suggestions they will be very much appretiated.
Click to expand...
Click to collapse
If you're talking about ads in browser just use firefox and install adblock plus in addons.
In youtube install youtube adaway you can search it here
In apps i don't know ?

Magisk systemless hosts + adaway = system wide ad blocking. Only very few apps are showing ads (those are probably using their own ads instead of standard ad servers).
For youtube I use ogyoutube with microg.

Without modifying the system you can still use the open source project http://blokada.org

I use block this! It creates a VPN which blocks ad dns hosts.

majamee said:
Without modifying the system you can still use the open source project http://blokada.org
Click to expand...
Click to collapse
This is a good one. It blocked from the 9gag app and in chrome aswell. The only anoying thing is the "key" notification it leaves on. Anyway to hide it?

_mysiak_ said:
Magisk systemless hosts + adaway = system wide ad blocking. Only very few apps are showing ads (those are probably using their own ads instead of standard ad servers).
For youtube I use ogyoutube with microg.
Click to expand...
Click to collapse
I used to have Adaway in my old phone, but I read that it messes with the system host files and thus I would not be able to take OTA updates. Does Magisk have its own Adaway that is different somehow?

def.man said:
I used to have Adaway in my old phone, but I read that it messes with the system host files and thus I would not be able to take OTA updates. Does Magisk have its own Adaway that is different somehow?
Click to expand...
Click to collapse
I've read it as well (only one guy who mentioned it btw.), but to be honest I do not believe it. I am using the latest Adaway version which has enabled "systemless mode" by default and it didn't modify my system hosts file. But I must admit that I didn't receive any OTA yet and had to always flash full ROM to update my system, so can't guarantee it

_mysiak_ said:
I've read it as well (only one guy who mentioned it btw.), but to be honest I do not believe it. I am using the latest Adaway version which has enabled "systemless mode" by default and it didn't modify my system hosts file. But I must admit that I didn't receive any OTA yet and had to always flash full ROM to update my system, so can't guarantee it
Click to expand...
Click to collapse
Do you have the december update?

def.man said:
Do you have the december update?
Click to expand...
Click to collapse
Yes, I flash full ROM via fastboot each month (did the same with my old Nexus 5X, so I'm used to it).

Magisk has a systemless adblock module called "Unified Hosts Adblock".

Don't block adverts. Ya, I may sound like a noob & jerk but that's the only way everyone of us get to use free contents. The developer & content creator won't be giving away stuffs for free if they don't earn. Support the Developers & content creator.

Hriddhi said:
Don't block adverts. Ya, I may sound like a noob & jerk but that's the only way everyone of us get to use free contents. The developer & content creator won't be giving away stuffs for free if they don't earn. Support the Developers & content creator.
Click to expand...
Click to collapse
I support devs directly, I either purchase a full version or donate to them. If there is only "free" app filled with ads, I see no reason to not to block them. As soon as content creators start serving unobtrusive ads (web, youtube, ..) I'll stop blocking them. Until then...adaway is and will be my second installed app (the first one is Titanium backup pro ). Btw. there wasn't a single ad during past 20 years which I would be interested in, if I clicked on one, it was by mistake.

I use minminguard (xposed module). to update, simply flash full stock rom (keep user data in mi flash tool) then update ota. Unlock bootloader again, boot TWRP and flash magisk.

i had troubles updating to november patch due to adaway. i installed the latest adaway there is, it even said systemless hosts in option.. yet it did modify my hosts file directly - i checked this after i unistalled adaway + magisk
not sure if i did something wrong on my end, just saying that it didnt work for me systemless.. would like to hear if someone managed to get it to work tho
im now using unified adblock from magisk, works okayish

DeV91 said:
i had troubles updating to november patch due to adaway. i installed the latest adaway there is, it even said systemless hosts in option.. yet it did modify my hosts file directly - i checked this after i unistalled adaway + magisk
not sure if i did something wrong on my end, just saying that it didnt work for me systemless.. would like to hear if someone managed to get it to work tho
im now using unified adblock from magisk, works okayish
Click to expand...
Click to collapse
Not sure what went wrong on your end, but modifying system data would lead to fail of Safetynet check. I am running Magisk + systemless hosts + Adaway and Safetynet passes the check, so I assume that nothing has been written to the system. I will confirm once I actually receive an OTA, so far fastboot images were out earlier than mine OTA

SafetyNet reports no problem after switching off root access in developer settings

I do not know if a lot op people know this:
I just checked on a Moto Z if the app "SafetyNet Test" reports an issue after I switch off "root access for apps and adb" in developer settings. It does not, it reports a safe device!
Switching root access on, "SafetyNet Test" recognizes immediately a problem.
I always thought, switching off root access would still case a problem.
Congratulation LOS team!
For root access I am using the addonsu-16.0-arm64-signed from LOS.
So, my question, what is the advantage of Magisk?

ischninet said:
I do not know if a lot op people know this:
I just checked on a Moto Z if the app "SafetyNet Test" reports an issue after I switch off "root access for apps and adb" in developer settings. It does not, it reports a safe device!
Switching root access on, "SafetyNet Test" recognizes immediately a problem.
I always thought, switching off root access would still case a problem.
Congratulation LOS team!
For root access I am using the addonsu-16.0-arm64-signed from LOS.
So, my question, what is the advantage of Magisk?
Click to expand...
Click to collapse
For LOS users who simply want superuser access (root) of the OS, the su add-on will certainly suffice. Magisk allows users to implement a fully systemless environment with which to manage & utilize root access. Magisk includes a myriad of systemless modules such as XPosed, BusyBox, audio mods, etc. These modules can be applied and used without touching the /system partition, which comes in handy for users who plan on installing future OTAs without breaking root. Magisk also includes a nifty feature known as "su hide" (Magisk Hide), which has the ability to hide root from certain apps that check for it (Netflix, Google Pay, etc), allowing these apps to run normally on rooted devices. And, as you've already noted, Magisk root can pass both basicIntegrity & ctsProfile within Google's proprietary SafetyNet protocol.
When deciding between the LOS root add-on and Magisk systemless interface, it comes down to personal preference and the individual needs and expectations of the user.

Viva La Android said:
For LOS users who simply want superuser access (root) of the OS, the su add-on will certainly suffice. Magisk allows users to implement a fully systemless environment with which to manage & utilize root access. Magisk includes a myriad of systemless modules such as XPosed, BusyBox, audio mods, etc. These modules can be applied and used without touching the /system partition, which comes in handy for users who plan on installing future OTAs without breaking root. Magisk also includes a nifty feature known as "su hide" (Magisk Hide), which has the ability to hide root from certain apps that check for it (Netflix, Google Pay, etc), allowing these apps to run normally on rooted devices. And, as you've already noted, Magisk root can pass both basicIntegrity & ctsProfile within Google's proprietary SafetyNet protocol.
When deciding between the LOS root add-on and Magisk systemless interface, it comes down to personal preference and the individual needs and expectations of the user.
Click to expand...
Click to collapse
Nice explanation. I've always used true root and not systemless and have never tried magisk. I am delighted by how easy lineage makes it to add root and that it's own privacy guard software handles the su permission. To me from outside looking in magisk just adds a ton of complications to simple access to the modify system files to which it doesn't actually modify because it's systemless. I definitely prefer traditional root access that lineage allows. In a perfect world Google would allow root access how lineage implements it. You have to flash a file and turn it on and assume all responsibility. I don't know what Google is so afraid of. People use the argument that people would be bricking their phones left and right but some how Microsoft and every Linux distro has allowed access to system files without issue.

Joe333x said:
Nice explanation. I've always used true root and not systemless and have never tried magisk. I am delighted by how easy lineage makes it to add root and that it's own privacy guard software handles the su permission. To me from outside looking in magisk just adds a ton of complications to simple access to the modify system files to which it doesn't actually modify because it's systemless. I definitely prefer traditional root access that lineage allows. In a perfect world Google would allow root access how lineage implements it. You have to flash a file and turn it on and assume all responsibility. I don't know what Google is so afraid of. People use the argument that people would be bricking their phones left and right but some how Microsoft and every Linux distro has allowed access to system files without issue.
Click to expand...
Click to collapse
It's a common misconception, but systemless root is "true" root in a sense that /system can be mounted as r/w, and can be modified if the user so chooses. It's really just a matter of preference. Root can be hidden from apps far easier in a systemless scenario. To my understanding, the biggest difference between system-wide root and systemless -- in terms of implementation -- is that the root binaries are introduced into the OS in two different manners -- one by modifying the /system partition directly and the other by way of the boot image. Both methods allow for system level modifications, and give the user full and unfettered access to the core of the OS. It's more about the method of achieving root than it is the final result. In sum, the term "systemless" root in no way means that the /system partition cannot be modified. Rather, it implies that the Android OS was rooted without the /system partition being modified or mounted r/w. This is especially necessary these days, with so many devices having dm-verity, Android Verified Boot (AVB 1.0, AVB 2.0), etc.

[Question] How to fake 'Official' Device Status on SM-T350

Hello, I have an SM-T350 rooted with Magisk, how can I fake the Device Status to show Official under settings?
(Right now it says Custom)

Using an Edxposed Module named "Firefds Kit" To install edxposed YouTube or Google Search "How to Install edxposed on Android (Version Goes Here)" then once installed, go to the hamburger menu of the exposed manager app and select downloads, then search Firefds Kit, then select the one for your android, for example, the one for Android Pie would be Firefds Kit [P], then install the latest version, select modules in the hamburger menu, and turn on Firefds Kit, restart, then open the firefds kit app, then go to the hamburger menu, tap security, then turn on "fake official status", restart, and check settings, THIS WILL NOT MAKE APPS LIKE SECURE FOLDER AND S HEALTH (If you sideload it since your on a tablet) THINK YOUR ON OFFICIAL BINARY. to do that, you need to patch one of the system files using a text editor in a root browser and restart, and for secure folder, it is under security in firefds kit, turn on enable secure folder, restart, try to enable it, restart, then hopefully the icon in apps should be there, tap it and set it up.

CaptainChris2018 said:
Using an Edxposed Module named "Firefds Kit" To install edxposed YouTube or Google Search "How to Install edxposed on Android (Version Goes Here)" then once installed, go to the hamburger menu of the exposed manager app and select downloads, then search Firefds Kit, then select the one for your android, for example, the one for Android Pie would be Firefds Kit [P], then install the latest version, select modules in the hamburger menu, and turn on Firefds Kit, restart, then open the firefds kit app, then go to the hamburger menu, tap security, then turn on "fake official status", restart, and check settings, THIS WILL NOT MAKE APPS LIKE SECURE FOLDER AND S HEALTH (If you sideload it since your on a tablet) THINK YOUR ON OFFICIAL BINARY. to do that, you need to patch one of the system files using a text editor in a root browser and restart, and for secure folder, it is under security in firefds kit, turn on enable secure folder, restart, try to enable it, restart, then hopefully the icon in apps should be there, tap it and set it up.
Click to expand...
Click to collapse
Thanks but I have Android 7.1.1 which only works with Xposed not Edxposed so will this work with Xposed? Also what about passing safetynet? I thought safetynet wouldn't pass with Xposed installed? Also when you said "to do that, you need to patch one of the system files using a text editor in a root browser and restart" which system file were you talking about? What do I need to patch? Can I do it without a module?

JJcoder said:
Thanks but I have Android 7.1.1 which only works with Xposed not Edxposed so will this work with Xposed? Also what about passing safetynet? I thought safetynet wouldn't pass with Xposed installed? Also when you said "to do that, you need to patch one of the system files using a text editor in a root browser and restart" which system file were you talking about? What do I need to patch? Can I do it without a module?
Click to expand...
Click to collapse
The system file patch is only if you have s health and want it to work. since you are on a tablet you must likely have notsideloaded it, I don't know if you can do it without a module, the process should be the same with xposed

CaptainChris2018 said:
The system file patch is only if you have s health and want it to work. since you are on a tablet you must likely have notsideloaded it, I don't know if you can do it without a module, the process should be the same with xposed
Click to expand...
Click to collapse
Well, I can't really do it with Xposed because safetynet won't pass plus when I go into Xposed installer (Magisk version) after installing the Xposed Framework Magisk module it still says "Xposed framework is not installed" when I open Xposed installer. So, I may just have to try this on my S8 which runs Android Pie

JJcoder said:
Well, I can't really do it with Xposed because safetynet won't pass plus when I go into Xposed installer (Magisk version) after installing the Xposed Framework Magisk module it still says "Xposed framework is not installed" when I open Xposed installer. So, I may just have to try this on my S8 which runs Android Pie
Click to expand...
Click to collapse
Did you install it properly or turn on Magisk Hide? Since it makes safteynet pass

CaptainChris2018 said:
Did you install it properly or turn on Magisk Hide? Since it makes safteynet pass
Click to expand...
Click to collapse
Yes, MagiskHide was on but I don't think MagiskHide can hide Xposed even if it is system-less. Also, yes I installed Xposed correctly by first installing the Magisk module and then by installing the Magisk compatible Xposed installer app. I don't really know how to solve these two problems

JJcoder said:
Yes, MagiskHide was on but I don't think MagiskHide can hide Xposed even if it is system-less. Also, yes I installed Xposed correctly by first installing the Magisk module and then by installing the Magisk compatible Xposed installer app. I don't really know how to solve these two problems
Click to expand...
Click to collapse
you need a special xposed apk made for the magisk xposed

elliwigy said:
you need a special xposed apk made for the magisk xposed
Click to expand...
Click to collapse
I know, that's what I meant by the "Magisk compatible Xposed installer"

Magisk attestation/safteynet failed

Hi, magisk was passing saftey net. I installed magisk 21.2 with twrp and it says its installed. Installed Magisk hide and hid all Google apps and I think it changed the devices fingerprint in the install log. But no luck. Any ideas?
Miui 12.0.5 global

Vanmanman said:
Hi, magisk was passing saftey net. I installed magisk 21.2 with twrp and it says its installed. Installed Magisk hide and hid all Google apps and I think it changed the devices fingerprint in the install log. But no luck. Any ideas?
Miui 12.0.5 global
Click to expand...
Click to collapse
You just need to enable Magisk hide option in Magisk Manager (nothing specially to install for), and the required activity for GooglebPlay Services to hide will be already checked-in. You don't need to check in manually the other Google apps (and better you don't)
All that does not change device fingerprint or any prop.
If you really want to change props (incl. device fingerprint), use Magisk Hide Props Config (MHPC), find its XDA thread with the Guide in OP post (and more detailed guide on its Github)
And I don't see any problem ("no luck"?!) on your screenshot.
If SafetyNet is passing, better don't change any props/fingerprints - specially, before playing with, carefully study Magisk Wiki and MHPC Guide from Github

zgfg said:
You just need to enable Magisk hide option in Magisk Manager (nothing specially to install for), and the required activity for GooglebPlay Services to hide will be already checked-in. You don't need to check in manually the other Google apps (and better you don't)
All that does not change device fingerprint or any prop.
If you really want to change props (incl. device fingerprint), use Magisk Hide Props Config (MHPC), find its XDA thread with the Guide in OP post (and more detailed guide on its Github)
And I don't see any problem ("no luck"?!) on your screenshot.
If SafetyNet is passing, better don't change any props/fingerprints - specially, before playing with, carefully study Magisk Wiki and MHPC Guide from Github
Click to expand...
Click to collapse
Hi, Thanks for the reply.
I reinstalled to go back to default magisk settings. I have Magiskhide enabled. But for instance. The macdonalds app when redeeming an offer will say "security check failed". Also playstore cant see netflix and some other apps anymore with new version of magisk. I used magisk to pass safteynet to do that before, or it was doing that before but its not passing safteynet with 21.2 magisk now
I tried using MagiskHide Props Config to change the devices finger print but attestation keeps failing

Vanmanman said:
Hi, Thanks for the reply.
I reinstalled to go back to default magisk settings. I have Magiskhide enabled. But for instance. The macdonalds app when redeeming an offer will say "security check failed". Also playstore cant see netflix and some other apps anymore with new version of magisk. I used magisk to pass safteynet to do that before, or it was doing that before but its not passing safteynet with 21.2 magisk now
Click to expand...
Click to collapse
On Magisk Github find Wiki, there is the whole chapter devoted to the problems how certain apps detect root and tips how you can try to prevent
But it's a constant game of mice and cat - you may fix it for now (for some of those apps), but a newer version of that app may explore a new methods to again detect the root
As the minimum, enlist the given apps to the Magisk hide list.
Also, take Hide Magisk Manager and rename it - it may help (some apps look if Magisk Manager is installed).
Remove TWRP folder (some look for that) - read the Wiki, try all the tips suggested there
Btw, are you passing SafetyNet or no. First you must make sure to pass (my comments above are about that even if you pass SsfetyNet, that there are still apps that declare that phone is rooted, by taking other checks and methodes).
So, Msgisk Hide must be enabled.
If its still not passing SafetyNet, take a screenshot - does it pass Basic Integrity or not, does it show taking Basic or Hardware eval type for CTS
Some Magisk modules may also cause SafetyNet to fail. Disable all modules, reboot and try again
These are all important details, not just SN is failing or some app detects root...

thanks will do. Gave them a go and now trying changing my devices finger print. Just cant get attestation/basicintegrity or cts profile to pass. Only have magisk hide propconfig module @zgfg

See again my previous post - I've edited/added some details

I enabled magisk hide. Changed magisk name. Changed every fingerprint and simulation of device I could but still get this

I checked magisk hide with a root checker and its working with that. So somethings working. Cant find the magisk github wiki but finding lots of other stuff to try to get saftey net passing. Just no luck yet

trying to install HiddenCore Module from Xposed but the manager is saying xposed framework is not installed even though I've have Riru core and tried both frameworks. All this stuff worked before on my phone before the new magisk update or googles updated something maybe

had to install framework via TWRP. Got HiddenCore Module going and safety net check pass!!! However still cant redeem offers with macas because of security check fail. Wonder what there looking for now. Removed everything before and just hid with magisk but they must have updated. Also cant see my netflix in google play like i used to