Hello,
I am looking to see if anyone has gotten SELinux to go to permissive from Enforcing? I tried a couple of apps but it seems that the stock Samsung 4.3 even with Knox disabled is not letting me set it to permissive permanently. The only way I can get it to work is in a terminal and "setenforce 0" but it is active only for that session. I am running Linux on the tablet but because of this SELinux policy it blocks some advanced features such as being able to use KDE, Gnome, or Mate desktop because the needed communications on the dbus are stopped.
Any help would be great!
Thanks
I am running a rooted Samsung Note 10.1 2014 WiFi 32GB with US 4.3 MK1 firmware version
Have you flashed the SE permissive kernel that got posted? Also how did you get Linux up ad running
Sent from my SM-P600 using XDA Premium 4 mobile app
Duly.noted said:
Have you flashed the SE permissive kernel that got posted? Also how did you get Linux up ad running
Sent from my SM-P600 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
Didn't know a new kernel was out. I may try that at some point once I am a little braver
Thank you
Here is a link to a thread, near the bottom I posted how I got it going. There are still some script errors and I am trying to talk with developer. I used the Android on Linux or Complete Linux Installer app. Because of the enforcing mode it blocks the more advanced installs, but I do have 2 LXDE versions going Ubuntu Small 13.10 and 13.04
http://forum.xda-developers.com/showthread.php?t=2587915
quser1 said:
Hello,
I am looking to see if anyone has gotten SELinux to go to permissive from Enforcing? I tried a couple of apps but it seems that the stock Samsung 4.3 even with Knox disabled is not letting me set it to permissive permanently. The only way I can get it to work is in a terminal and "setenforce 0" but it is active only for that session. I am running Linux on the tablet but because of this SELinux policy it blocks some advanced features such as being able to use KDE, Gnome, or Mate desktop because the needed communications on the dbus are stopped.
Any help would be great!
Thanks
I am running a rooted Samsung Note 10.1 2014 WiFi 32GB with US 4.3 MK1 firmware version
Click to expand...
Click to collapse
Try to use Wanam Xposed to set permissive. In note 10.1 I didn't test yet, but in SGS4 works like a charm!
I've used wanam xposed in Note 10.1 (P601) to set official status and get OTA updates
feller said:
Try to use Wanam Xposed to set permissive. In note 10.1 I didn't test yet, but in SGS4 works like a charm!
I've used wanam xposed in Note 10.1 (P601) to set official status and get OTA updates
Click to expand...
Click to collapse
I just tried this now. The information in the About screen still shows the SELinux as Enforcing after activating the module in the framework, rebooting, changing the option in Wanam Xposed and rebooting again twice just to make sure i didn't miss anything.
Related
I am just a newbie, but while customizing Stock android 5.0.2 on my xperia zl with locked bootloader, I got error due to 100% SeLinux enforcement on android lollipop, Even though my cell is rooted with xposed installer installed with working app_process and XposedBridge.jar, these security policies even can't let you do anything, there are just a few customization and rooted apps which run on lollipop with SELinux enforcement. After searching net I got SELinuxmodechanger.apk having two modes permissive and enforcement but apk had'nt worked, its only for android kitkat, after searching more -----
I got a post by @zxz0O0 http://forum.xda-developers.com/showpost.php?p=59879026&postcount=3837
He had made a zip file to byepass SELInux enforcement, later on it was implement in XZDUALRECOVERY 2.8.15 flashable zip file and even inside XZDUALRECOVERY 2.8.15 installer,
But it was not working for Xperia T2, Z, ZL, ZR and Tablet Z causing bootloop, after few weeks XZDUALREVOVERY 2.8.16 is released and a beta version 2.8.17 also with updated byeselinux to run on all xperia devices runing lollipop.
http://forum.xda-developers.com/showthread.php?t=2261606
As now dual revovery is working fine on my xperia zl locked running lollipop, but the time I checked SELinux status on Terminal using command sestatus it says it on permissive mode. Well permissive mode is a condition that SELinux is active but it provide access to get control to few things without protection. And I still got errors due to SELinux, For full customization it should be on third mode i.e Disabled in which SELinux in completly disabeled, After searching more on net and xda I found that SELinux can only be completly disabled by flashing another kernal without SELinux protection or set SELinux disabled by default. It was the early stage of lollipop when people root it by flashing kernal without SElinux protection or SElinux disable by default, later on @Chainfire made another method to root android lollipop with 100% SELinux enforcement by using zygote service as its only accessable on lollipiop, which we use now, but it dont provide access to all content, for that SELinux should be completly disabled, which can only be done by flashing another kernal without SELInux protection or set SELinux disabled by default.
Please if you are a developer and reading this, do consider my request. As I don't knowz how to compile kernal from source code but you can. As my bootloader is locked running stock lollipop please make alternate stock kernal for locked bootlader as it will work on unlocked bootloaders also.
Well I found another security check also on Android Lollipop i.e PIE Security check, Well thanks to @cernekee starting a thread for bypassing pie provide a flashing zip-
http://forum.xda-developers.com/google-nexus-5/development/fix-bypassing-pie-security-check-t2797731
but that byepass-pie.zip had'nt work for xperia zl lollipop, but another member inside the thread @4tune provided another flashable zip which worked with Xperia zl running lollipop and successfully bypassed the PIE Security check on xperia zl lollipop, It may help you, its link down there -
http://forum.xda-developers.com/showpost.php?p=57467067&postcount=65
Now coming back to the actual post, please please please if someone knowz how to compile a new kernal from source code and simultaneously can remove or completly disabled SELInux protection, please do make and post it ! It will help a lot to customize on Xperia zl Locked and Unlocked both running Stock lollipop.
Try selunix mode changer apk it works
Sent from my D6603 using Tapatalk
zombiej79 said:
Try selunix mode changer apk it works
Sent from my D6603 using Tapatalk
Click to expand...
Click to collapse
Not working ! Selinux mode changer works mainly for kitkat as I mentioned. But even after flashing byeselinux implented with XZDualrecovery 2.8.16, Its showing in terminal that its on permissive mode, but still not providing permission on few policies !
Hi folks,
Did anyone get viper4android (XHiFi or FX) working on the G4? I tried the normal lollipop version but it screws up the camera; video recording fails within 1 second, probably due to some ALSA config or whatever (I'm no expert). I did see some closed thread (audio-engine-absolute-sound-project-t3015180"]http://forum.xda-developers.com/android/software/audio-engine-absolute-sound-project-t3015180[/URL]) on TASP where @ahrion did his best to make an all-in-one package for install on newer devices. I will see how that goes, but I'm more hoping on someone chiming in to tell me how to do it instead of reinventing the wheel so to speak...
- update -
Just tried the TASP package found elsewehere on the internet (13b version) and that seems to work, except for the permissive mode which doesn't stick to permissive. I'm running v10b (or 10c depending how you look at it) and it seems the adb su 0 setenforce 0 command doesn't work like it did on 10a?
So last step, I'm stuck on is setting SELinux to permissive... Iet's google some more
Don't you need to be rooted for viper to work? That's 1 of the main reasons I want root
Sent from my VS986 using Tapatalk
Yes and I have root. It's definitely SELinux, setenforce 0 does the trick until reboot...
https://www.dropbox.com/s/vri6pb4vb38bhsu/viper_v2.3.4.0_-_remove_fx_build_fix.zip?dl=0
Gesendet von meinem LG-H815 mit Tapatalk
Thanks, interesting... but, what exactly am I flashing with this? Looks like a modified viper installer, but does it also take care of SELinux?
Who made this ? I want to see if there is any updates,working good for me !
I thought you couldn't permanently change SELinux to permissive on Android 5 unless you were using a custom firmware like AOSP.
leijonasisu said:
I thought you couldn't permanently change SELinux to permissive on Android 5 unless you were using a custom firmware like AOSP.
Click to expand...
Click to collapse
You thought right.
There's an app on Fdroid called "SeLinux Mode Changer" that'll set the SeLinux state to permissive on every boot. But Google doesn't like the app, so it randomly remembers you to remove the app.
About gave up for months, then it clicked in my mind when i saw a post mention to make sure all other audio apps redirect eq to viper, and if not, change them. Even if you dont use a certain audio player app, change it too.
Problem is, i could not get the lg music app (which i never use) to change the equalizer to viper, it just had it's own default settings, so i ignored it. So i decided to revisit the lg app, and froze the app with link2sd, i also froze the lg video app too, just in case. Rebooted and now viper sees NEON and i can even run without compatibility mode (which did not work consistantly for me) .
I tried all steps to get this to work, not sure what other things are needed for everyone else, but i tried moving viper to system, installed selinuxmodechanger, maybe this can be uninstalled now, i have no idea. I have no plans to fix what isnt broken and find out myself, so just try freezing lg music app for starters.
Hope it works for you, if so, let the community know what steps you had to do!
involver said:
Hi folks,
Did anyone get viper4android (XHiFi or FX) working on the G4? I tried the normal lollipop version but it screws up the camera; video recording fails within 1 second, probably due to some ALSA config or whatever (I'm no expert). I did see some closed thread (audio-engine-absolute-sound-project-t3015180"]http://forum.xda-developers.com/android/software/audio-engine-absolute-sound-project-t3015180[/URL]) on TASP where @ahrion did his best to make an all-in-one package for install on newer devices. I will see how that goes, but I'm more hoping on someone chiming in to tell me how to do it instead of reinventing the wheel so to speak...
- update -
Just tried the TASP package found elsewehere on the internet (13b version) and that seems to work, except for the permissive mode which doesn't stick to permissive. I'm running v10b (or 10c depending how you look at it) and it seems the adb su 0 setenforce 0 command doesn't work like it did on 10a?
So last step, I'm stuck on is setting SELinux to permissive... Iet's google some more
Click to expand...
Click to collapse
Any chance you have a link to download TASP 13B? I absolutely cannot find it on the official dev page. Maybe I am blind.
I've sent you a PM with the link
involver said:
Yes and I have root. It's definitely SELinux, setenforce 0 does the trick until reboot...
Click to expand...
Click to collapse
Enable Init.d on your rom and put a script with the following lines in it in the /etc/init.d folder.
#!/system/bin/sh
setenforce 0;
That should set SELinux to permissive at runtime.
Hi - thanks for your tip, but I've moved on to the V10 and then to the OP3 since then
I have been trying to set my Nexus 7 2013(flo) to permissive from enforcing, but I haven't been able to successfully keep it permanently. The reason for this is that I want viper4android to work, but from what I remember viper requires permissive. I am just coming back to a vanilla device and there's a lot I have missed. Last nexus device I used was the Galaxy Nexus.
What I am running on the tablet and required info to know:
RR-N-v5.8.5-20170925-flo-final (Resurrection Remix OS)
Viper4android was installed via magisk
Also alienoid mod was installed to apparently help viper to work
MusicFX was uninstalled via Titanium Backup
Any help appreciated and if there's another thread with the same problem I have, feel free to direct me to it!
batsup606 said:
I have been trying to set my Nexus 7 2013(flo) to permissive from enforcing, but I haven't been able to successfully keep it permanently. The reason for this is that I want viper4android to work, but from what I remember viper requires permissive. I am just coming back to a vanilla device and there's a lot I have missed. Last nexus device I used was the Galaxy Nexus.
What I am running on the tablet and required info to know:
RR-N-v5.8.5-20170925-flo-final (Resurrection Remix OS)
Viper4android was installed via magisk
Also alienoid mod was installed to apparently help viper to work
MusicFX was uninstalled via Titanium Backup
Any help appreciated and if there's another thread with the same problem I have, feel free to direct me to it!
Click to expand...
Click to collapse
Use arise 2.94 aroma installer for viper, u will find the download link at the XDA arise thread (post 4).
If u use magisk u will mostly have to stay permissive for viper.
Use the magisk permissive script module. Simply google magisk permissive, u will find the XDA download link.
U can use latest SuperSU for root instead, if you use SuperSU
your chances to run viper with selinux enforced are pretty good.
I have successfully put together a method to get Dolby Digital Plus and Viper4Android running on Redmi Note 8 Pro. Firstly I am rooted on 11.0.6 Global and using LR-TWRP as recovery. On another note I have tried nearly every recovery on this Forum but the only one that doesn't give me a black screen the LR-TWRP.
1. First you need to get the Android running in Permissive mode. For me the Magisk module DID NOT work. To get permissive I found a file on another forum that someone was using on other Redmi devices. It works perfectly with no flaws. Boot into TWRP flash Permissiver_v4_2.zip. And boot back into the device.
***Note.. If you upgrade rom using TWRP as I did from 11.0.2 to 11.0.6. You will have to reflash this file to get everything running properly.
2. Open Magisk and flash ViPER4Android_FX-v2.7.1.0(2710).zip. Reboot device and the open V4A. You should be prompted to install driver. Do so and reboot if prompted to, I don't remember for sure if it makes you or not.
3. Open Magisk and flash 2.1Audio_Modification_Library-v2.4.zip and then reboot.
***NOTE.. Only this version of Audio Modification I have had luck with getting this to run. I updated this file after having everything completely setup and working and it broke V4A and Dolby. Had to uninstall and reinstall this version..
4. Boot into TWRP, NOT Magisk and flash Dolby_Digital_Plus_v.6.5.zip
5. On reboot confirm everything is working. For me it is working flawlessly. Below is a link to the files you will need.
DOWNLOAD
Gonna try this now because the previous tutorial about v4a does work but the moment I plug in my earphones, the status changes to "abnormal"
djgilquirino said:
Gonna try this now because the previous tutorial about v4a does work but the moment I plug in my earphones, the status changes to "abnormal"
Click to expand...
Click to collapse
That is likely due to your phone not being in permissive mode. I've seen that guide as well. I took my past knowledge of getting Viper + Dolby to work and came up with this solution. Being in permissive mode is required for both apps to function
I just found out the reason why my V4A doesn't work when I plug in my headset/earphones. To all those who use poweramp and set your output to "Hi-Res Output", make sure your sample rate is set to 48khz. Setting it to 96khz and up changes the status on V4A to abormal and won't work.
Thanks bro. It is working for me as well you made my day..
rraghava10 said:
Thanks bro. It is working for me as well you made my day..
Click to expand...
Click to collapse
Awesome my dude!! Glad I could help. I'm new to writing guides but love this device and would like to encourage its development as much as I can.
When I flash V4A it functions properly however my SIM card is no longer recognize. When I uninstall V4A my sim is restored. What's up with that?
chugs said:
When I flash V4A it functions properly however my SIM card is no longer recognize. When I uninstall V4A my sim is restored. What's up with that?
Click to expand...
Click to collapse
That is extremely weird. Never heard of anything like that before. Just a couple thoughts but do you have BusyBox installed through Magisk and have your phone set to permissive already?? Also what MIUI version are you running. I have tested this successfully on 11.0.2 and 11.0.6 Global.
I'm still down on 10.4. I haven't been convinced to move to 11
Worked perfectly from EEU (EU) rom moved to 11.0.6 (Global)!
Thank you very much!
alejandromujica.rsm said:
Worked perfectly from EEU (EU) rom moved to 11.0.6 (Global)!
Thank you very much!
Click to expand...
Click to collapse
Your welcome and that's awesome.. Glad I could help bro!
https://ibb.co/YLt7r7s result miui global 11.0.2 err
anasfanani said:
https://ibb.co/YLt7r7s result miui global 11.0.2 err
Click to expand...
Click to collapse
You are not permissive. That is the exact error I got before I found the file I reference to flash to get 'permissive'. To check your status go to terminal and first 'su' to get root. Then type 'getenforce'. Make sure your device is showing permissive. If this is notthe problem I would be surprised. Let me know and I will help you work the problem..
bpawnz said:
You are not permissive. That is the exact error I got before I found the file I reference to flash to get 'permissive'. To check your status go to terminal and first 'su' to get root. Then type 'getenforce'. Make sure your device is showing permissive. If this is notthe problem I would be surprised. Let me know and I will help you work the problem..
Click to expand...
Click to collapse
Thanks. The problem is in selinux magisk module. I uninstalled and install other selinux app from https://github.com/MrBIMC/SELinuxModeChanger and its works
anasfanani said:
Thanks. The problem is in selinux magisk module. I uninstalled and install other selinux app from https://github.com/MrBIMC/SELinuxModeChanger and its works
Click to expand...
Click to collapse
Awesome. The file I reference will change se status from boot. That app I think you have to set it after every reboot if I remember correctly. Regardless I'm glad you got it working. FYI.. Dolby won't show up as an installed app if your not running permissive as well. I know that from trial and error. Glad you got it working!
Steps work. Will confirm if this is any better than standalone V4A
[Update]
Yup. Definitely way better sound quality comparing to the previous methods i used. Also thanks for sharing permissiver.. The previous way i used to change SELinux was a massive pain in my neck. (Global phone on 11.0.2 Global ROM) Looking to see how v4a will fare in upcoming custom ROMs.
Do we have any dual speaker audio sound mod for our note 8 pro global?
+1 to dual speaker mod!
bpawnz said:
Awesome. The file I reference will change se status from boot. That app I think you have to set it after every reboot if I remember correctly. Regardless I'm glad you got it working. FYI.. Dolby won't show up as an installed app if your not running permissive as well. I know that from trial and error. Glad you got it working!
Click to expand...
Click to collapse
Dolby digital is not working after android 10 update... need the version update
Dear all, please note and be aware, this mod will not work on android 10 because
1. dolby digital version is not supported as i stated earlier..
2. when we change SE linux to permissive, phone becomes laggy and many secured application will not work... i have personally tried that may be because of high security of android 10.. i think we will need a custom rom
I have had Redmi Note 8 Ginkgo since December. From then on, I am waiting patiently for the appearance of refined custom roms. Recently, roms have finally appeared where all camera lenses work! But I miss one thing very much... Since I had the RN4x I have been using the Dolby Plus mod. In the RN8 it clearly improves the sound, has more bass and is louder. I mean the sound on the built-in speaker, not on the headphones. Dolby Plus can handle bass better on the built-in speaker than the Viper4Android.
This mod however requires SeLinux to be permissive. All android 10 roms that I tried have a SeLinux Enforced kernel - for some reason switching between enforce and permissive is blocked. Even some roms do not allow flash another kernel.
How do I unlock the ability to switch Selinux enforced to perrmisive when the magisk SELinux Manager module is not working?
kaem84 said:
I have had Redmi Note 8 Ginkgo since December. From then on, I am waiting patiently for the appearance of refined custom roms. Recently, roms have finally appeared where all camera lenses work! But I miss one thing very much... Since I had the RN4x I have been using the Dolby Plus mod. In the RN8 it clearly improves the sound, has more bass and is louder. I mean the sound on the built-in speaker, not on the headphones. Dolby Plus can handle bass better on the built-in speaker than the Viper4Android.
This mod however requires SeLinux to be permissive. All android 10 roms that I tried have a SeLinux Enforced kernel - for some reason switching between enforce and permissive is blocked. Even some roms do not allow flash another kernel.
How do I unlock the ability to switch Selinux enforced to perrmisive when the magisk SELinux Manager module is not working?
Click to expand...
Click to collapse
Try the following Magisk module. Download and install it via TWRP: SELinux Switch
shadowstep said:
Try the following Magisk module. Download and install it via TWRP: SELinux Switch
Click to expand...
Click to collapse
Please read the last sentence of my post. I used two ways to change selinux, they work on miui, on
other custom android pie roms. Is this module from you unique?
kaem84 said:
Please read the last sentence of my post. I used two ways to change selinux, they work on miui, on
other custom android pie roms. Is this module from you unique?
Click to expand...
Click to collapse
I did read your entire post. I was just offering an alternative, so whether or not you want to give it a shot, is upto you. If it works for you, great. If it doesn't, get in touch with your ROM developer. Over, and out. :good:
SELinux
There's an app called SELinux mod changer, try that. I used that to change permission to permissive on my ginkgo(Android 10) and it works perfectly.
shadowstep said:
I did read your entire post. I was just offering an alternative, so whether or not you want to give it a shot, is upto you. If it works for you, great. If it doesn't, get in touch with your ROM developer. Over, and out. :good:
Click to expand...
Click to collapse
Respect man, this magisk module works!
The few modules that I was using apparently did not work properly with android 10. I thought the kernel was blocked in some way, and this is a matter of choosing the latest selinux switcher.
Here is the link to the source where this magsik SELinux Switch module comes from:
https://github.com/nipunnarang/selinux-switch
Do you know how with some magisk module or buildprop modification to:
- set the back button to close / kill the application
- the appearance of recent applications was like in android oreo?
I found scripts for it once, modules and now I can't. I prefer not to install xposed
kaem84 said:
Respect man, this magisk module works!
The few modules that I was using apparently did not work properly with android 10. I thought the kernel was blocked in some way, and this is a matter of choosing the latest selinux switcher.
Here is the link to the source where this magsik SELinux Switch module comes from:
https://github.com/nipunnarang/selinux-switch
Do you know how with some magisk module or buildprop modification to:
- set the back button to close / kill the application
- the appearance of recent applications was like in android oreo?
I found scripts for it once, modules and now I can't. I prefer not to install xposed
Click to expand...
Click to collapse
Good to know it works. I made it. The link you've provided is my GitHub. Also, no, I don't know if there's a Magisk module for those two things. For the former, you can try using Button Mapper. It requires root, but not Xposed. And for old Oreo style recents, it needs a modification to the ROM, which can't be done via a simple Magisk module.