How to Disable SElinux on a Galaxy S6 (ARCH64)? - Upgrading, Modifying and Unlocking

Closed per OP request
I'm trying to install custom roms on my phone but can't due to this stupid "Enforcing" problem that exists in my android phone. I tried the terminal way (Sentenforce 0), but no luck! So I tried disabling the SElinux by installing a custom kernel but am getting red text during boot that says "Kernel is not SEandroid enforcing". What exactly is that? I have root, but I also have knox apps that I removed. However, I am unsure if it is the KNOX that is preventing the SElinux from being changed from enforcing to permissive. Is it? If I go to my settings, and go to "About Phone", I see the knox info.
KNOX version:
KNOX 2.4
SE for android 2.3.0
TIMA 3.0
Container 2.4.0
and so-forth.
My android INFO:
5.0.2 Lollipop
ARM64
Odexed
ART runtime
Carrier is Straight Talk.
Model is SM-S906L
Did I not remove all the knox apps? Or is part of the KNOX embedded into the Kernel? Anything I should modify to disable the KNOX entirely?? And what about the permissions for the Kernel?
So what is going on???? Is it the KNOX that's preventing SElinux from being changed to permissive? I would really appreciate it if someone could figure this out! I don't know everything about Android so I really need some help. :silly:

Related

SG3 Update - Battery Killer & Knox

i updated to 4.3 today and i got 2 questions:
1) it drains my battery big time! has anyone noticed this too?
2) i didnt agree to nor did i install knox. so, does that mean i'm able to root my phone without tripping knox?
Installing official firmware installs Knox work it. Rooting your phone will trip it
TW 4.3 WITH A TOUCH OF KITT KATT
calexchelse said:
Installing official firmware installs Knox work it. Rooting your phone will trip it
TW 4.3 WITH A TOUCH OF KITT KATT
Click to expand...
Click to collapse
There is a lot of misinformation flying around about Knox and 4.3 in general. Knox files are present, but it does not appear to be activated (because there is an option to do so).
seLinux (shield icon in notification bar) is creating huge problems with root on 4.3. I think you need a insecure kernel to force it into permissive mode instead of the default enforcing mode, but I didn't do any research on that.
This warranty bit thing looks like another flash counter (aka "Knox counter"). Not sure of it's relevance. It does not appear to have any.
The one way MJC upgrade, I don't think is related to any of these. When I Odin'd MJC, it rebooted itself into recovery and updated something then rebooted again, when normally that extra reboot would not be required. Changing of partition layouts to make room for more bloatware, I don't know. But it did something it's never done before. And I've used Odin dozens of times.

i have root access after update to 4.3 and a question.?

so guys i had my device stock rooted i did the update to 4.3 and i still have access to root
i didn't even use keep root i just update which it took like 30 minutes
my device was running 4.1.2 and device status was normal with root
i think that is the trick to have your device rooted but
under about-status=normal
question what does SE for android status=enforcing mean
Use Root Checker app from Play Store to see if you are really Rooted.
SELINUX or Secure Linux is the newest addition to 4.3 over previous versions. It adds secure functionality. More here.
In previous version of 4.2, SELINUX was in a permissive mode meaning it'd let apps do what they want. Now with Enforcing mode, it prevents unauthorized access.

P600: A small observation and a couple of questions (Knox 0x1, TriangleAway, etc.)

I've noticed that there's been some discussion about the new knox bootloader in regards to rooting our device. Now, when I boot my I9505 into download mode I get this wall of text in the upper left corner telling me "knox warranty void 0x1 blah blah" and likewise when I boot into recovery captain obvious knox pops up in the corner reminding me that I'm running a custom recovery.
Now that I have rooted my tablet and flashed TWRP via Odin I have yet to see a single sign of that infamous knox flag. Download mode - nothing, recovery boot - nothing... nothing except my settings telling me my device status is custom, and even that can be spoofed via Wanam Xposed.
Am I missing something or is the knox bootloader simply not present in my firmware version? (XXUBMJ6 NEE/nordic countries)
Also, has anyone had success using TriangleAway on the P600 to reset the flash counter? Not that I currently need it, just curious..
Sent from my SM-P600 using XDA Premium HD app
TWRP?
Andmoreagain said:
I've noticed that there's been some discussion about the new knox bootloader in regards to rooting our device. Now, when I boot my I9505 into download mode I get this wall of text in the upper left corner telling me "knox warranty void 0x1 blah blah" and likewise when I boot into recovery captain obvious knox pops up in the corner reminding me that I'm running a custom recovery.
Now that I have rooted my tablet and flashed TWRP via Odin I have yet to see a single sign of that infamous knox flag. Download mode - nothing, recovery boot - nothing... nothing except my settings telling me my device status is custom, and even that can be spoofed via Wanam Xposed.
Am I missing something or is the knox bootloader simply not present in my firmware version? (XXUBMJ6 NEE/nordic countries)
Also, has anyone had success using TriangleAway on the P600 to reset the flash counter? Not that I currently need it, just curious..
Sent from my SM-P600 using XDA Premium HD app
Click to expand...
Click to collapse
hi. I want to know how you flashed TWRP for P600 as i cant find the file anywhere on the internet. . I rooted it using a stock recovery. I froze the knoxx apps as they were interfering with my root and giving notifications on a security threat. Please any help with TWRP i cant find it.
ahsenrauf said:
hi. I want to know how you flashed TWRP for P600 as i cant find the file anywhere on the internet. . I rooted it using a stock recovery. I froze the knoxx apps as they were interfering with my root and giving notifications on a security threat. Please any help with TWRP i cant find it.
Click to expand...
Click to collapse
Here, download the .tar file 2.6.3.3 & flash via odin
http://goo.im/devs/OpenRecovery/lt03wifiue
There is a big discussion about this in a german forum is use:
http://www.pocketpc.ch/samsung-gala...278-anleitung-root-fuer-note-10-1-2014-a.html
It's weird that the p600 does not have the same download mode display as the p605. It says nothing about knox on the p600 download mode. So the guys on the other forum are confident that triangle away should work to reset the counter on p600 because it's not a knox flag. But as far as I know Triangle Away does not support the note 10.1 2014 yet. So I guess we have to wait and see
clouds5 said:
It's weird that the p600 does not have the same download mode display as the p605...
Click to expand...
Click to collapse
Strange, strange... because first I got this. See: http://forum.xda-developers.com/showthread.php?t=2538464
But now the text in the left corner is missing. Maybe because I use the wanam tweck? This means that there is - maybe - no hardware flag
PS. Also when I open the system update in the settings, I didn't get any longer a warning that the update is blocked?! I got it in the beginning...
clouds5 said:
There is a big discussion about this in a german forum is use:
http://www.pocketpc.ch/samsung-gala...278-anleitung-root-fuer-note-10-1-2014-a.html
It's weird that the p600 does not have the same download mode display as the p605. It says nothing about knox on the p600 download mode. So the guys on the other forum are confident that triangle away should work to reset the counter on p600 because it's not a knox flag. But as far as I know Triangle Away does not support the note 10.1 2014 yet. So I guess we have to wait and see
Click to expand...
Click to collapse
Thanks for the reply and the link.
A "warranty void etc." message has popped up in download mode as of now but you're right, it says nothing about knox whatsoever, and the strange part is is that it didn't appear until I actually flashed a mod via recovery and wiped cache/dalvik. Before that there was no message in the corner, even though I had already flashed cf-root and TWRP via Odin.
Elim said:
Also when I open the system update in the settings, I didn't get any longer a warning that the update is blocked?! I got it in the beginning...
Click to expand...
Click to collapse
Same here. Even though there were no updates available at the time I last checked I got no warning message.
Maybe the P600 just has less security implementations than the other versions for whatever reason...
''Knox warranty void 0x1'' is the KNOX FLAG. It means that you cannot use the secure Knox container, and you will not get OTA update. Of course you can download and install new software updates.
shayind4 said:
''Knox warranty void 0x1'' is the KNOX FLAG. It means that you cannot use the secure Knox container, and you will not get OTA update. Of course you can download and install new software updates.
Click to expand...
Click to collapse
No warranty too, though, sadly...
shayind4 said:
''Knox warranty void 0x1'' is the KNOX FLAG. It means that you cannot use the secure Knox container, and you will not get OTA update. Of course you can download and install new software updates.
Click to expand...
Click to collapse
Yes, but it does not say anything about "KNOX" or "0x1" when I enter Download Mode. I should also correct what I said in my previous post. It doesn't say "Warranty Void" but rather "Warranty Bit: 1".
ODIN MODE
PRODUCT NAME: SM-P600
CURRENT BINARY: CUSTOM
SYSTEM STATUS: OFFICIAL
WARRANTY BIT: 1​
This is identical to how it used to be on the old 4.2.2 non-knox bootloaders and it's NOT the Knox flag. It's the binary counter.
Andmoreagain said:
Yes, but it does not say anything about "KNOX" or "0x1" when I enter Download Mode. I should also correct what I said in my previous post. It doesn't say "Warranty Void" but rather "Warranty Bit: 1".
ODIN MODE
PRODUCT NAME: SM-P600
CURRENT BINARY: CUSTOM
SYSTEM STATUS: OFFICIAL
WARRANTY BIT: 1​
This is identical to how it used to be on the old 4.2.2 non-knox bootloaders and it's NOT the Knox flag. It's the binary counter.
Click to expand...
Click to collapse
I have SM-P605. I think Knox bootloader is present from 4.3 onward. If SM-P600 has Knox app in the apps drawer and Knox security apps under Application manager then it's likely to have a Knox bootloader Tripping the Knox flag means the Knox container can never be accessed or used again but the phone/tablet itself is OK for regular use. I have not come across a phone/tablet with Knox apps and non-Knox bootloader.
Knox has been mentioned in this SM-P600 thread: http://forum.xda-developers.com/showthread.php?t=2618509
shayind4 said:
I have SM-P605. I think Knox bootloader is present from 4.3 onward. If SM-P600 has Knox app in the apps drawer and Knox security apps under Application manager then it's likely to have a Knox bootloader Tripping the Knox flag means the Knox container can never be accessed or used again but the phone/tablet itself is OK for regular use. I have not come across a phone/tablet with Knox apps and non-Knox bootloader.
Knox has been mentioned in this SM-P600 thread: http://forum.xda-developers.com/showthread.php?t=2618509
Click to expand...
Click to collapse
Whether a Knox bootloader is present in the P600 or not, then at least the flag is not visible in download mode or during boot. Either way I'm satisfied as long as I don't have to be reminded every day that my tablet is running an unofficial kernel and recovery.
Andmoreagain said:
Whether a Knox bootloader is present in the P600 or not, then at least the flag is not visible in download mode or during boot. Either way I'm satisfied as long as I don't have to be reminded every day that my tablet is running an unofficial kernel and recovery.
Click to expand...
Click to collapse
So who turns their tablet off? Mine runs 24/7...
Help!!!!
I think I made the half brick from the P605.
The message SECURE CHECK FAIL: recovery - appiar when trying to use ODIN. (custom recovery)
The REACTIVATION LOCK is ON . How to avoid it????
Please help!
Thanks a lot!

[ROOT] Should i disable knox after rooting?

I'm new to samsung devices but i have a good idea about knox now.
I rooted using autoroot and all is good but supersu keeps telling me it detects knox and can disable it for me. I canceled everytime since knox is not causing me any issues and my apps are getting root access just fine. So should i give in to supersu demands and let it disable knox or not?
Knox is pretty useless. Its a security app from samsung. You already tripped knox so why no disable it lol. When I was on stock i saw that it was training battery. So i rooted and disabled it and nothing is wrong. If you dont use knox, then you can disable it. Knox sometimes blocks root from certain apps.

Knox issue on P605

Hello, after a search on these forums I could not find any topic about my specific problem so here goes.
I purchased a secondhand P605.
When I checked the Knox trigger it said 0x1, which made me wonder if anyone tried to root it before. It is not rooted at the moment, and I am unable to root it because Knox prevents it. I did update it to Lollipop.
So, I took to the Web and tried to disable Knox. This seems impossible, due to the fact that I don't even have permission to enter the Knox container!
Does anyone have any idea how to disable Knox when one doesn't have access to Knox at all?
Thanks in advance.
Airethilien said:
Hello, after a search on these forums I could not find any topic about my specific problem so here goes.
I purchased a secondhand P605.
When I checked the Knox trigger it said 0x1, which made me wonder if anyone tried to root it before. It is not rooted at the moment, and I am unable to root it because Knox prevents it. I did update it to Lollipop.
So, I took to the Web and tried to disable Knox. This seems impossible, due to the fact that I don't even have permission to enter the Knox container!
Does anyone have any idea how to disable Knox when one doesn't have access to Knox at all?
Thanks in advance.
Click to expand...
Click to collapse
If you updated to 5.1.1 then you need a modded kernel to root. Install TWRP, then flash new kernel and then flash supersu.
Your P605has definitely been modified either with a kernel or recovery, that's why you have Knox trigger 0x1.
Will try that , thank you.

Categories

Resources