any roms for our device with SELinux enforced - Moto G5S Plus Questions & Answers

Hey looking for a ROM with SELinux enforced as standard any body know any custom roms with this

you mean custom rom? I was searching some time ago and found nothing, only official one has selinux enforced.

QkiZMR said:
you mean custom rom? I was searching some time ago and found nothing, only official one has selinux enforced.
Click to expand...
Click to collapse
which one

stevegtrlmk said:
which one
Click to expand...
Click to collapse
all motorola official roms. i mean the stock roms.

QkiZMR said:
all motorola official roms. i mean the stock roms.
Click to expand...
Click to collapse
Hey are they safe to use with banking apps ? The custom ROMs.

I'm using AOSP Extended, SELinux permissive unfortunately, Magisk, EdXposed, XPL, AFWall, Storage Redirect and safety net pass so I can use GPay in stores. I also have two banking app and working fine.

Related

Kernel breaks root.

I re-did my kernel and all is well except it breaks both CM root and SU root. Where would be a good place to start looking in source?
Nexus 6, Marshmallow.
apophis9283 said:
I re-did my kernel and all is well except it breaks both CM root and SU root...
Click to expand...
Click to collapse
Flash SU as the last from Twrp-recovery.
NLBeev said:
Flash SU as the last from Twrp-recovery.
Click to expand...
Click to collapse
Flashing supersu does nothing it refuses to run
apophis9283 said:
Flashing supersu does nothing it refuses to run
Click to expand...
Click to collapse
CM has an option to enable or disable root. enable it. i really do dislike CM.
simms22 said:
CM has an option to enable or disable root. enable it. i really do dislike CM.
Click to expand...
Click to collapse
Im pretty sure its gonna be an anykernel issue where my ramdisk replaces the ROMs
apophis9283 said:
Im pretty sure its gonna be an anykernel issue where my ramdisk replaces the ROMs
Click to expand...
Click to collapse
nope, considering any kernel that works on aosp should also work on CM. anyways, you cant lise root by flashing a kernel. simce root is in sysyem, beside systemless root. and kernels dont touch your system.
simms22 said:
nope, considering any kernel that works on aosp should also work on CM. anyways, you cant lise root by flashing a kernel. simce root is in sysyem, beside systemless root. and kernels dont touch your system.
Click to expand...
Click to collapse
I cant get root on any ROM. AOSP or CM based. Now if I flash my old kernel it runs fine. On the new "rebased" kernel root is broken. Both SuperSU and CM root
apophis9283 said:
I cant get root on any ROM. AOSP or CM based. Now if I flash my old kernel it runs fine. On the new "rebased" kernel root is broken. Both SuperSU and CM root
Click to expand...
Click to collapse
now this might help me, if you cant get root on any rom, that it is a problem that you are doing yourself.. which version of supersu are you using?
simms22 said:
now this might help me, if you cant get root on any rom, that it is a problem that you are doing yourself.. which version of supersu are you using?
Click to expand...
Click to collapse
RR ROM uses CM root. Although Ive tried SuperSU and it just doesnt respond
apophis9283 said:
RR ROM uses CM root. Although Ive tried SuperSU and it just doesnt respond
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?t=3059493/
This is a prerooted lite stock rom with no issues.
When the info of @simms22 doesn't solve the root issue; give it a try.
RR rom is pre rooted as well. Ive had people test it on other roms still got snake eyes. Must be something i missed
apophis9283 said:
RR ROM uses CM root. Although Ive tried SuperSU and it just doesnt respond
Click to expand...
Click to collapse
try supersu 2.74 BETA-SuperSU-v2.74-2-20160519174328.zip
I think the issue is why its not working as it should. Pre rebase it works fine. Im missing something i just dont know what
Edit: if I knew what files could effect root I would have a place to start
apophis9283 said:
RR rom is pre rooted as well. Ive had people test it on other roms still got snake eyes. Must be something i missed
Click to expand...
Click to collapse
Have you read/searched about bump scripts.
http://forum.xda-developers.com/showthread.php?p=59907588/

Safetynet on marshmallow update

If you have taken the soak test marshmallow update, can your phone pass safetynet? Mine can't even though the software status says official, qe 0/1.
I believe if your bootloader is unlocked, that's enough to trip it now:
https://www.reddit.com/r/Android/comments/587ss9/psa_android_safetynet_now_tripped_by_unlocking/
ski4404 said:
I believe if your bootloader is unlocked, that's enough to trip it now:
https://www.reddit.com/r/Android/comments/587ss9/psa_android_safetynet_now_tripped_by_unlocking/
Click to expand...
Click to collapse
But using isu, all of the CM 14.1 based custom roms pass safetynet.
TheSt33v said:
But using isu, all of the CM 14.1 based custom roms pass safetynet.
Click to expand...
Click to collapse
Because @bhb27 is very smart dev?
ChazzMatt said:
Because @bhb27 is very smart dev.
Click to expand...
Click to collapse
Yes he is, but if I remember correctly, even he said that there was nothing he could do about hiding an unlocked bootloader from safetynet. Isu only hides cm root.
Hmm. Looks like CM can pass safetynet because they patched dm-verity in the kernel. Uhhhgggg. Sooo...anyone want to make a custom kernel for the Verizon soak test that patches dm-verity?
TheSt33v said:
Hmm. Looks like CM can pass safetynet because they patched dm-verity in the kernel. Uhhhgggg. Sooo...anyone want to make a custom kernel for the Verizon soak test that patches dm-verity?
Click to expand...
Click to collapse
you may want to ask CF directly for that.
koftheworld said:
you may want to ask CF directly for that.
Click to expand...
Click to collapse
I don't think he is in the business of editing kernels.
TheSt33v said:
Hmm. Looks like CM can pass safetynet because they patched dm-verity in the kernel. Uhhhgggg. Sooo...anyone want to make a custom kernel for the Verizon soak test that patches dm-verity?
Click to expand...
Click to collapse
koftheworld said:
you may want to ask CF directly for that.
Click to expand...
Click to collapse
TheSt33v said:
I don't think he is in the business of editing kernels.
Click to expand...
Click to collapse
@bhb27 makes a kernel that will install on stock Motorola Marshmallow Brazil. Maybe his will also install on stock Verizon.
ChazzMatt said:
@bhb27 makes a kernel that will install on stock Motorola Marshmallow Brazil. Maybe his will also install on stock Verizon.
Click to expand...
Click to collapse
True. I'll give that a shot when I get home. It didn't allow the other stock roms to pass safetynet, but those other roms were modified, so maybe it'll work for this one.
TheSt33v said:
True. I'll give that a shot when I get home. It didn't allow the other stock roms to pass safetynet, but those other roms were modified, so maybe it'll work for this one.
Click to expand...
Click to collapse
Brazil stock just got some kind of update, and he's not yet changed the kernel to work with it. He will when he gets time. See this page. It's possible Verizon's version of 6.0.1 has the same changes. So, it may not work right now.
http://forum.xda-developers.com/moto-maxx/development/kernel-bhb27-kernel-t3207526/page129
this appears to be an answer but we dont have kernel source yet to patch it. https://github.com/sultanxda/androi...mmit/abc05b16bbd33521c2fffaf491c5657a94bfcfc5
quantum tao said:
this appears to be an answer but we dont have kernel source yet to patch it. https://github.com/sultanxda/androi...mmit/abc05b16bbd33521c2fffaf491c5657a94bfcfc5
Click to expand...
Click to collapse
That commit is from October. As far as I know, CM14.1 roms (at least RR. I haven't tried the others) only started failing safetynet recently. I know for a fact that I could pass safetynet on AOKP a few weeks ago.

Should I really root my 3T?

Hello friends,
I am still very unsure whether I should root the 3T or not. With the previous I've always done it with the I want it somehow not yet. The custom roms are not yet fully developed. And since the latest update I have Battery Drain (3.5.4)
EmreSo said:
Hello friends,
I am still very unsure whether I should root the 3T or not. With the previous I've always done it with the I want it somehow not yet. The custom roms are not yet fully developed. And since the latest update I have Battery Drain (3.5.4)
Click to expand...
Click to collapse
Yes. You can still have root and TWRP on the stock rom. Just follow the guide so you don't get bootloop.
I have just installed the Tesla N ROM and its beautiful. Slider works. etc
A Sad Napkin said:
Yes. You can still have root and TWRP on the stock rom. Just follow the guide so you don't get bootloop.
I have just installed the Tesla N ROM and its beautiful. Slider works. etc
Click to expand...
Click to collapse
Battery Life in the Rom ? Works 1080p 60fps Video Record ? is camera good ?
A Sad Napkin said:
Yes. You can still have root and TWRP on the stock rom. Just follow the guide so you don't get bootloop.
I have just installed the Tesla N ROM and its beautiful. Slider works. etc
Click to expand...
Click to collapse
Hey, do you know if I will be able to get official OTAs if I have TWRP?
EmreSo said:
Battery Life in the Rom ? Works 1080p 60fps Video Record ? is camera good ?
Click to expand...
Click to collapse
Camera seems to keep crashing using the supplied camera. I haven't tried another APK yet EDIT: tried snap camera and all seems okay.
sajed98 said:
Hey, do you know if I will be able to get official OTAs if I have TWRP?
Click to expand...
Click to collapse
Yes you do i think, but i was already on the latest version. When i check for update its says none available so I gather its working.
A Sad Napkin said:
Camera seems to keep crashing using the supplied camera. I haven't tried another APK yet EDIT: tried snap camera and all seems okay.
Yes you do i think, but i was already on the latest version. When i check for update its says none available so I gather its working.
Click to expand...
Click to collapse
you would have to manually flash them since u have custom recovery.
My OP3T will be my christmas gift from my wife. i will root it and install twrp and using the stock rom. can i flash nougat over the stock rom also?
EmreSo said:
Hello friends,
I am still very unsure whether I should root the 3T or not. With the previous I've always done it with the I want it somehow not yet. The custom roms are not yet fully developed. And since the latest update I have Battery Drain (3.5.4)
Click to expand...
Click to collapse
You gain google dialer, google contacts, google assistant, xposed, full backups, identifying wakelocks, custom kernels and systemwide ad-blocking to name a few big things you can do just on rooted oxygenOS.
Just root it, the sooner, the better.
If you decide to do it later on, you'll have to backup everything since unlocking the bootloader implies wiping the data.

Is it worth installing CM now?

So I just got my O+3T about an hour ago and I love it, fastest phone I've ever owned by a mile.
I sold my brand new S7 Edge to buy this mainly because it was more developer friendly and I really love cm.
I realise there will be no more updates in terms of cm roms but what are the implications of installing cm now? Is it just security updates?
Is anyone else running cm now and keeping it regardless or is it a better idea to stick with/return to stock?
rm83855 said:
So I just got my O+3T about an hour ago and I love it, fastest phone I've ever owned by a mile.
I sold my brand new S7 Edge to buy this mainly because it was more developer friendly and I really love cm.
I realise there will be no more updates in terms of cm roms but what are the implications of installing cm now? Is it just security updates?
Is anyone else running cm now and keeping it regardless or is it a better idea to stick with/return to stock?
Click to expand...
Click to collapse
it is buggy as hell
Michalko5896 said:
it is buggy as hell
Click to expand...
Click to collapse
No? I'm assuming you're referring to cm14.1. Sultans cm13 is fast as hell and completely stable.
mforminio7 said:
No? I'm assuming you're referring to cm14.1. Sultans cm13 is fast as hell and completely stable.
Click to expand...
Click to collapse
Sure, but I have no intentions of using MM ROM in 2017 lol.
I'll use CM13 as long as all my apps continue to run and my xposed modules all work and my battery lasts 2-3 days with 10 hours of screen on time. XdaSultan and his ROM run perfect on my phone.
Cm14.1 is fine. The RR versions are even better. I would recommend the official RR build more then anything. Been running it for a while and not a single issue
c_86 said:
Cm14.1 is fine. The RR versions are even better. I would recommend the official RR build more then anything. Been running it for a while and not a single issue
Click to expand...
Click to collapse
What's the official RR builds?
I wouldn't trust these unofficial builds of CM (Lineage), both from sultan and koenkk. Most of the developers have no idea how to make safe roms + fact that they all turned off forceencrypt is just repulsive. I strongly recommend you to wait for official builds.
rm83855 said:
What's the official RR builds?
Click to expand...
Click to collapse
http://forum.xda-developers.com/oneplus-3t/development/rom-kernel-resurrectionremix-n-t3524715
Tesla N is good same with official RR. Other then that I wouldn't bother.
I've been happy with the stock rom using xposed, arise and systemless root with francos kernal and all running sweet as.
Michalko5896 said:
I wouldn't trust these unofficial builds of CM (Lineage), both from sultan and koenkk. Most of the developers have no idea how to make safe roms + fact that they all turned off forceencrypt is just repulsive. I strongly recommend you to wait for official builds.
Click to expand...
Click to collapse
Really? Just how unsafe is this, this is encryption right? I'm hoping lineage won't take too long, I suspect our device will be one of the first to receive it?
c_86 said:
http://forum.xda-developers.com/oneplus-3t/development/rom-kernel-resurrectionremix-n-t3524715
Click to expand...
Click to collapse
A Sad Napkin said:
Tesla N is good same with official RR. Other then that I wouldn't bother.
I've been happy with the stock rom using xposed, arise and systemless root with francos kernal and all running sweet as.
Click to expand...
Click to collapse
I assume these roms such as RR don't have cm themes? Does the systemless root work with Android Pay?
rm83855 said:
I assume these roms such as RR don't have cm themes? Does the systemless root work with Android Pay?
Click to expand...
Click to collapse
No the CM theme engine isn't out for nougat yet.
Yes it does. But you need Franco Kernal as well because it Bypasses the verified boot flag for Android Pay compatibility.
rm83855 said:
Really? Just how unsafe is this, this is encryption right? I'm hoping lineage won't take too long, I suspect our device will be one of the first to receive it?
Click to expand...
Click to collapse
What I have noticed is that many custom roms have poorly configured SELinux, many unfixed CVEs in kernel, disabled forceencrypt (encryption disabled by default, user must go to settings and manually turn it on, what most of the users don't do), distribution through unsecure channels and many more mistakes. Stock roms are mostly fine because google force OEMs to apply certain configurations to their roms. But unofficial developers have free hand, so they do whatever they want and results are sometimes atrocious. Official CM was pretty good, there were certain requirements that ROMs must have met and I really liked the way CM was compiled and distributed. Imho, if you are serious about security, you should wait for the official Lineage OS (if there will ever be the official Lineage OS).
Michalko5896 said:
What I have noticed is that many custom roms have poorly configured SELinux, many unfixed CVEs in kernel, disabled forceencrypt (encryption disabled by default, user must go to settings and manually turn it on, what most of the users don't do), distribution through unsecure channels and many more mistakes. Stock roms are mostly fine because google force OEMs to apply certain configurations to their roms. But unofficial developers have free hand, so they do whatever they want and results are sometimes atrocious. Official CM was pretty good, there were certain requirements that ROMs must have met and I really liked the way CM was compiled and distributed. Imho, if you are serious about security, you should wait for the official Lineage OS (if there will ever be the official Lineage OS).
Click to expand...
Click to collapse
That's a very valid point but security isn't a massive concern for me considering i set selinux to permissive for v4a anyway. I suppose even having root is classed as a security flaw in the first place.
Sultanxda always has the best optimized roms in terms of stability, photos and battery.
A Sad Napkin said:
No the CM theme engine isn't out for nougat yet.
Yes it does. But you need Franco Kernal as well because it Bypasses the verified boot flag for Android Pay compatibility.
Click to expand...
Click to collapse
Thanks so much, this community is awesome.
This phone is gorgeous, fast and dare I say near perfect. Finding the perfect set up over the next few days will be interesting. The sheer speed and smoothness of this phone is screaming "don't touch me" but oxygen os just isn't quite there for me yet, if it included a theme engine etc then I'd be sold.
rm83855 said:
Thanks so much, this community is awesome.
This phone is gorgeous, fast and dare I say near perfect. Finding the perfect set up over the next few days will be interesting. The sheer speed and smoothness of this phone is screaming "don't touch me" but oxygen os just isn't quite there for me yet, if it included a theme engine etc then I'd be sold.
Click to expand...
Click to collapse
no theme engine but it has a dark mode which is nice and you can change the accent colours.
OxygenOS with systemless root, systemless xposed makes it perfect. I'm just waiting for the official nougat update. I also have ARISE and DOLBY ATMOS as well.
A Sad Napkin said:
no theme engine but it has a dark mode which is nice and you can change the accent colours.
OxygenOS with systemless root, systemless xposed makes it perfect. I'm just waiting for the official nougat update. I also have ARISE and DOLBY ATMOS as well.
Click to expand...
Click to collapse
I didn't even notice this, the dark colour is much better. Did u have to set selinux to permissive for arise? Does this pose any issues with ota's, android pay etc?
rm83855 said:
I didn't even notice this, the dark colour is much better. Did u have to set selinux to permissive for arise? Does this pose any issues with ota's, android pay etc?
Click to expand...
Click to collapse
Android pay will work with system less root and magisk
It doesn't work with system less xposed. Just tested it although you can disable xposed and reboot then use Android pay but that's just hassle.
Selinux status I'm not 100% sure but I much prefer having xposed then Android pay. But that's me.

Which ROM for most settings and customizability?

Which ROM should I install if I want the most amount of settings and ways to customize things?
Some additional thoughts...
Does one even need a custom ROM these days, or can most things be changed using "Xposed installer"?
Are there any drawbacks using a custom ROM?
1. RR is a good choice IMO.
2. More features to play with. Themes. More updates.
3. Xposed doesn't exist on Nougat.
4. Nope except not be able to use full stock features. Stability? It depends on the ROMs and the maturity of the Android version.
Primokorn said:
1. RR is a good choice IMO.
2. More features to play with. Themes. More updates.
3. Xposed doesn't exist on Nougat.
4. Nope except not be able to use full stock features. Stability? It depends on the ROMs and the maturity of the Android version.
Click to expand...
Click to collapse
Thank you for a good response.
What are some of the stock features, just to get an idea?
white-k said:
Thank you for a good response.
What are some of the stock features, just to get an idea?
Click to expand...
Click to collapse
Oxygen OS apps (but you can get a port version for Camera and Gallery)
Dark UI (but you can flash a ROM supporting Substratum)
...
I don't remember OOS well and since I have a preference for custom ROMs over stock firmware I can't give you many reasons to stay on OOS. If you want to have the latest Android version, some day you will have flash a custom ROM.
Primokorn said:
Oxygen OS apps (but you can get a port version for Camera and Gallery)
Dark UI (but you can flash a ROM supporting Substratum)
...
I don't remember OOS well and since I have a preference for custom ROMs over stock firmware I can't give you many reasons to stay on OOS. If you want to have the latest Android version, some day you will have flash a custom ROM.
Click to expand...
Click to collapse
Thank you.
I've spent ten minutes trying to figure out which one is the official (or best) version of Resurrection Remix. Can you point me in the right way?
The one in your signature says it has a pirate-icon if you install pirate stuff. And while I may not do that, I still don't like the idea of that.
So which RR would you recommend?
white-k said:
Thank you.
I've spent ten minutes trying to figure out which one is the official (or best) version of Resurrection Remix. Can you point me in the right way?
The one in your signature says it has a pirate-icon if you install pirate stuff. And while I may not do that, I still don't like the idea of that.
So which RR would you recommend?
Click to expand...
Click to collapse
Checkout:
https://forum.xda-developers.com/on...pment/rom-kernel-resurrectionremix-n-t3524715
or
https://plus.google.com/+varund7726
white-k said:
Thank you.
I've spent ten minutes trying to figure out which one is the official (or best) version of Resurrection Remix. Can you point me in the right way?
The one in your signature says it has a pirate-icon if you install pirate stuff. And while I may not do that, I still don't like the idea of that.
So which RR would you recommend?
Click to expand...
Click to collapse
Both versions have this anti piracy measure I think.
I recommend the unofficial builds since I'm using them ?
It has extra features such as delta updates, signature spoofing support,... and the dev is always available to help and answer our questions.
Primokorn said:
Both versions have this anti piracy measure I think.
I recommend the unofficial builds since I'm using them
It has extra features such as delta updates, signature spoofing support,... and the dev is always available to help and answer our questions.
Click to expand...
Click to collapse
How many unofficial versions are there ?
SlyUK said:
How many unofficial versions are there ?
Click to expand...
Click to collapse
idk...
Primokorn said:
idk...
Click to expand...
Click to collapse
Fair enough. But you recommend this one:
https://forum.xda-developers.com/on...ent/rom-resurrection-remix-5-8-0-oms-t3527344
SlyUK said:
Fair enough. But you recommend this one:
Click to expand...
Click to collapse
You could have just flashed the ROM days ago, and have decided yourself; instead of waiting for others to dictate what you will or will not like. And just because someone recommends it, doesn't mean you will even like it.
redpoint73 said:
You could have just flashed the ROM days ago, and have decided yourself; instead of waiting for others to dictate what you will or will not like. And just because someone recommends it, doesn't mean you will even like it.
Click to expand...
Click to collapse
Agreed.
Agreed nicesoni ash has the best build in my opinion and the dev is great and very supportive of the rom and it's users. And there are lots of unofficial builds for nicesonis rom but you only need to install the latest one.

Categories

Resources