Sony Updates AOSP Sources to Android 5.0.1

Just a few days ago, Sony did an utterly fantastic job by pushing out numerous device trees for … more

Stop Your Screen From Turning Off with KeepItOn

We all know the feeling of reading a news article orrather longdocument, when our screen … more

The XDA LG QPair Developer Challenge Voting Has Begun!

It seems like it was just yesterday that weannounced that we had paired up with LGto … more

Major Update for the Sony Smartwatch 2 Brings DND and More

With the wearables landscape now dominated by Android Wear and Pebble, its … more

Welcome to XDA

Search to go directly to your device's forum

Register an account

Unlock full posting privileges

Ask a question

No registration required
Post Reply

[Q] "Kernel/Recovery is not seandroid enforcing" Removal Question

OP perezmarka

26th March 2014, 11:16 PM   |  #1  
OP Member
Thanks Meter: 7
 
39 posts
Join Date:Joined: Nov 2013
More
I have a Sprint Samsung Galaxy S4 that was running JB 4.3. When I decided to root and ROM it, I read a lot. I'll tell you what I did and where I got my files so you know exactly what happened:

In Download Mode:
First I Odined UnknownForce's NAE Modem Only Firmware with No Bootloader
Then I Odined Philz Touch Recovery 6.15.6

I booted to Recovery.
I cleared Cache and Davlic Cache twice.
I did Wipe/Factory Reset twice.
Then I flashed using Rawintellect's Stock(ish) Rom.

I install Ktoonsez Kernel for Sprint Touchwiz

At this point I am running a custom rom with a custom recovery and a custom kernel. It runs great.

I have no SEAndroid messages about the kernel or recovery at this point.

I decided to upgrade to Kit Kat 4.4. I did a nandroid backup. Then I took the official Sprint MD5 update and Odin it right over my rom. It worked. When the system boots up, it is running the Touchwiz version of Kit Kat. But I don't have root.

So I go to recovery to flash CF-Auto-Root-jfltespr-jfltespr-sphl720.zip but I'm back to stock recovery. So I go to download mode and re-Odin Philz Touch Recovery 6.15.6. Then I reboot to recovery.

There is an SEAndroid Recovery Message! But it lets me into recovery and I flash the zip. Reboot.

Since I was back to stock recovery, I check the kernel in settings. It's back to stock to. So I boot back to recovery and reinstall the custom kernel. Reboot to system.

There is an SEAndroid Kernel Message now! But it lets me into the system and I have root. I run Titanium Backup and remove Knox Files according to these instructions. I used method two for rooted phones. I also use method three.

Rebooted. Still showing the SEAndroid messages.

So I booted to download mode and re-Odined the NAE Modem Only Firmware with No Bootloader. Shut down phone and rebooted.

Still have the messages! Now I'm frustrated. So I do a Nandroid Backup of the KitKat Version and restore my nandroid backup of the Stock(ish) rom.

Phone works but I still have the SEAndroid messages! So I restore my nandroid backup of Kit Kat and started researching this.

What I know:

Though the messages may cause issues and boot loops for some, it is not doing it for me.
The messages do not hurt the functioning of the system.
I know the Knox counter was tripped from 0x0 to 0x1. (I never saw the Knox counter till I did this In fact!)
I know going back to stock recovery and kernel will remove the messages.

What I want:

I know the "Kernel/Recovery is not seandroid enforcing" doesn't hurt the phone but I want the message gone. I was on a rooted phone with custom rom, recovery and kernel without these messages showing up. Something is different from the way the phone was setup before and now. I don't want to go back to stock anything.

The SEAndroid is software. Software can be removed.

How do you remove it?

I know Knox was tripped somewhere in this process. Will that cause the message to appear even if your running without a boot loader?

How can I remove the SEAndroid software so it doesn't even run? Any ideas?
Last edited by perezmarka; 26th March 2014 at 11:21 PM. Reason: More Info Added
26th March 2014, 11:19 PM   |  #2  
leaderbuilder's Avatar
Senior Member
Somewhere in the dark and wet Northwest.
Thanks Meter: 1,253
 
2,291 posts
Join Date:Joined: Dec 2007
More
When you created your backup via Philz/CWM did you make sure to set the nandroid settings to back up SE Linux context? if not that is probablye your issue.
26th March 2014, 11:27 PM   |  #3  
OP Member
Thanks Meter: 7
 
39 posts
Join Date:Joined: Nov 2013
More
SE Linux context?
Quote:
Originally Posted by leaderbuilder

When you created your backup via Philz/CWM did you make sure to set the nandroid settings to back up SE Linux context? if not that is probablye your issue.

I don't know what SE Linux context is? Is it something I can do now? If not, what other options do I have?
26th March 2014, 11:31 PM   |  #4  
leaderbuilder's Avatar
Senior Member
Somewhere in the dark and wet Northwest.
Thanks Meter: 1,253
 
2,291 posts
Join Date:Joined: Dec 2007
More
It's in the misc nandroid settings.
Too late now if you didn't do it when you created your 4.3 backup though.
The Following User Says Thank You to leaderbuilder For This Useful Post: [ View ]
27th March 2014, 12:02 AM   |  #5  
OP Member
Thanks Meter: 7
 
39 posts
Join Date:Joined: Nov 2013
More
Talking Will Any Nandroid Backup Work?
My wife and I bought the exact same phones on the same day. When it came to installing the Stock(ish) rom, I did the exact same thing to her phone. She insist that I experiment on mine before I do anything to her phone.

She does not have the "Kernel/Recovery is not seandroid enforcing" messages.

Can I do a complete Nandroid back up of her system and the SE Linux Context, copy it to my SD card and install it? I know it would be an exact duplicate of her system but I have all my apps backed up with Titanium Backup so I can re-install them easily. And of course I would have to log into my Google account and delete her account. Would that put me back the way I was?
Last edited by perezmarka; 27th March 2014 at 12:03 AM. Reason: Grammar Fix
27th March 2014, 12:08 AM   |  #6  
leaderbuilder's Avatar
Senior Member
Somewhere in the dark and wet Northwest.
Thanks Meter: 1,253
 
2,291 posts
Join Date:Joined: Dec 2007
More
I doubt it -device id stuff in Android.
BUT there is a way to get you back most likely.
IF you didn't upgrade to NAE(or MK2) bootlader and just the modem (as you mentioned) the simplest thing to do would be to install stockish fresh.
Let it boot and then add your google account and let all the apps update - about 1/2 hour on wifi
Then load/install titanium ( if it didn't install) go to preferences and let it find/search for your backup directory and restore - you'll be asked first to 'restore device ID' choose YES and let it reboot!
Then you should be good to go. I know I've done this a few times.
Another bonus is that you'll have a fresh install to 'start from'
27th March 2014, 12:18 AM   |  #7  
OP Member
Thanks Meter: 7
 
39 posts
Join Date:Joined: Nov 2013
More
Titanium Backup May Hold The Key?
Quote:
Originally Posted by leaderbuilder

I doubt it -device id stuff in Android.
BUT there is a way to get you back most likely.
IF you didn't upgrade to NAE(or MK2) bootlader and just the modem (as you mentioned) the simplest thing to do would be to install stockish fresh.
Let it boot and then add your google account and let all the apps update - about 1/2 hour on wifi
Then load/install titanium ( if it didn't install) go to preferences and let it find/search for your backup directory and restore - you'll be asked first to 'restore device ID' choose YES and let it reboot!
Then you should be good to go. I know I've done this a few times.
Another bonus is that you'll have a fresh install to 'start from'

That was one thing I was worried about. When the update I did redid the recovery and kernel, did it redo the boot loader too? That was one reason I re-installed the NAE modem without bootloader a second time.

So are you saying that I re-install Stock(ish) fresh then do a COMPLETE Titanium restore and not just certain apps? Would that reset the SE Linux Context so the SEAndroid messages don't appear?

I know in the past when I have played around with roms, Titanium may prompt me to "Restore My Device ID" so that all my apps will work. If I used my wife's Nandroid backup, wouldn't it ask to restore my device ID anyway? Would that bypass the Device ID problem?

Thoughts?

EDIT: I just saw THIS in another thread! It looks like the Nandroid backup may work.
Last edited by perezmarka; 27th March 2014 at 12:21 AM. Reason: Additional Info
27th March 2014, 12:31 AM   |  #8  
leaderbuilder's Avatar
Senior Member
Somewhere in the dark and wet Northwest.
Thanks Meter: 1,253
 
2,291 posts
Join Date:Joined: Dec 2007
More
When you say you did the update I believe you are/were talking about just the firmware/modem, is that correct?
And if you added a recovery that won't affect the bootloader.
You can try the nandroid option it may work

If you have a titanium backup of your phone you'll be able to restore nearly everything after you re-flash stockish.
So if you dont' then don't user hers.
As for SE linux context as long as you MF9 Booloader and you can check by downloading this app and running it (It'll show bootloader version) then you can re-install stockish and then as above re-sync your google account which will grab your apps and other settings -wifi, hotspots email etc. (just not specific application settings)

One thing I got to thinking if you are on MF9 and just borked you restore you can always just try 'dirty flashing' stockish. Just go to recovery, wipe cache, wipe dalvik and then flash over existing ROM (don't delete data) and you might just be good to go! If not then full wipe and restore.
Again just make sure we are talking apples to apples with regard to the bootloader being MF9.
30th March 2014, 03:53 PM   |  #9  
OP Member
Thanks Meter: 7
 
39 posts
Join Date:Joined: Nov 2013
More
Here's an update:

I made a fresh nandroid backup of my wife's phone. Copied it to mine. Wiped the phone and installed backup. Phone worked fine but the seandroid message is still there.

Wiped phone again. Reinstalled Stockish rom. Then installed an old nandroid backup I had from January. Message till there.

Then I went crazy. I went to Odin, did a nandroid wipe and re-partioned the whole phone. (Don't not try this at home! Seriously. DON'T.) I was able to bring back the phone because I had the pit file for the partitions.

No pit file, no partitions, no phone. You will have a brick.

Then I installed the modem without the boot loader and recovery. Booted to recovery.

The message was still there.

WTF!

Installed Rom and brought phone back to life. I'm on the NAE bootloader. When I've tried to downgrade, Odin errors out.

Where does the boot loader reside? It wasn't there when I bought the phone. It was installed later so it had to go somewhere.

Thoughts anyone?

Sent from my SPH-L720 using xda app-developers app
31st March 2014, 01:28 AM   |  #10  
leaderbuilder's Avatar
Senior Member
Somewhere in the dark and wet Northwest.
Thanks Meter: 1,253
 
2,291 posts
Join Date:Joined: Dec 2007
More
Well right now I'd just Odin the NAE .tar. It's got all partition info and will load, boot, recovery(stock), system, data, modem/baseband. Wiping all other/old partitions.
Only thing is you'll have the knox bootloader. BUT that really isn't a big deal - you can root using the LATEST CF-Autoroot from Chainfire's thread/site. Install a custom recovery and then install just about anything (well following the devs instrucions as per their OP).
The 'knox bootloader' is more than just a simple 'boot' partition - it's an actual cmos/chip write change! That's how they know and can track if you've tripped it. So far no, that I know of, has found away around this. The boot partition - in standard terms is still editable; hence the ability to create custom recoveries.
Good luck.

Post Reply Subscribe to Thread

Tags
seandroid, seandroid enforcing
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes