[Discussion] Google Pay Magisk Discussion Thread

Search This thread

zgfg

Senior Member
Oct 10, 2016
8,546
6,277
Xiaomi Mi 11 Lite 5G
  • Set SELinux to enforcing - I set it to permissive earlier because of Viper4AndroidFX
If using V4A FX 2.7.2.1, it doesn't set SE Linux to Permissive and you should not need to force Permissive manually

And no need for Strong Integrity was already answered by others (and for the mater of fact, the same was commented numerous times in this thread already)
 
  • Like
Reactions: ipdev and BesoC

BesoC

Senior Member
Dec 29, 2007
183
32
Tbilisi
  • Like
Reactions: AndrzejDwo

BesoC

Senior Member
Dec 29, 2007
183
32
Tbilisi
If using V4A FX 2.7.2.1, it doesn't set SE Linux to Permissive and you should not need to force Permissive manually

And no need for Strong Integrity was already answered by others (and for the mater of fact, the same was commented numerous times in this thread already)
No, it does not set by itself. I had problems enabling its driver, one thread on XDA was strongly suggesting to set SELinux to permissive. I did and it worked, so... 🤷‍♂️. However, now when I reverted it back to enforcing, Viper still works 😊
I did not search for STRONG_INTEGRITY, my bad
 
  • Like
Reactions: ipdev

zgfg

Senior Member
Oct 10, 2016
8,546
6,277
Xiaomi Mi 11 Lite 5G
No, it does not set by itself. I had problems enabling its driver, one thread on XDA was strongly suggesting to set SELinux to permissive. I did and it worked, so... 🤷‍♂️. However, now when I reverted it back to enforcing, Viper still works 😊
I did not search for STRONG_INTEGRITY, my bad
Good that V4A V2.7 works for you with Enforcing mode (as it should)

Btw, there are two newer versions:

1) Repackaged V4A - finding and patching audio drivers when they are scattered to other system folders (needed for some devices):

2) (1) + Reverse engineered V4A alpha v0.2.0 support for 64-bit audio drivers (needed on some new devices that could not fall-back to 32-bit audio drivers):

Both also don't require SE Linux Permissive. Might need AML v4.2 (recently updated):

PS:
And don't forget to enable Legacy mode (and of course, Master limiter)
 
Last edited:

BesoC

Senior Member
Dec 29, 2007
183
32
Tbilisi
Good that V4A V2.7 works for you with Enforcing mode (as it should)

Btw, there are two newer versions:

1) Repackaged V4A - finding and patching audio drivers when they are scattered to other system folders (needed for some devices):

2) (1) + Reverse engineered V4A alpha v0.2.0 support for 64-bit audio drivers (needed on some new devices that could not fall-back to 32-bit audio drivers):

Both also don't require SE Linux Permissive. Might need AML v4.2 (recently updated):
Thanks for sharing :)(y)
 
  • Like
Reactions: ipdev and zgfg

pndwal

Senior Member
No, it does not set by itself. I had problems enabling its driver, one thread on XDA was strongly suggesting to set SELinux to permissive. I did and it worked, so... 🤷‍♂️. However, now when I reverted it back to enforcing, Viper still works 😊
No... Days when that was needed are gone...

I used to use the install-and-disable-AML trick for fixing driver problem, but I realised we simply need a way to 'reset' driver once in Legacy mode...

Simply disabling module and rebooting, then enabling and rebooting again works and Neon driver installs properly without installing AML etc... If you do get Driver Status: Abnormal again in future, eg. If you need to reinstall, just use this trick to fix it...

Also, I use this build now which seems to fix old issues too:
https://github.com/programminghoch10/ViPER4AndroidRepackaged

👍 PW
 
Last edited:
  • Like
Reactions: BesoC and ipdev

BesoC

Senior Member
Dec 29, 2007
183
32
Tbilisi
No... Days when that was needed are gone...

I used to use the install-and-disable-AML trick for fixing driver problem, but I realised we simply need a way to 'reset' driver once in Legacy mode...

Simply disabling module and rebooting, then enabling and rebooting again works and Neon driver installs properly without installing AML etc... If you do get Driver Status: Abnormal again in future, eg. If you need to reinstall, just use this trick to fix it...

Also, I use this build now which seems to fix old issues too:
https://github.com/programminghoch10/ViPER4AndroidRepackaged

👍 PW
Yes, legacy mode switch trick worked for me 👍. Many thanks for your help 🙏
 

DerGriechisch

Member
Feb 1, 2021
37
3
Realme 7 Pro
Same issue with me? Did any solution found yet?

this summer google introduced a new api and thats why youa re having touble
install this https://play.google.com/store/apps/details?id=gr.nikolasspyr.integritycheck&hl=en&gl=US and check

you need to get MEETS_DEVICE_INTEGRITY and MEETS_BASIC_INTEGRITY green
you can do this with magisk hide and various magisk modules
i managed to do it by selecting EVERYTHING in magisk denylist (every single app including system apps)

once these two are green you need to delete
1.google play services app data
2.play store app data
3.wallet app data

if everything works you can now go to wallet tap to pay setup and you will see that "Your phone meets security requirements"
enter your card number etc and you are ready !

let me know if it works ;)
 
Last edited:
  • Like
Reactions: niko26

m0han

Senior Member
Apr 30, 2012
5,448
2,556
I don't know about you @pndwal, but I believe @zgfg was using v2.7.2.1 which is just 1.62 MB in size, whereas the new one is 85.1 MB in size. Just wanna ask you guys whether there is any significant improvement in sound over the old version. I believe the two of you are not on A13 (yet).
 

Attachments

  • Screenshot_20230123_184044.jpg
    Screenshot_20230123_184044.jpg
    232 KB · Views: 24

zgfg

Senior Member
Oct 10, 2016
8,546
6,277
Xiaomi Mi 11 Lite 5G
I don't know about you @pndwal, but I believe @zgfg was using v2.7.2.1 which is just 1.62 MB in size, whereas the new one is 85.1 MB in size. Just wanna ask you guys whether there is any significant improvement in sound over the old version. I believe the two of you are not on A13 (yet).
Repackaged is not an 'official' V4A

It was still v2.7.2.1 but enhanced to search for the other/duplicated folders with copy of (32-bit) audio drivers that also need to be patched for the newer phones (actually, I had my post-fs-data.sh modifications and the developer incorporated them into the V4A Java code)

Depending on the phone/ROM, that might be enough for installation of V4A on A13, or not.
However, as I mentioned in my previous post, some new phones (even with A12) require the use of 64-bit drivers and for that you would need the Re-engineered v4A (currently Beta v0.2.0, IRS and some other filters are not yet supported - but generally Beta was confirmed to work even by A13 users)

---

If you unzip (or install) the Repackaged V4A, you could see that developer also included an archive of 80 MB IRS filters - that's why his zip file is that big

Anyway, there is another thread dedicated to V4A, hence please use that one for further V4A discussion:
 
Last edited:
  • Like
Reactions: Tecalote and m0han

pndwal

Senior Member
I don't know about you @pndwal, but I believe @zgfg was using v2.7.2.1 which is just 1.62 MB in size, whereas the new one is 85.1 MB in size. Just wanna ask you guys whether there is any significant improvement in sound over the old version. I believe the two of you are not on A13 (yet).
... Yup, audio engine is the same, so doubt much has changed for audiophiles... Ease of installation seems to be improved w/ this package installer; Neon driver setup just works IIRC... 🙂 PW
 
  • Like
Reactions: BesoC and m0han

pndwal

Senior Member
So, after some months without any issue, now Google Wallet/Pay is complaining that my Xiaomi Mi9 is rooted...

I have safetynet fix 2.4.0 installed.

Anyone is having issues too?
Thanks!

Edit: just read here https://forum.xda-developers.com/t/magisk-module-universal-safetynet-fix-2-4-0.4217823/page-142 and it's happening the same to some other colleagues. Reverting to 2.3.1 mod.

Thanks! Great community!
+1, wallet stopped working in the last couple of days
Had safetynet 2.2.0 (updating to 2.4.0 now) & shamiko 0.6
Yup...

Clearly new 2.4.0 is failing intermittently for many, and Google Pay/Wallet users particularly are getting failures w/ 'Device doesn't meet Security requirements' message as Google monitors device security even when Pay/Wallet is not invoked... I recommend using @Displax's USNF modded fork at least until official USNF is updated...

I gave what clues I have in post in USNF thread:

Many more comments there follow... PW
 
Last edited:
  • Like
Reactions: raulci

Top Liked Posts

  • 1
    @DineshValor does Privacy Space support android 10 with Lsposed? Also can share the link to download the module? I'm finding a old one which mentioned support for Android 9
    It's supported upto android 13 and currently I'm using LSposed with android 12.
    Here is the link:
    Screenshot_2023-03-28-13-06-25-43_084ab3bc34f7aa7ccff83653f52abafc.jpg

    Screenshot_2023-03-28-13-11-37-30_084ab3bc34f7aa7ccff83653f52abafc.jpg
    1
    following this guide, landed me into bootloop. Is there a brief guide - blog or video?
    Sorry about that issue, but right now I'm busy in some other stuff, i will make sure to create a brief video as a demo, plz grant me some time.
  • 2
    This is so weird. I have Galaxy S22 and Galaxy S20+, both with latest stock firmware + Magisk 25.2, I have all google apps in DenyList. Also, the ROM is heavily modified: I disable almost all Samsung Apps (except for system-critical). SafetyNetFix of latest Git-downloaded version installed, TWRP also of latest available (corsicanu's build). Everything works, but Google Wallet sometimes throws a pop-up warning about root. I usually kill the app, wipe it's cache, start it again and I can again pay without problem. Also, no matter what, contact-less payment have all checks green, despite prior toast warning. Reboot also fixes the issue (making payments possible again, in cases where cache wipe or app-kill won't work).
    If you're using the original Universal SafetyNet Fix by kdrag0n, you might wanna switch to the Displax fork linked a couple of posts above and test.

    Hope this helps.
    2
    I'm using rooted android 10 with Safetynet Pass & Play Store -Certified, but I'm still not able to activate tap to pay on Paytm app.


    It's gives me a error - "This functionality is not available due to security concerns with your device."

    How can I fix it?
    Requirements:-
    - Magisk v25.2
    - LSPosed v1.8.6
    - PrivacySpace v1.3.7 (LSPosed module app)
    - Enable Zygisk (Enforce DenyList - Disabled) under Magisk (+ download some Magisk module as shown in screenshot¹)
    Screenshot_2023-03-18-17-10-02-79_9d1fb82a3633e78ac9c37e5a64e38237.jpg

    Follow below steps to fix "This functionality is not available due to security concerns with your device" in Paytm (Tap to Tay):-
    1. Download frest original Paytm app or clear data & force stop.
    2. Open PrivacySpace app/module under LSPosed.
    3. Hidden Apps > select Paytm (+ all other modules such as Lucky Patcher, etc as show in screenshot²).
    Screenshot_2023-03-18-17-20-27-10_30686f06bc9783668a8afa418b45660d.jpg
    4. Blacklist > select Paytm.
    Note: If u want to recieve Paytm app update in Play Store then select Play Store in "Connected with Others" to unhide Paytm app for Play Store.
    Screenshot_2023-03-18-17-27-19-47_30686f06bc9783668a8afa418b45660d.jpg
    5. All Set, Try your Luck Now, and do not forget to let me know if it's work for you too.
    1
    If you're using the original Universal SafetyNet Fix by kdrag0n, you might wanna switch to the Displax fork linked a couple of posts above and test.

    Hope this helps.
    Yes, just did so. I'm using 2.4 MOD from this thread. Will see how it works
    1
    I don't prefer G Pay for anything.. Will like to stick with Paytm and try to work on fixing tap to pay
    I see you said you pass SafetyNet... But of course that's deprecated; most banks have migrated to new Play Integrity API now... Are you passing PI deviceIntegrity?...If not official Universal SafetyNet Fix will likely not help as it currently has issues... You'll need @Displax's up-to-date fork with fixes...

    Also, did you install Shamiko for proper root hiding as suggested more than once above?

    🤠 PW
    1
    Does anyone happen to know why GPay 'Check bank balance' is not working? When I tap on the account on the 'Select account' screen, a line flashes above and disappears. Nothing else happens. Hope this is not OT here.
    I'm using same version GPay and didn't face such issue, probably it's your device app bug or something in your device. There no traces related magisk. Kindly confirm your side.
  • 62
    The new Google Play services update caused this.

    Temporary workaround:

    1. Disable Google Pay/Find My Device as Device Administrators in Settings > Security & location > Device Administrators.

    2. Search "Google Play services" in the Settings search bar.

    3. Press the three dots and press "Uninstall previous updates".

    4. Download this update - https://www.apkmirror.com/apk/google-inc/google-play-services/google-play-services-14-7-99-release/
    Pick your needed edition (arm or arm64, etc.), download it and install it.

    5. Disable Background data access for Google Play Services and Google Play in their respective App Info pages.

    6. Download Google Pay from the Play Store.

    7. Set up your cards. Enjoy!

    Never EVER update Google Play services manually, until a Magisk update is available that bypasses the upgraded SafetyNet. Note that Google Play services is responsible for adding/verifying the card, not the Google Pay app! Hence why there seems to be an overlay when adding a card/verifying an existing one.

    Tested Google Pay versions:

    2.79.x-2.83.235070858 - working

    Tested Google Play services versions:

    14.7.99, 16.0.86 - working with Magisk 18.1

    14.8.49-16.x- working with Magisk 18.2 Canary
    32
    This thread is inspired by the PoGo Magisk discussion thread. It's meant to keep the clutter of "Google Pay doesn't work" posts out of the main Magisk threads.

    Please use this to discuss issues with Google Pay and possible solutions.


    There's a working solution here:
    https://forum.xda-developers.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87198517


    For general tips on first getting SafetyNet to pass fully, check here:
    https://www.didgeridoohan.com/magisk/MagiskHide#hn_SafetyNet
    29
    Ok. I tried this and it worked on gms 17.1.22, allowing one to add cards and pay in store. Warning YMMV, but this is the process I did to get this working. One caveat is that Google pay does not register the "recent transactions" on the Google pay app. Another caveat is that I suspect users will have to reverse some step if gms is updated and then reapply, but this still needs to be confirmed

    Without further ado, here is my process:

    1) download a SQL database editor. I used

    https://play.google.com/store/apps/details?id=com.tomminosoftware.sqliteeditor&hl=en_US

    2) download a terminal emulator program. I used terminus but any terminal emulator should work.

    3) make sure Google pay is forced close, if it is open.

    4) open SQL editor. Navigate to /data/data/com.google.android.gms/databases

    5) open dg.db

    6) change any value that lists "attest" in the name (first column) to 0 in the third column. Mine was showing a value of 10 in the third column for each of these values. (Column c for sqlite databse editor I used)

    7) open the terminal emulator.

    8) get root access (su)

    9) cd /data/data/com.google.android.gms/databases

    10) type: chmod 440 dg.db
    This makes dg.db read only (for owner and group, and no access for world.)

    11) reboot

    I suspect when gms is updated, one will have to go back to steps 10 and 11 and chmod 660 dg.db to allow new keys to be written to the database, and then go back and redo all these steps to reset the attestation values back to 0.

    If there is still an error, verify in sqlite database editor that all attest release keys values in dg.db are 0 when dg.db is read only (owner and group).

    Again, YMMV but this worked for me, so I give it back to the community now.

    Edit: recent activities did show up soon afterwards for the payment method.

    Cheers,
    B.D.
    27
    The app is finally public! (thanks Google for taking a week to approve this 🤦)
    I made it beta testing since I haven't tested it on much devices. If you find any problem, please open an issue here and I'll take a look at them once I return from vacation.


    Source code:

    If you are curious, the possible outcomes I've seen are:
    • 3 ticks (unrooted samsung)
    • tick/tick/x (unrooted redmi note 4 with unlocked bootloader)
    • x/tick/x (my rooted a11 op7t)
    23
    UPDATE 1/8/2022
    This app is officially discontinued in favor of a new app I published on Play Store. Read more here:

    ====================
    ORIGINAL MESSAGE:

    I just made this simple app which tells you if your device passes the new Play Integrity API (which is presumably what Google Pay and Play Store use to detect root now). If you don't trust random apks from the internet feel free not to use this. I'll upload the source code at a later time since it's very junk now (probably on github).
    You can use it to play around and see if you manage to get it to pass without having to mess with Google Pay. There are screenshots of the 2 possible outputs (pass screenshot is from an online emulator).
    Also I didn't test it much since I don't have many devices that can pass. Hope it works fine 🤞

    Hope this helps someone find a solution :)

    EDIT:
    Here is a quote from Google of what exactly "Does not meet device integrity" mean:
    The app is running on a device that has signs of attack (such as API hooking) or system compromise (such as being rooted), or the app is not running on a physical device (such as an emulator that does not pass Google Play integrity checks).
    ...
    If you are having problems with your testing device meeting device integrity, make sure the factory ROM is installed (for example, by resetting the device) and that the bootloader is locked.