[ROM][G920/5-F-I-S-K-L-T-W8][9.0] UNOFFICIAL LineageOS 16.0

[schlombie]

Where are the sources that have SELinux enforcing? I have built 16.0 but the sources I am using have SELinux permissive which I think stops SafetyNet passing (or at least Google Pay won't work...).

Cheers
Andy

Could be https://github.com/enesuzun2002/lineageos-ota/releases/tag/lineage-16.0-20200121
It was the build I answered.

Sorry, currently I not on LOS on my S6, because I had problems with encyption and switched to e foundation rom for testing.

 

[ADB100]

Could be https://github.com/enesuzun2002/lineageos-ota/releases/tag/lineage-16.0-20200121
It was the build I answered.

Sorry, currently I not on LOS on my S6, because I had problems with encyption and switched to e foundation rom for testing.

Looking at Enes's sources it doesn't look like they are:

https://github.com/Exynos7420/android_device_samsung_zero-common/blob/nx-10.0/BoardConfigCommon.mk

However I have flashed that build you posted a link to and it says SELinux Enforcing so I am guessing there are some other sources he's using...
It has the default build fingerprint though so CTS profile check fails and its built with the public keys. I have manually changed the fingerprint in the build.prop in /system & /system/vendor and CTS profile passes and it says device is certified in the Play Store app, however the public keys is an issue. If I had the sources this was built from it would really help me out.

Cheers
Andy

 

[ADB100]

How to re-enable SELinux?

Looking through the history of the 'BoardConfigCommon.mk' file it looks like SELinux has been enabled and disabled a few times with it last being enabled in September 2019:

https://github.com/Exynos7420/andro...c275420#diff-581794583e89a660d8f68651b78d17f9

And then disabled again in February this year:

https://github.com/Exynos7420/andro...be536f0#diff-581794583e89a660d8f68651b78d17f9

I need SELinux enabled and enforcing. How can I use the sources to achieve this?

Cheers
Andy

 

[Lunarixus]

Looking through the history of the 'BoardConfigCommon.mk' file it looks like SELinux has been enabled and disabled a few times with it last being enabled in September 2019:

https://github.com/Exynos7420/andro...c275420#diff-581794583e89a660d8f68651b78d17f9

And then disabled again in February this year:

https://github.com/Exynos7420/andro...be536f0#diff-581794583e89a660d8f68651b78d17f9

I need SELinux enabled and enforcing. How can I use the sources to achieve this?

Cheers
Andy

I'm gonna jump in here and point out that the S6 has never had enforcing SELinux.

The reason you see it enabled is because it uses a kernel edit called "fake enforce" which spoofs an enforcing SELinux but ignores all denials.

The current SEPolicy found in both Enes and TeamNexus' trees is from the Exynos 7580 series which is NOT compatible with our phone.

Proof: https://github.com/Exynos7420/andro...360cba00a4b90d627f5efe2/sepolicy/device.te#L6

Unless you're going to rewrite SEPolicy yourself there is no way to make it enforcing by just enabling something.

- Nathan.

 

[ADB100]

I'm gonna jump in here and point out that the S6 has never had enforcing SELinux.

The reason you see it enabled is because it uses a kernel edit called "fake enforce" which spoofs an enforcing SELinux but ignores all denials.

The current SEPolicy found in both Enes and TeamNexus' trees is from the Exynos 7580 series which is NOT compatible with our phone.

Proof: https://github.com/Exynos7420/andro...360cba00a4b90d627f5efe2/sepolicy/device.te#L6

Unless you're going to rewrite SEPolicy yourself there is no way to make it enforcing by just enabling something.

- Nathan.

I am not going to pretend I fully understand what you have written.... However in the file 'BoardConfigCommon.mk' there is a section that I am guessing triggers whether the ROM is built with SELinux enabled (enforcing?) or disabled. In Enes sources this is now commented out and this coincides with a commit to disable SELinux.

https://github.com/Exynos7420/andro...7360cba00a4b90d627f5efe2/BoardConfigCommon.mk

If this is a 'trick' to make Android think SELinux is enforcing then I'm fine with that. My issue is ensuring apps that check the security will run - Banking Apps, Google Pay, NetFlix etc. I know SafetyNet needs to pass and the device appear 'Certified' in the Play Store app, however some other apps (certainly the Sky Go and Santander apps) check other things as well - SELinux being one of them (I think?).

With my own current builds of 15.1 everything I need works - SafetyNet passes, SELinux is (or appears to be) enforcing and I am using my own certificates to sign the build. With the 16.0 builds I have tried so far I have had issues with apps that check security and then fail to run, therefore I am looking for 16.0 sources that I can use that work as well as my own 15.1 sources.

Cheers
Andy

 

[Lunarixus]

I am not going to pretend I fully understand what you have written.... However in the file 'BoardConfigCommon.mk' there is a section that I am guessing triggers whether the ROM is built with SELinux enabled (enforcing?) or disabled. In Enes sources this is now commented out and this coincides with a commit to disable SELinux.

https://github.com/Exynos7420/andro...7360cba00a4b90d627f5efe2/BoardConfigCommon.mk

If this is a 'trick' to make Android think SELinux is enforcing then I'm fine with that. My issue is ensuring apps that check the security will run - Banking Apps, Google Pay, NetFlix etc. I know SafetyNet needs to pass and the device appear 'Certified' in the Play Store app, however some other apps (certainly the Sky Go and Santander apps) check other things as well - SELinux being one of them (I think?).

With my own current builds of 15.1 everything I need works - SafetyNet passes, SELinux is (or appears to be) enforcing and I am using my own certificates to sign the build. With the 16.0 builds I have tried so far I have had issues with apps that check security and then fail to run, therefore I am looking for 16.0 sources that I can use that work as well as my own 15.1 sources.

Cheers
Andy

Safetynet doesn't require SELinux enforcement to pass, I can confirm this for all of my Pixels, my Xiaomi devices and many others.
You most likely just need to spoof props correctly.

 

[marcelo007]

Working for me

I downloaded the ROM and the Gapps. Actually This lineage OS is android 10! It surprised me but i loved it! I recommend, fixed the bugs i was having with my old firmware nugget 7.

Steps:
1 - download ROM and Gapps Android 10
2- go to the recovery TWRP
3 - wipe dalvik, data, system, cache
4 - install ROM
5 - install Gapps
6- reboot and have fun

 

[ADB100]

Safetynet doesn't require SELinux enforcement to pass, I can confirm this for all of my Pixels, my Xiaomi devices and many others.
You most likely just need to spoof props correctly.

Hmm... I thought I had. With my 15.1 builds its the 'BUILD_FINGERPRINT' value in build.prop that needed changing to a stock fingerprint one to get it to pass the CTS Profile check. I have this in my sources and can confirm its in the build.prop in the resulting ROM. I'll have to do some more playing.

 

[Johannesdavidsen]

Hmm... I thought I had. With my 15.1 builds its the 'BUILD_FINGERPRINT' value in build.prop that needed changing to a stock fingerprint one to get it to pass the CTS Profile check. I have this in my sources and can confirm its in the build.prop in the resulting ROM. I'll have to do some more playing.

Hi i`m not supposed to respond here but i`m very excited of your Work.
Did you add all knox files and folders? In the system.
And E Foundation has SE Linux Enforcing i think.
And i have been experimented long time ago, with Stock / Nano Rom Marshmallow and added back, knox folders and files in the system and then
if i remember right SE become enforcing i might have did something more before that and maybe i might have edited prop file too
And maybe add some data from twrp backup data
maybe edit some 0 to 1 in stock build.prop i can`t remember what but i was searching it on google to enable enforcing mode and to-
enable those needed to use stock apps like Health app and private mode and other stuff but tested private mode and it not worth to have files there, i might done bad somewhere
it cool.. i hope you get there to get it Work and i hope for your Work to be released here..

Noob from Greenland..

Edit: I have edited something like 1 to 0 on build.prop i guess
Just try to get some 1's to 0 somewhere on build.prop in ur work and place those files with ur tools and with ur works
Good Luck I'm not so good to English words sometimes sorry about that..

 

[Azhar.iq]

Recently installed this ROM, falling back from 17.1

I wiped and clean installed everything. I didn't installed openGapps, but did install microG. All of the apps are working (the ones i need).

My question is, if almost everything can be done without openGapps, even the pico version, then why is it recommended to install it???? What am i missing??

 

[chelsea_21]

Recently installed this ROM, falling back from 17.1

I wiped and clean installed everything. I didn't installed openGapps, but did install microG. All of the apps are working (the ones i need).

My question is, if almost everything can be done without openGapps, even the pico version, then why is it recommended to install it???? What am i missing??

IS THE ROM GOOD, THINKING OF TESTING IT out again

 

[ARDV]

do this version have smart pixel option? (the option to turn off some pixels like in HAVOC OS)

 

[Azhar.iq]

IS THE ROM GOOD, THINKING OF TESTING IT out again

Had some problems with it. It felt slower, and wouldn't respond as fast as the 17.1, so i moved to Resurrection Rom 7.0.1. So far its stable and responsive.

 

[Johannesdavidsen]

Had some problems with it. It felt slower, and wouldn't respond as fast as the 17.1, so i moved to Resurrection Rom 7.0.1. So far its stable and responsive.

Hi recognise me?
Is Resurrection Rom 7.0.1 good? Give update. . .
And I tested his build 21 Jan LOS 16. It almost the same as build 28 Feb LOS 17.1 I think it good enough very much more better with Battery charge changeble on current so it can be lower amps lower charging so it can charge slower and not warm
And default is fast charge I think.. So thumbs up for that :good:
Lol I downloaded it because 21 Jan is my birthday

 

[Zefiro_1980]

When will the new Build come out?

 

[Johannes89]

New build is released check that out

Beautiful work didn't find any problem.
I didn't test for other apps yet:good:

Edit: I think now i know what causes 'Video screen mess up' problem.
I'm thinking it may be when phone is on battery saver or on 'rooted and tweaked CPU' caused some video screen messed up problems when it can't follow what going on apps... So I will test on 17.1 again without changing anything thanks for reading.
No problem on Tiktok app for now. Lol

 

[RAHeinlenIncarnate]

Cant get PC to recognize USB

I cannot get any PC to recognize the phone on the USB cable.

Phone: SM-G920W8
Build: zerofltexx-userdebug 9 PQ3A.190801.002 eng.enesuz.20200418.174126 test-keys

Tried setting USB configuration to File transfer, USB tethering, PTP and no data transfer - no worky

Set developer mode. Tried setting USB default configuration to File transfer, USB tethering, PTP and no data transfer - no worky

No MTP listed anywhere.

Read the thread and nothing helped.

Suggestions?

 

[Johannesdavidsen]

I cannot get any PC to recognize the phone on the USB cable.

Phone: SM-G920W8
Build: zerofltexx-userdebug 9 PQ3A.190801.002 eng.enesuz.20200418.174126 test-keys

Tried setting USB configuration to File transfer, USB tethering, PTP and no data transfer - no worky

Set developer mode. Tried setting USB default configuration to File transfer, USB tethering, PTP and no data transfer - no worky

No MTP listed anywhere.

Read the thread and nothing helped.

Suggestions?

Maybe you need Samsung drivers?
What distro do you use?
Windows? Or Linux
It could be your phones USB port try other Usb's
If not it is damaged this phone is very annoying when USB port is old I transfer files only while holding phone and micro USB together lol

 

[Azhar.iq]

How do i increase call volume??
On a normal call, sound is too low to understand clearly what other person is saying.
Please guide.

 

[Johannes89]

How do i increase call volume??
On a normal call, sound is too low to understand clearly what other person is saying.
Please guide.

Hey so I have edited system volume values.
Please check my comments on 17.1 section just search my other account name Johannes Davidsen on comment sections. I have forgotten my password so I have created new account
I use that other account only on my laptop..
There are 3 steps for that 1 text file
I couldn't post a file attachment here lol
If you will use my edits make sure to edit it by yourself
Because it is very LOW VOLUME lol
Have fun editing..?

---------- Post added at 07:53 AM ---------- Previous post was at 07:25 AM ----------

I build LOS 15.1 for S6, S6 Edge and HTC One M8 once a month when the security patches are merged. Everything I use is available online to everyone. I include a few tweaks so that it passes SafetyNet (Build Fingerprint), RIL fix so it doesn't crash when viewing the call forwarding settings, the supposed fix for the call echo and I use my own keys so that apps that check for it being built with public keys and then either moan or won't work will work (Sky Q/Go for example).
Anyone can replicate this. I am not doing anything special. I don't tweak anything with the HTC One M8 builds.
Apparently my builds for S6/S6 Edge still have the call echo bug, however I don't experience this myself - or at least the callers I speak to don't complain about it.

I am reluctant to share my builds as I simply don't want the grief of trying to please people when they say something doesn't work. I am not a programmer, nor do I have the time to debug things. I simply have access to some compute and storage that allows me to kick off some scripts to build this once a month for myself. I have a S6, a S6 Edge and a HTC One M8.

That why your builds are not visible.
I could be your tester I don't care about brick
Or softbrick I could test only software related apps not banking I don't have credit card yet..
It could be so cool to use S6 as paying with Lineage Os..
You can see me crying lol

---------- Post added at 08:00 AM ---------- Previous post was at 07:53 AM ----------

I cannot get any PC to recognize the phone on the USB cable.

Phone: SM-G920W8
Build: zerofltexx-userdebug 9 PQ3A.190801.002 eng.enesuz.20200418.174126 test-keys

Tried setting USB configuration to File transfer, USB tethering, PTP and no data transfer - no worky

Set developer mode. Tried setting USB default configuration to File transfer, USB tethering, PTP and no data transfer - no worky

No MTP listed anywhere.

Read the thread and noth

​

ing helped.

Suggestions?

Yo did you check TWRP ?
It could be there
On Mount section
Edit: If it Linux sometimes it doesn't recognise Android USB
(Use Windows to try-to connect)