Still getting security policy update notices - Verizon Samsung Galaxy S III

I'm rooted and successfully disabled knox via supersu (as suggested elsewhere regarding this issue), yet got the security policy update notice again today. Anyone else? What exactly do I have to do to turn this off?

Freeze SDM1.0
Sent from my cup on a string using Tapatalk

outcasted2003 said:
Freeze SDM1.0
Sent from my cup on a string using Tapatalk
Click to expand...
Click to collapse
doncaruana said:
I'm rooted and successfully disabled knox via supersu (as suggested elsewhere regarding this issue), yet got the security policy update notice again today. Anyone else? What exactly do I have to do to turn this off?
Click to expand...
Click to collapse
Definitely freeze sdm.apk but also fwupgrade.apk also
Sent from my SCH-I535 using Xparent ICS Tapatalk 2

doncaruana said:
I'm rooted and successfully disabled knox via supersu (as suggested elsewhere regarding this issue), yet got the security policy update notice again today. Anyone else? What exactly do I have to do to turn this off?
Click to expand...
Click to collapse
There's an app called "Security policy updates" on my phone that I've frozen in Titanium Backup. Sounds suspiciously like the one you're looking for *smile*. I've also frozen SDM, as always.
I don't get security policy update notices.

I think SDM is for the regular OTA updates. There's another app with a name that starts "Security policy updates..." with some version numbers after it. I did a force stop on that - haven't frozen it. I suspect that's the one I need to manage.

doncaruana said:
I'm rooted and successfully disabled knox via supersu (as suggested elsewhere regarding this issue), yet got the security policy update notice again today. Anyone else? What exactly do I have to do to turn this off?
Click to expand...
Click to collapse
Anybody actually accept the Security Policy Updates after rooting TW Kit Kat? Does it remove root? Inquiring minds want to know
Thank!

gm2racer said:
Anybody actually accept the Security Policy Updates after rooting TW Kit Kat? Does it remove root? Inquiring minds want to know
Thank!
Click to expand...
Click to collapse
Nope, I don't, it can be turn off in settings.

buhohitr said:
Nope, I don't, it can be turn off in settings.
Click to expand...
Click to collapse
What can be turned off in settings? The only I've gotten this warning to go away was to freeze the security policy updates process I mentioned (that worked for me). If you know of another way, please tell me what I missed.

doncaruana said:
What can be turned off in settings? The only I've gotten this warning to go away was to freeze the security policy updates process I mentioned (that worked for me). If you know of another way, please tell me what I missed.
Click to expand...
Click to collapse
I've seen this on another unrooted S3. It's quite annoying
Sent from my SCH-I535 using Xparent ICS Tapatalk 2

Related

[i9505] 4-SEPT New update today MH8 (JDQ37)

Samsung is pushing another update today, its already reached max OTA downloads so get it from Kies.
anyone know what the update is or does
pnr2020 said:
anyone know what the update is or does
Click to expand...
Click to collapse
lock your phone.. and make it inpossible to root, and read-only system...
Took a while to download via kies, probably due to kies is full ROM as apposed to OTA size.
Sent from my GT-I9505 using XDA Premium 4 mobile app
Oops
gadjet said:
Some more details here/
http://www.sammobile.com/2013/04/27...t-i9505-official-firmwares-are-now-available/
Click to expand...
Click to collapse
Remove the link. It has nothing to do with the last update. The link you post is from May. :silly:
Dean-xXx said:
Remove the link. It has nothing to do with the last update. The link you post is from May. :silly:
Click to expand...
Click to collapse
Done
Some more details, if someone knows where to find details from changelist?
overkillZ said:
lock your phone.. and make it inpossible to root, and read-only system...
Click to expand...
Click to collapse
I saw chainfire's tweet which suggested something similar.
Why would they do this? Makes no sense
Yeah, and it changes the SELinux from permissive to enforcing.
pnr2020 said:
anyone know what the update is or does
Click to expand...
Click to collapse
It upgrades your phone to the latest firmware
Now have the LTE option in Network mode, where as the last update didn't.
ixon2001 said:
Now have the LTE option in Network mode, where as the last update didn't.
Click to expand...
Click to collapse
Hi ixon2001
I don't have LTE under more networks,mobile networks, network mode? I am on 3? strange....
p.s running sim free I9505 with non branded firmware
gadjet said:
Hi ixon2001
I don't have LTE under more networks,mobile networks, network mode? I am on 3? strange....
p.s running sim free I9505 with non branded firmware
Click to expand...
Click to collapse
We on three don't have LTE at the mo once LTE is enabled by them then we should get that option.
Sent from my GT-I9505 using Tapatalk 2
I haven't noticed any differences apart from an annoying problem. I get constant 'Prevention information' errors:
"An application has been forced to stop for an unauthorized attempt to access system in your device. It may be solved by the policy update service. It may be safe to delete an application obtained from an unauthorized route. Check now?"
If I try to use the 'Security policy update', it fails and says: 'Update failed due to network issues'.
My phone is not rooted and I don't have any dubious apps.
gadjet said:
Hi ixon2001
I don't have LTE under more networks,mobile networks, network mode? I am on 3? strange....
p.s running sim free I9505 with non branded firmware
Click to expand...
Click to collapse
Ah yeah I'm not on 3 anymore after having nothing but trouble with this network I went back to Giffgaff, because Giffgaff runs on the O2 network probably why it showing up now with this update.
ixon2001 said:
Ah yeah I'm not on 3 anymore after having nothing but trouble with this network I went back to Giffgaff, because Giffgaff runs on the O2 network probably why it showing up now with this update.
Click to expand...
Click to collapse
So , does it worth to make the update ?
I can do mine , but i have low battery ( phone charging atm ).
Anyone noticed some changes ?
THnx
Personally I wouldn't update to it yet, it seems to enable Knox and/or secure things a bit more. So I've no longer got root (yep my own stupid fault I know - should have left well alone) and cannot now downgrade to an earlier firmware to enable root.
I'm really, really hoping someone comes up with a way to flash a firmware on this version as root was really useful for Tasker with SuperSU. Plea for help here.
VoodooSix said:
Personally I wouldn't update to it yet, it seems to enable Knox and/or secure things a bit more. So I've no longer got root (yep my own stupid fault I know - should have left well alone) and cannot now downgrade to an earlier firmware to enable root.
I'm really, really hoping someone comes up with a way to flash a firmware on this version as root was really useful for Tasker with SuperSU. Plea for help here.
Click to expand...
Click to collapse
You are unable to downgrade using Odin?
VoodooSix said:
Personally I wouldn't update to it yet, it seems to enable Knox and/or secure things a bit more. So I've no longer got root (yep my own stupid fault I know - should have left well alone) and cannot now downgrade to an earlier firmware to enable root.
I'm really, really hoping someone comes up with a way to flash a firmware on this version as root was really useful for Tasker with SuperSU. Plea for help here.
Click to expand...
Click to collapse
I have the same situation.
MaKTaiL said:
You are unable to downgrade using Odin?
Click to expand...
Click to collapse
No, unable to flash anything with Odin at the moment, see the thread in my previous post for more details.

[Q] Android Update Coming... how to stop?

I just got an email from Motorola offering me to test out the new version of Android for the Ultra, Maxx, and Mini.
That means such will be pushed to the general users within a few days or possibly a week.
From my past experience with such updates, the #1 change is to close any loopholes being used to root the devices. Therefore, I have very little interest in ever updating the O/S now that I do have root.
Is there a way I can stop my phone from checking, and installing, such updates? Such would including blocking the nag popups.
hmm...soak test for camera update possibly? I haven't gotten anything yet for mine...hopefully someone can make this flashable for SS and we'll be fine..
On the maxx hd there was an app that you freeze that made it not download updates.
Sent from my XT1080m using xda-developers app.
This thread talks about how to do it for the Moto X (which is basically the same thing, right?).
http://forum.xda-developers.com/showthread.php?t=2466191
I read through the instructions, and everything seems straight forward until it gets to the part about flashing stock recovery and such.
Will this method work for the MAXX? If so, where do we find the .img files we would need?
It use to be to "freeze" BlurUpdater_VZW.apk and Upgrader.apk. But I don't see those apps, nor any app with a similar name, in /systems/apps.
WaltA said:
It use to be to "freeze" BlurUpdater_VZW.apk and Upgrader.apk. But I don't see those apps, nor any app with a similar name, in /systems/apps.
Click to expand...
Click to collapse
So if all I needed root for was for the entitlement hack (and I've heard that survives the new OTA) could I just accept this OTA knowing that I will lose root? Or will it not install?
Your right in system/app I do not see an updater.apk, but in Titanium backup I do see one to freeze? That should work to stop updates, it did in the past.
WaltA said:
It use to be to "freeze" BlurUpdater_VZW.apk and Upgrader.apk. But I don't see those apps, nor any app with a similar name, in /systems/apps.
Click to expand...
Click to collapse
if youve removed any system apps from the device..the update will fail automatically
dano1282 said:
if youve removed any system apps from the device..the update will fail automatically
Click to expand...
Click to collapse
All I've done was pwnmymoto for root, the entitlement hack, and disable a bunch of apps. can I accept the OTA?
redddog said:
All I've done was pwnmymoto for root, the entitlement hack, and disable a bunch of apps. can I accept the OTA?
Click to expand...
Click to collapse
yes..but root most likely won't survive..youll have to rsd back to stock...download pwnmymoto. install it but don't run it... accept the ota and then the phone will reboot and it should be rooted...should be LOL
Freezing updater . apk doesn't stop the prompts to update.
Sent from my XT1080m using Tapatalk
jfriend33 said:
Freezing updater . apk doesn't stop the prompts to update.
Click to expand...
Click to collapse
Did you freeze MotorolaOTA in addition to Updater?
dano1282 said:
yes..but root most likely won't survive..youll have to rsd back to stock...download pwnmymoto. install it but don't run it... accept the ota and then the phone will reboot and it should be rooted...should be LOL
Click to expand...
Click to collapse
So this is NOT true?
Seems as if I would accept OTA, I'm looking at the business end of a bootloop?
WaltA said:
Did you freeze MotorolaOTA in addition to Updater?
Click to expand...
Click to collapse
No. I assume I'd have to use titanium backup to freeze the MotorolaOTA app?
Sent from my XT1080m using Tapatalk
jfriend33 said:
No. I assume I'd have to use titanium backup to freeze the MotorolaOTA app?
Click to expand...
Click to collapse
I did, to freeze both (Updater and MotorolaOTA).
WaltA said:
I did, to freeze both (Updater and MotorolaOTA).
Click to expand...
Click to collapse
I did this and it stopped the download (I'm rooted and down have time today with messing around with unbricking a bootlooping phone).
I'm glad I happened to look at my phone on my way home from work because it appears that this update just inflicts itself on the phone without any real chance to decline it (at 2am when most people are sleeping).
My Maxx installed the update this morning and has been stuck in a constant reboot cycle ever since. It will boot long enough for me to go in and check on the update (which states that the "Install is deferred") then simply reboots again and again. There is also a code 252 on the software install screen.
Can anyone help me get out of the reboot cycle? My phone is rooted with the entitlement check set to 0, other than that completely stock.
cmarshack said:
My Maxx installed the update this morning and has been stuck in a constant reboot cycle ever since. It will boot long enough for me to go in and check on the update (which states that the "Install is deferred") then simply reboots again and again. There is also a code 252 on the software install screen.
Can anyone help me get out of the reboot cycle? My phone is rooted with the entitlement check set to 0, other than that completely stock.
Click to expand...
Click to collapse
I'm in the EXACT same boat as you. Hoping someone has a solution to this.
cmarshack said:
My Maxx installed the update this morning and has been stuck in a constant reboot cycle ever since. It will boot long enough for me to go in and check on the update (which states that the "Install is deferred") then simply reboots again and again. There is also a code 252 on the software install screen.
Can anyone help me get out of the reboot cycle? My phone is rooted with the entitlement check set to 0, other than that completely stock.
Click to expand...
Click to collapse
You were probably rooted and thus lost your recovery from pwnmymoto. You need to fxz back to stock.
Sent from my XT1080m using Tapatalk
jfriend33 said:
You were probably rooted and thus lost your recovery from pwnmymoto. You need to fxz back to stock.
Sent from my XT1080m using Tapatalk
Click to expand...
Click to collapse
What is the process for "fat back to stock?"

New OTA

Just woke up to another OTA and wondering if anyone has updated yet? not sure if its 5.1.1 or not.
Hard to tell since you don't say what you currently have. Could be the latest 5.02 or something else.
I got it too and installed it. I'm still on 5.0.2
From what I read it's just a small security update and to allow roaming in Puerto Rico. Nothing big
Phone info after the update:
It allows roaming in Puerto Rico and fixes reactivation lock and that's it really
Sent from my SM-G920V using Tapatalk
I would be careful updating if you have root as the kernel is dated June 17th.
Well I have OTA's blocked to prevent them. I don't see a reason to let this one install.
Official changelog from Verizon. Build number: VRU2AOF1.
Anyone know what they changed with RL? How does that affect you if you've had legit trouble turning the feature off?
How do I manually turn that off?
What app(s) do I freeze to turn off OTA? I'm using Titanium, and i just don't want to fudge it up.
I'm guessing System Updates 1.0? Is it just that, or am I missing it?
So I am rooted and I accidently hit it. I'm stuck on the Verizon red logo after boot..
Nevermind, force reset and phone booted up. The security update said it has been updated but I am still rooted.
nvertigo said:
So I am rooted and I accidently hit it. I'm stuck on the Verizon red logo after boot..
Nevermind, force reset and phone booted up. The security update said it has been updated but I am still rooted.
Click to expand...
Click to collapse
Did you root with RL on? I had trouble with RL and am scared to root it now and even more so to take the update.
What a useless update, just give us 5.1.1 already Verizon.
nvertigo said:
So I am rooted and I accidently hit it. I'm stuck on the Verizon red logo after boot..
Nevermind, force reset and phone booted up. The security update said it has been updated but I am still rooted.
Click to expand...
Click to collapse
odd considering it usually wouldnt work at all if youre rooted..
and of1 as it stands is most likely not able to be rooted
Sent from my SM-G925V using XDA Free mobile app
segadennisis76 said:
What app(s) do I freeze to turn off OTA? I'm using Titanium, and i just don't want to fudge it up.
I'm guessing System Updates 1.0? Is it just that, or am I missing it?
Click to expand...
Click to collapse
Either delete the following folders or freeze the apks with TB, I prefer to delete them. Removing the following apks will free you of OTAs and most of the annoying pop-ups.
SDM.apk system/app (OTA Updater)
SecurityLogAgent.apk system/app (Samsung Security Pop Up)
SPDClient.apk system/priv-app (Samsung Security Policy Update)
No way in hell am I updating my phone for that whack ass update.
I wonder if any of our ROM dev's will even debase.
I mean I guess the kernel / radio change may make it worth it but I will wait for 5.1.1.
musicfreak190 said:
No way in hell am I updating my phone for that whack ass update.
I wonder if any of our ROM dev's will even debase.
I mean I guess the kernel / radio change may make it worth it but I will wait for 5.1.1.
Click to expand...
Click to collapse
Same here, I'm waiting for 5.1.X and a safe way to root it. I have no plans at all to update my ROM to the new update.
If you value root....
If you like having root DO NOT update to OF1. It looks like rollback is prevented in this update... Thanks Verizon!!
Lifetrip718 said:
Did you root with RL on? I had trouble with RL and am scared to root it now and even more so to take the update.
Click to expand...
Click to collapse
??
Even though the instructions clearly say to turn OFF RL before rooting... but if you have OF1, you can't root it anyway, or at least not yet. PingPong method is no longer valid on that OTA and further.
Misterxtc said:
If you like having root DO NOT update to OF1. It looks like rollback is prevented in this update... Thanks Verizon!!
Click to expand...
Click to collapse
Wow.. Preventing roll back? Closing up root vulnerabilities? This is more than just a security move. Honestly is some scumbag stuff going on here. I don't want to leave Verizon but they are making it hard. They spend all this time working on some stupid ass update meanwhile Spring GS6 just got 5.1.1..
If they spent less time worrying about users flashing older Stock images and Rooting and working on the latest software I would have nothing to say.
I really hope Ping Pong can Root this soon. Flashing backwards prevention will only prevent people who are already on OF1 obviously but I feel bad for them.

Software update

Anybody know what it is. ..how can I disable it..don't want to update, still hoping for rooted one day
It's listed as the monthly android security patch update.
Sent from my SM-N920V using Tapatalk
Need to do it. Fixes recent security flaws
Verizon Wireless Technician using Tapatalk on Note 5
Jacob11701 said:
Need to do it. Fixes recent security flaws
Verizon Wireless Technician using Tapatalk on Note 5
Click to expand...
Click to collapse
Be nice if it addressed memory management a little.
Sent from my SM-N920V using Tapatalk
Sample
xavierxxx2p said:
Anybody know what it is. ..how can I disable it..don't want to update, still hoping for rooted one day
Click to expand...
Click to collapse
You can block SDM.apk with this debloater if you don't want to be nagged anymore. Seeing that the update was already downloaded you will have to enter recovery mode and clear cache to get rid of the install nag. After you do that and disable SDM.apk you will no longer get the notification. I went ahead and installed it anyways because I'm not too concerned with root. I'd rather have a secure device.
Misterxtc said:
You can block SDM.apk with this debloater if you don't want to be nagged anymore. Seeing that the update was already downloaded you will have to enter recovery mode and clear cache to get rid of the install nag. After you do that and disable SDM.apk you will no longer get the notification. I went ahead and installed it anyways because I'm not too concerned with root. I'd rather have a secure device.
Click to expand...
Click to collapse
Thanks man..I also took the update. .i guess I already got use to not being root. ..besides adguard and ogtube help alot.
xavierxxx2p said:
Thanks man..I also took the update. .i guess I already got use to not being root. ..besides adguard and ogtube help alot.
Click to expand...
Click to collapse
Your welcome. I feel the same here. My S6 lost root the Note 4 never had it except the dev ed I had for a short time so I got used to no root as well. With the debloater it's no big deal for me anymore and being able to theme really settled the issue for me. I can do basically everything I want and still have a secure phone without worrying when root will get killed. I do miss building ROMs a little but I can deal without it.
weird layout after update
So I took the update and since the all my menus are on the right side of screen, my send button in text is now on the left side as well as my statusbar icons. Nobody else mentioned this. Is it just my n5?
deno24 said:
So I took the update and since the all my menus are on the right side of screen, my send button in text is now on the left side as well as my statusbar icons. Nobody else mentioned this. Is it just my n5?
Click to expand...
Click to collapse
Can you post screenshots?
Verizon Wireless Technician using Tapatalk on Note 5
Misterxtc said:
You can block SDM.apk with this debloater if you don't want to be nagged anymore. Seeing that the update was already downloaded you will have to enter recovery mode and clear cache to get rid of the install nag. After you do that and disable SDM.apk you will no longer get the notification. I went ahead and installed it anyways because I'm not too concerned with root. I'd rather have a secure device.
Click to expand...
Click to collapse
It works. If you remember to turn USB debugging on........
Yes, it works just fine.
Sent from my SM-N920V using Tapatalk
billinaz said:
It works. If you remember to turn USB debugging on........
Click to expand...
Click to collapse
Or the app package disabler does it perfectly from the phone itself without root. Easy check and uncheck
Verizon Wireless Technician using Tapatalk on Note 5

Software update!!!!! Should I update or?

Just today around 5am pst I got a software update for my s7 has anyone else got it? Should I update or avoid it? I attached two screenshots of what It says!
After updating, you will not be able to downgrade to the old software because of updates to the security policy.
Click to expand...
Click to collapse
"No take-backsies! -T-Mobile/Samsung"
I would only do it if you want the patch and your phone is not rooted.
ruapotato said:
I would only do it if you want the patch and your phone is not rooted.
Click to expand...
Click to collapse
But then again I do want root so I don't want to risk it
Mine just got something too
That's a sizeable update at 216mb !
Sent from my SM-G930T using XDA-Developers mobile app
PunishedSnake said:
Mine just got something too
Click to expand...
Click to collapse
I got this too, let's hope it's fixes battery drain
How do you root when bootloader is not even available?
I just update. The SD reminder thing is still there after a cold boot.
chong67 said:
How do you root when bootloader is not even available?
I just update. The SD reminder thing is still there after a cold boot.
Click to expand...
Click to collapse
I don't think we will ever see that fixed the right way. I'm 99% convinced it's a hardware issue.
My update is running now. Agree the update is pretty big. If this fixes battery drain, no need for root for me.... Between package disabler pro + runtime permissions, not much is needed anymore for root. The only thing is some are saying if you use package disabler pro, there can be more battery issues than not because the OS tries to reference those disabled packages. I'm not sure how that would be any different though if you froze them with titanium backup or something
sent from my bootloader locked $700 SM-G930T.
kurplop said:
sent from my bootloader locked $700 SM-G930T.
Click to expand...
Click to collapse
I seen that too not sure what it means if that's a bootloader menu then not sure how to access it
Sent from my SM-G930T using Tapatalk
I installed the update. My phone rebooted and after I log in it goes to a black screen that says "Installing applications" with a progress bar that never shows any progress. Not sure what is going on and how to get back to my launcher. When I select the recent apps button I can see my recent apps and interact with them. It is just the launcher and pull down notification shade that are not running so I can't launch anything else.
Any ideas how to fix it?
---------- Post added at 07:11 PM ---------- Previous post was at 06:57 PM ----------
Never mind. I just needed to be patient
Sent from my SM-G930T using XDA-Developers mobile app
So has anyone tried to flash TWRP with ODIN since this update?
seanvree said:
So has anyone tried to flash TWRP with ODIN since this update?
Click to expand...
Click to collapse
If you link me to the file I'll try
Sent from my SM-G930T using Tapatalk
seanvree said:
So has anyone tried to flash TWRP with ODIN since this update?
Click to expand...
Click to collapse
Same error secure boot recovery failed
Sent from my SM-G930T using Tapatalk
seanvree said:
So has anyone tried to flash TWRP with ODIN since this update?
Click to expand...
Click to collapse
Twrp was avail for the s7?
THORMUNZ said:
Twrp was avail for the s7?
Click to expand...
Click to collapse
Yes it's in the international s7 thread qcom twrp and our device is listed
Sent from my SM-G930T using Tapatalk
The last paragraph says it all. If someone is working on an exploit to unlock the bootloader in it's current state, and you take the update, * After updating , you will not be able to downgrade to the old software because of updates to the security policy. * Then you would need to wait for the next exploit to come out to get past the new security updates.
Whatever, the phone is great stock with package disabler. Only thing I might want root for is unlimited tethering.

Categories

Resources