So I want to root my phone only so I can use it with my daydream vr viewer. In order to do that I have to edit the build.prop and I think also some xml file.
My issue is that by unlocking the bootloader you lose widevine l1 so no more netflix HD.
So my question is: Can I unlock, root, edit the files, unroot, relock the bootloader and if I do, will my build.prop remain the same one or is it overwritten when relocking the bootloader? Also does the widevine l1 status come back after relocking?
Thank you in advance
Relocking the bootloader with mods such as root and/or custom recovery TWRP will typically lead to no boot. My understanding, is that the phone needs to be fully stock when locking the bootloader (for the reason stated). Not sure what the result will be from changing build.prop, then removing all other mods (root, custom recovery) and relocking the bootloader. But I'd say it is risky. May lead to no boot, and possibly even resorting to the unbrick tool to get it going again.
Another thing to be aware, is that modifying build.prop may have some undesired side effects. Better to use one of the Magisk modules to get Daydream running, which you can then turn the Magisk module off when not needed (not using Daydream). On my OnePlus 3T, the modified build.prop for some reason caused glitches with the stock camera app (would not take any video) for some reason. I've only played around a little bit with Daydream (and corresponding Daydream enabler Magisk module). I haven't noted any side effect (like I did with the 3T and the camera app). But it's something to at least be aware of.
https://forum.xda-developers.com/mo...agisk-daydream-cardboard-enabler-nfc-t3917601
Correct me if I am wrong, but to use magisk wouldn't I need to be rooted? so again I would not have netflix HD.
You're better off flashing a completely unmodified version of OOS then follow these instructions
poulidis said:
Correct me if I am wrong, but to use magisk wouldn't I need to be rooted? so again I would not have netflix HD.
Click to expand...
Click to collapse
Once you unlock the bootloader, Widevine gets lost permanently. No going back even if you relock. Also Magisk is your root access.
Zocker1304 said:
Once you unlock the boot loader, Widevine gets lost permanently. No going back even if you re lock. Also Magisk is your root access.
Click to expand...
Click to collapse
Please stop spreading lies. Once you unlock boot loader yes you do lose widevine (drops down to l3 so 480p playback) you definitely can get it back by simply flashing another stock zip from oneplus and rebooting and relocking the bootloader. Once done it will restore your widevine. Please do research before you attempt to state something that isn't fact. Also doing the msm download tool will always relock your bootloader and restore widevine back to its original state.
poulidis said:
Correct me if I am wrong, but to use magisk wouldn't I need to be rooted? so again I would not have netflix HD.
Click to expand...
Click to collapse
Magisk is the root method. So, yes, you would need to be rooted (and bootloader unlocked) to use the module. I'm suggesting the module as an alternative to "manually" changing build.prop, not as an alternative to rooting.
To add from my post above here is proof. Before this I was on Omni bootloader unlocked. I noticed TMobile dropped 9.5.9 and I wanted to test it. So I used the msm tool to go back to TMobile and took the ota updates to 9.5.9 now here I am with l1 access and full hd Netflix.
blackknightavalon said:
You're better off flashing a completely unmodified version of OOS then follow these instructions
Click to expand...
Click to collapse
I don't think you are properly understanding what the top poster is trying to do (or asking). He wants to keep(restore) Widevine L1 status (by relocking the bootloader) while still having a modified build.prop (so Daydream VR will work, which it will not on a fully stock 7 Pro).
redpoint73 said:
I don't think you are properly understanding what the top poster is trying to do (or asking). He wants to keep(restore) Widevine L1 status (by relocking the bootloader) while still having a modified build.prop (so Daydream VR will work, which it will not on a fully stock 7 Pro).
Click to expand...
Click to collapse
It won't work as dm verity will kick in and not allow the phone to boot. It checks if anything has been modified and if it has it will flag the phone and make it unbootable
joemossjr said:
It won't work as dm verity will kick in and not allow the phone to boot. It checks if anything has been modified and if it has it will flag the phone and make it unbootable
Click to expand...
Click to collapse
That was basically what I suspected (see Reply #2 above) but thanks for confirming/explaining it.
My reply that you quoted was in response to Reply #5 above, where the person seemed to misunderstand the original question, to be "how do you relock the bootloader" which isn't what was being asked (I was simply explaining the original question).
poulidis said:
So I want to root my phone only so I can use it with my daydream vr viewer. In order to do that I have to edit the build.prop and I think also some xml file.
My issue is that by unlocking the bootloader you lose widevine l1 so no more netflix HD.
So my question is: Can I unlock, root, edit the files, unroot, relock the bootloader and if I do, will my build.prop remain the same one or is it overwritten when relocking the bootloader? Also does the widevine l1 status come back after relocking?
Thank you in advance
Click to expand...
Click to collapse
You should better just flash Magisk through your TWRP and in Magisk Manager "hide" your root access in "Magisk Hide" menu. After that, you need to download and install "MagiskHide Props Config" module in the "Downloads" section and reboot your device.
I don't have Google Services to confirm it, but you can give it a try.
redpoint73 said:
That was basically what I suspected (see Reply #2 above) but thanks for confirming/explaining it.
My reply that you quoted was in response to Reply #5 above, where the person seemed to misunderstand the original question, to be "how do you relock the bootloader" which isn't what was being asked (I was simply explaining the original question).
Click to expand...
Click to collapse
Your fine I didn't mean to quote you lol
Related
XDA today published an article about a vulnerability in the OnePlus 6 bootloader that allows the booting of a custom boot.img image without unlocking the bootloader. This is of course a huge security risk but I'm sure OnePlus will patch it in an upcoming update. In the mean time, let's have some fun!
Back in the good old days of the Nexus 4, it was possible to install an app that would write boot config data to the device from userland, with root, to toggle the bootloader between the locked and unlocked states. The object of this post? Do this as a community for the OnePlus 6!
Why do this?
There are two major gains to being able to do this:
Security: once a device is rooted we'd be able to re-lock the bootloader to prevent tampering or unauthorised images from being booted whilst keeping the perks of being rooted
Netflix HD: Widevine L1 keys aren't accessible when the Bootloader is unlocked. This way, we may be able to get our Widevine keys accessible again to get HD Netflix with root
I attempted to reverse some of the bootloader on my own a few weeks back but didn't have much luck. With this vulnerability, my thoughts are that we could dump the data partitions with a locked device (that is exploited using this trick) and compare them with an unlocked device. This might give us the magic data that the bootloader uses to determine whether a device is locked or unlocked. Then, in theory, we should be able to toggle this data from userland. The only caveat to this is that I don't know whether the unlock state is stored somewhere in the TrustZone or if it is written to the flash like they did back in the Nexus days.
I honestly have no idea whether this will work, but surely it's worth a shot? Just for reference, I recommend we look at diffing following partitions before and after locking:
param
sec
sti
ssd
frp
config
misc
We should also, to ensure there is no confusion, stick to OOS 5.1.5 stock + Magisk for root. Images of the above partitions can be obtained using dd.
If anybody has any further tips on bootloaders that either proves that this won't work, or perhaps can suggest other places this lock data could be stored, please do let me know!
NB: getting this data will involve at least one full data wipe of the phone so it might take time to dump the data, switch lock state then dump it again.
I also strongly suspect that we might hit the issue of Android Verified Boot noticing that the device is locked (but has a modified boot image when rooted). This would depend on whether the Android security checks are implemented as per the Android Verified Boot specification.
Who's in?
Couldn't you just hide Netflix HD from root detection in Magisk?
dgunn said:
Couldn't you just hide Netflix HD from root detection in Magisk?
Click to expand...
Click to collapse
No. With an unlocked bootloader the device is switched to Widevine level 3 instead of level 1. This means no HD playback in Netflix (and I believe Amazon) regardless of Magisk hide status. This may be the new normal for all unlocked devices with the Qualcomm SD 845 or newer.
blackthund3r;76765953[* said:
Security: once a device is rooted we'd be able to re-lock the bootloader to prevent tampering or unauthorised images from being booted whilst keeping the perks of being rooted
Click to expand...
Click to collapse
Are you sure about this? On Nexus 4 days Android didn't check at boot that all partitions were correct in order to boot, since some version ago it does (DM-verity). Are you sure you can re-lock the phone with root (system or boot modified) and still boot normally to userspace?
RusherDude said:
Are you sure about this? On Nexus 4 days Android didn't check at boot that all partitions were correct in order to boot, since some version ago it does (DM-verity). Are you sure you can re-lock the phone with root (system or boot modified) and still boot normally to userspace?
Click to expand...
Click to collapse
Well, I can confirm that with SafetyNet test passing, and Magisk hide enabled for Netflix, I can not get HD streaming.
This is highly interesting. I will be following that threat constantly. Thanks for opening that discussion.
So does this vulnerability allow flashing or booting of TWRP through fastboot without unlocking the bootloader. I am interested in keeping Netflix HD and gaining root access, but don't want to brick the device. I know that under normal circumstances you always unlock the bootloader before flashing any mods, but was curious of some devs thoughts on it.
Interesting read. You can root the device without unlocked bootloader
https://www.androidcentral.com/oneplus-6-bootloader-vulnerability-lets-anyone-access-your-phone?amp
the question is can we keep opened this feature and force to be opened.
Unfortunately oneplus bootloader doesn‘t support EIO mode,so it can't be boot if anything modified.
akaHardison said:
Unfortunately oneplus bootloader doesn‘t support EIO mode,so it can't be boot if anything modified.
Click to expand...
Click to collapse
Not true booted a magisk patched boot image and installed some modules
Is there Maby another methode to root hold safety net for widevine lv3
---------- Post added at 06:28 PM ---------- Previous post was at 06:23 PM ----------
joemossjr said:
Not true booted a magisk patched boot image and installed some modules
Click to expand...
Click to collapse
And did you also installed magisk to the boot img?!
Widevine L1 + V4A would make me very happy. Perhaps we should add a financial incentive like a bug bounty? I would certainly contribute some loot for this noble cause!
Since some people with OP5s and OP5Ts sent there phone to OP for L1 with the bootloader unlocked, I wonder if OP would consider offering a similar service. Even if it wasn't completely free I would probably do it unless it required re-locking the bootloader...
Currently I am on stock OOS with a locked bootloader and I heard that when you unlock the bootloader the DRM gets downgraded to L3.
Is this correct and does it go back to L1 if you relock the bootloader?
Also, is there a hack of some sort that allows the device to continue using L1 DRM with an unlocked bootloader?
L1 not working
I unlocked bootloader and then relocked it again but it is still showing L3 what should i do
Hey check this -> https://forums.oneplus.com/threads/closed-widevine-drm-on-op6.815683/page-2#post-18476836
You can try to flash magisk to pass the saftynet and hide netflix/amazon prime video to try HD content
edit:
My OnePlus 6 with unlocked bootloader and I have DRM lvl 3
Pundy said:
Hey check this -> https://forums.oneplus.com/threads/closed-widevine-drm-on-op6.815683/page-2#post-18476836
You can try to flash magisk to pass the saftynet and hide netflix/amazon prime video to try HD content
edit:
My OnePlus 6 with unlocked bootloader and I have DRM lvl 3
Click to expand...
Click to collapse
Ok so it is reversible
But there is no way to get L1 with an unlocked bootloader?
ThePiGuy said:
Ok so it is reversible
But there is no way to get L1 with an unlocked bootloader?
Click to expand...
Click to collapse
What I've seen by now, no it's not possible.
Pundy said:
What I've seen by now, no it's not possible.
Click to expand...
Click to collapse
Ah ok that's unfortunate
I'll probably stay with official OOS for the moment anyway, but thanks for the info
So, has anyone tried OOS 5.1.6 and the fastboot locked bootloader bug to backup and restore the DRM keys while locked or to use Magisk root while on 5.1.6 locked bootloader and see if L1 keys are retained?
driverdis said:
So, has anyone tried OOS 5.1.6 and the fastboot locked bootloader bug to backup and restore the DRM keys while locked or to use Magisk root while on 5.1.6 locked bootloader and see if L1 keys are retained?
Click to expand...
Click to collapse
There's another thread in this forum that poses that exact question. No one to date has succeeded and I'm not sure it's even possible using the 5.6 boot exploit because Widevine calls home every time it proxies protected content.
I suggested chipping in on a bounty that would go to whomever can find a way to get L1 on a OP6 with its' bootloader unlocked using a method that would be successful with ROMs based on OOS, LOS and AOSP. I figured a little financial incentive could provide some motivation, but nobody else seemed willing to contribute. ?
TuxRuffian said:
There's another thread in this forum that poses that exact question. No one to date has succeeded and I'm not sure it's even possible using the 5.6 boot exploit because Widevine calls home every time it proxies protected content.
I suggested chipping in on a bounty that would go to whomever can find a way to get L1 on a OP6 with its' bootloader unlocked using a method that would be successful with ROMs based on OOS, LOS and AOSP. I figured a little financial incentive could provide some motivation, but nobody else seemed willing to contribute.
Click to expand...
Click to collapse
Since I need L1 on an unlocked bootloader, I ended up getting a Moto Z3 Play despite it being slower since Widevine L1 stays regardless of bootloader state or Magisk being installed.
Hi, i am looking more styles for EdgeLighting. before, we could use EdgeLighting+ but now its not working on android 12.
there is an app called muviz edge that contains excellent styles but app does not work properly. so i am looking for a better app for replacing edgelighting+ with beautiful styles.
can we install S21 or something else edge lighting app on our A51?
do you have any recommended app?
Funny thing is, your phone already has all the edge lighting effects built in, the only problem is that there is a specific file called floating_feature that's missing one text line that would make all those extra edge lighting effects appear
So to answer your question, to get more styles for edge lighting you need to root your phone and edit the following file:
system/etc/floating_feature.xml
And add the following line inside the features:
<SEC_FLOATING_FEATURE_SYSTEMUI_CONFIG_EDGELIGHTING_FRAME_EFFECT>frame_effect</SEC_FLOATING_FEATURE_SYSTEMUI_CONFIG_EDGELIGHTING_FRAME_EFFECT>
Save, reboot and your phone should now have all the effects available that Samsung enables on their flagship phones.
And before you ask, no, there is no way to do this without root.
Tnx, but with root, secure folder will be disabled. and i cant root my phone.
in android 10 We could install edgelighting+ that installs additional styles. (without root).
so Did EdgeLighting+ somehow edit this file?
mahdi72 said:
Tnx, but with root, secure folder will be disabled. and i cant root my phone.
in android 10 We could install edgelighting+ that installs additional styles. (without root).
so Did EdgeLighting+ somehow edit this file?
Click to expand...
Click to collapse
I have no clue. But as you said, edge lighting+ no longer works so on newer Android versions, rooting is your only choice.
ShaDisNX255 said:
I have no clue. But as you said, edge lighting+ no longer works so on newer Android versions, rooting is your only choice.
Click to expand...
Click to collapse
Can i Edit Stock Rom in Linux (add Floating_Feature, remove apps, add new apps) and flash it in my A51 phone?
Do I need root to install this modified rom?
mahdi72 said:
Can i Edit Stock Rom in Linux (add Floating_Feature, remove apps, add new apps) and flash it in my A51 phone?
Do I need root to install this modified rom?
Click to expand...
Click to collapse
You will need to root, yes. Since you will edit it, it will lose Samsung's trusted signature and will therefore count as a custom ROM
ShaDisNX255 said:
You will need to root, yes. Since you will edit it, it will lose Samsung's trusted signature and will therefore count as a custom ROM
Click to expand...
Click to collapse
As far as I have researched, it does not seem to require root, but we have to open the bootloader or OEM Option in Developer Mode.
People are also talking about a tool called Odin Patched, which can bypass some verifications.
Is it possible to flash only the edited CSC file with this tool? Sorry to take up your time
mahdi72 said:
As far as I have researched, it does not seem to require root, but we have to open the bootloader or OEM Option in Developer Mode.
People are also talking about a tool called Odin Patched, which can bypass some verifications.
Is it possible to flash only the edited CSC file with this tool? Sorry to take up your time
Click to expand...
Click to collapse
Hey no worries, XDA is meant for a place to learn and I'm happy to try and help/educate in any way I can.
Opening the bootloader is step 1 in getting root access. You may think that root is the equivalent of installing Magisk and that's what root is but it's a lot more than that. By installing something custom you've in some way obtained root access by editing your stock ROM.
But anyway, going back to your original question/answer, the patched Odin can only bypass some verifications on Odin's side but it can't bypass the verification that the phone does itself. The patched Odin is mainly for installing U firmware on U1 variants and vice-versa, something that you can't do on the original Odin. It can't really bypass checking the validity of Samsung's signature on stock firmware. Even if it could bypass that check, the phone also checks the firmware it's being installed so it will detect it as a custom fw file
So, long story short, if you edit stock FW with any tool it will break Samsung's trusted signature and both phone and Odin will pick it up as a custom firmware (i.e. custom ROM) and you will only be able to install it by unlocking the bootloader. Flashing anything custom will break/trip Knox and it will be broken forever
Let me know if you have any more questions I can help you with.
ShaDisNX255 said:
Hey no worries, XDA is meant for a place to learn and I'm happy to try and help/educate in any way I can.
Opening the bootloader is step 1 in getting root access. You may think that root is the equivalent of installing Magisk and that's what root is but it's a lot more than that. By installing something custom you've in some way obtained root access by editing your stock ROM.
But anyway, going back to your original question/answer, the patched Odin can only bypass some verifications on Odin's side but it can't bypass the verification that the phone does itself. The patched Odin is mainly for installing U firmware on U1 variants and vice-versa, something that you can't do on the original Odin. It can't really bypass checking the validity of Samsung's signature on stock firmware. Even if it could bypass that check, the phone also checks the firmware it's being installed so it will detect it as a custom fw file
So, long story short, if you edit stock FW with any tool it will break Samsung's trusted signature and both phone and Odin will pick it up as a custom firmware (i.e. custom ROM) and you will only be able to install it by unlocking the bootloader. Flashing anything custom will break/trip Knox and it will be broken forever
Let me know if you have any more questions I can help you with.
Click to expand...
Click to collapse
Thank you, now many things are clear.
I want to know if unlocking the bootloader is worth it?
I have no problem with the warranty, I have the phone for more than 2 years and Samsung has no after sales service in our country. But for me, the use of banking app, Secure Folder, Samsung Pass are very important.
Is there a way to make all these apps work without problems by unlocking the bootloader?
Surely the OTA updates will also fail with this work, right?
can i unlock bootloader, flash edited files and relock bootloader?
mahdi72 said:
But for me, the use of banking app, Secure Folder, Samsung Pass are very important.
Click to expand...
Click to collapse
Some banking apps are harder to trick than others. I have no problems hiding root from my banking app but I've seen others struggle to hide from theirs, can't really comment on it. Secure Folder has a fix in Android 12 so it should be able to be fixed. Samsung Pass is something that still has no fix as far as I know so if you decide to root/blow knox fuse, this will never work again even if you lock your bootloader again. I've made my change to Google Pass which works with root so Samsung Pass isn't important to me anymore.
mahdi72 said:
Surely the OTA updates will also fail with this work, right?
Click to expand...
Click to collapse
This is correct, OTA updates stop working when you unlock your bootloader but if you re-lock your bootloader, you may get OTA updates again.
mahdi72 said:
can i unlock bootloader, flash edited files and relock bootloader?
Click to expand...
Click to collapse
No, this will lock your phone. Once you edit anything with root or install a custom fw (rom) then it will always count as custom for the phone. If you lock your bootloader while you have custom fw installed, your phone will be stuck in download mode telling you that your phone has custom fw and will refuse to boot until you flash stock fw.
Thank you very much for your very detailed explanation
So, for this part, I need Magisk, which probably Hide all banking apps in Iran
ShaDisNX255 said:
Some banking apps are harder to trick than others. I have no problems hiding root from my banking app but I've seen others struggle to hide from theirs, can't really comment on it.
Click to expand...
Click to collapse
According to your explanation, This is my decision: I can unlock the bootloader and flash the modified ROM (I can apply the necessary fixes for Secure Folder and other changes to the ROM (Can i?)). The only thing I miss is the Samsung Pass feature, which I can replace with Google Pass, OTA updates can be ignored and do not have much priority for me.
The only important thing is the banking apps.
When the bootloader is unlocked, is the root status rooted or un-rooted? Because I feel that some banking apps only check root access and have nothing to do with bootloader (At least in Iran).
If the root status has not changed after Unlocking the bootloader (I think the root status changes after installing Magisk or SU) I think that I can do the above steps and reach my goal
mahdi72 said:
This is my decision: I can unlock the bootloader and flash the modified ROM (I can apply the necessary fixes for Secure Folder and other changes to the ROM (Can i?))
Click to expand...
Click to collapse
You can, yeah.
mahdi72 said:
When the bootloader is unlocked, is the root status rooted or un-rooted?
Click to expand...
Click to collapse
With unlock bootloader alone it's still un-rooted
mahdi72 said:
When the bootloader is unlocked, is the root status rooted or un-rooted? Because I feel that some banking apps only check root access and have nothing to do with bootloader (At least in Iran).
If the root status has not changed after Unlocking the bootloader (I think the root status changes after installing Magisk or SU) I think that I can do the above steps and reach my goal
Click to expand...
Click to collapse
This is where it can get a little tricky and depends on each app because it's not a standard. If your banking app checks if your bootloader is unlocked then you pretty much need Magisk to hide your bootloader unlocked. Without Magisk, any app will be able to check that you have an unlocked bootloader
If your bank app checks to see if you have Magisk only then you can certainly avoid having to flash Magisk if you're not going to use it anyway
If your bank apps checks safetynet then you will again need to flash Magisk and flash a patch to pass safetynet tests
Again, it's not a standard so it all depends on the bank app in question. You can certainly try to unlock your bootloader and stay in stock and check if your bank apps detects your unlocked bootloader. Just unlocking bootloader shouldn't blow knox yet.
ShaDisNX255 said:
You can, yeah.
With unlock bootloader alone it's still un-rooted
This is where it can get a little tricky and depends on each app because it's not a standard. If your banking app checks if your bootloader is unlocked then you pretty much need Magisk to hide your bootloader unlocked. Without Magisk, any app will be able to check that you have an unlocked bootloader
If your bank app checks to see if you have Magisk only then you can certainly avoid having to flash Magisk if you're not going to use it anyway
If your bank apps checks safetynet then you will again need to flash Magisk and flash a patch to pass safetynet tests
Again, it's not a standard so it all depends on the bank app in question. You can certainly try to unlock your bootloader and stay in stock and check if your bank apps detects your unlocked bootloader. Just unlocking bootloader shouldn't blow knox yet.
Click to expand...
Click to collapse
thank you so much Now everything became clear to me
Hi folks,
I've managed to stumble my way through using pixel flasher to update my P7Pro to the latest fw with root. Only need root so I can record calls, should I lock the bootloader now I'm done?
Also how do I update in future please without having to wipe, use pixel flasher and patch as I've just done?
I like to think I'm quite tech savvy but the guides for the P7Pro have gone over my head :/
Connorsdad said:
Hi folks,
I've managed to stumble my way through using pixel flasher to update my P7Pro to the latest fw with root. Only need root so I can record calls, should I lock the bootloader now I'm done?
Click to expand...
Click to collapse
Not unless you want to brick your device. You need to be completely stock before relocking your bootloader (unless using avbroot, but you should have a deep understanding about how it works beforehand).
Connorsdad said:
Also how do I update in future please without having to wipe, use pixel flasher and patch as I've just done?
Click to expand...
Click to collapse
Pixel Flasher will work fine for updating.
Lughnasadh said:
Not unless you want to brick your device.
Click to expand...
Click to collapse
Huh, learn something new every day I guess...
Lughnasadh said:
Not unless you want to brick your device. You need to be completely stock before relocking your bootloader (unless using avbroot, but you should have a deep understanding about how it works beforehand).
Pixel Flasher will work fine for updating.
Click to expand...
Click to collapse
Awesome, thanks a lot for your reply, much appreciated.
never ever* lock bootloader on google devices. fastboot only works on unlocked bootloader and there is no alternative to fastboot.
* exception
alecxs said:
never ever lock bootloader on google devices. fastboot only works on unlocked bootloader and there is no alternative to fastboot.
Click to expand...
Click to collapse
And you can't flash a factory image to fix a phone on your own when it's soft bricked. It might have to go to a shop for repairs.
Connorsdad said:
Hi folks,
I've managed to stumble my way through using pixel flasher to update my P7Pro to the latest fw with root. Only need root so I can record calls, should I lock the bootloader now I'm done?
Also how do I update in future please without having to wipe, use pixel flasher and patch as I've just done?
I like to think I'm quite tech savvy but the guides for the P7Pro have gone over my head :/
Click to expand...
Click to collapse
AFAIK, relocking the bootloader requires wiping the device -- much like unlocking does -- and if you're unwilling to set everything (including anything on your /sdcard internal storage, not to mention all apps and their settings & system settings) back up from scratch (as any good complete backups require root access), this might not be what you wish to do.
And, if you had managed to successfully relock the bootloader, you could simply run the in-system update (OTA) that would update without wiping -- or even manually applying OTA from the recovery.
But there are hardly any benefits in re-locking the bootloader (after unlocking it) -- even if one was to a paranoid degree of security; which is the only major reason to (I can point you to the discussions that had taken place on it here, if you wish). If you don't want to run into any issues, you could simply run the stock ROM without root and be hardly impacted by it; with the added benefit of having the option to advanced recovery options and/or rooting options open to you in the future if need be...
alecxs said:
never ever lock bootloader on google devices. fastboot only works on unlocked bootloader and there is no alternative to fastboot.
Click to expand...
Click to collapse
*it just occurs to me you meant to never lock bootloader because it limits options; not the risk of hard-bricking the device -- in which I wrote the following with that assumption. I'll leave the following comment as it is still sound advice, but I apologize in advanced that it doesn't quite relate to what you meant...
I mean, I feel doing Google's official Android Flash Tool is a safe enough method; it wouldn't do well if Google's own tool bricked their devices using their tool...at the very least the tool ensures that the stock factory firmware flashed matches the bootloader version and automates the fastboot commands so when re-locking the bootloader, it has the least potential to brick the device...
Exactly. there is no official flash tool from google, that's why I personally won't recommend to keep bootloader locked. If it's bricked with no working recovery mode, not even repair shop can fix it. all you can do is RMA to google get new device. no edl mode or anything else will help, fastboot is the official flashing method.
If you're referring to the "Android Flash Tool" that's no flash tool at all. I haven't tested it, but to me it looks like a WebUSB browser plugin. Reading the requirements it works with adb commands, usb-debugging and fully booted android is required. Therefore cannot unbrick devices.
Doesn't unlocking the bootloader break saftynet so then you have to root to use gpay?
iRhyiku said:
Doesn't unlocking the bootloader break saftynet so then you have to root to use gpay?
Click to expand...
Click to collapse
I'll just chime in here because I have recently unlocked my bootloader but I haven't been able to root it yet and I haven't had any issues with safety net.
Trippyy Doee said:
I'll just chime in here because I have recently unlocked my bootloader but I haven't been able to root it yet and I haven't had any issues with safety net.
Click to expand...
Click to collapse
Interesting, I thought unlocking would break it. I'll have to unlock then for the extra safty!
iRhyiku said:
Interesting, I thought unlocking would break it. I'll have to unlock then for the extra safty!
Click to expand...
Click to collapse
That's of course another aspect. Good point. If you rely on SafetyNet or it's successor Play integrity, do not unlock bootloader. AFAIR the latter one can't be cheated.
simplepinoi177 said:
But there are hardly any benefits in re-locking the bootloader (after unlocking it)
Click to expand...
Click to collapse
There are some benefits like some banking apps, streaming apps and games beginning to work. So it really depends on what is important for the user. I don't like flashing random mods to make apps work on rooted/ bootloader unlocked devices, primarily banking apps.
I've successfully reverted back to stock rom using the rescue software but couldn't figure out how to relock the bootloader. Could anyone post a tutorial on it?
raiprasant62 said:
I've successfully reverted back to stock rom using the rescue software but couldn't figure out how to relock the bootloader. Could anyone post a tutorial on it?
Click to expand...
Click to collapse
Fastboot mode => fastboot flashing lock
Will I get widevine L1 support back if I relock bootloader? And will I be able to unlock it again?
raiprasant62 said:
Will I get widevine L1 support back if I relock bootloader?
Click to expand...
Click to collapse
I don't know
raiprasant62 said:
And will I be able to unlock it again?
Click to expand...
Click to collapse
yes
@raiprasant62 it is VERY CRITICAL that you have the correct stock ROM variant for your model installed before relocking bootloader or it'll lock and give a corrupt device warning and fail to boot!!!!
The ONLY safe way to relock bootloader is to use Motorola Rescue and Smart Assistant tool and then boot into the ROM and then attempt relocking
Has anyone successfully relocked the phone and checked Widevine L1 status after relock?
I read somewhere here that once unlocked.. this phone can never get L1 back and is stuck on L3 forever. But I can't find where. I wonder if it's speculation or has anyone actually tried it?
JonW434 said:
Has anyone successfully relocked the phone and checked Widevine L1 status after relock?
I read somewhere here that once unlocked.. this phone can never get L1 back and is stuck on L3 forever. But I can't find where. I wonder if it's speculation or has anyone actually tried it?
Click to expand...
Click to collapse
is there a fully working TWRP build available for this device which can backup /data? if yes then backup your data -> relock the bootloader -> boot into system and see what will happen.
As far as I know, there's no working TWRP currently, but I will keep looking. I haven't seen anyone talk about using it.
I did find this, from here, but I haven't found anyone talk about the pros and cons or if it worked or not. My phone hasn't been unlocked yet, because I'm unsure if I will get L1 back if I ever relock it. If I unlock it, I'll test a few of the ROMS on here out and see what happens.
JonW434 said:
I did find this, from here, but
Click to expand...
Click to collapse
that's all I could find, too. but it's unclear if it's able to decrypt & backup /data.
I assume it would be possible to bring back L1 since it depends on your verified boot state. it's like the Play Store certification I think.
@JonW434 I have heard users on Telegram saying that yes relocking bootloader that WV L1 does come back on Motorola devices
ThE_MarD said:
@JonW434 I have heard users on Telegram saying that yes relocking bootloader that WV L1 does come back on Motorola devices
Click to expand...
Click to collapse
Yeah it seems so.
Like you said in post #5, it seems the most important thing is to make sure to have correct version of stock rom installed for correct model. Outside of that, it just seems there aren't many people relocking in order to confirm it. But it seems like it should work like with any other phones. I've seen other Motorola users (for other models) that it relocks fine. I'm not sure where it came from that this phone can't do that, maybe it was a misunderstanding.
JonW434 said:
I'm not sure where it came from that this phone can't do that, maybe it was a misunderstanding.
Click to expand...
Click to collapse
some Moto's will never get back the state of "oem_locked" once they were unlocked. maybe that's the reason. but it doesn't effect the verfied boot state.
WoKoschekk said:
some Moto's will never get back the state of "oem_locked" once they were unlocked. maybe that's the reason. but it doesn't effect the verfied boot state.
Click to expand...
Click to collapse
Interesting. I've been outside the world of Android stuff for a few years and have been relearning everything, or some new things that have changed.
Is there a way to check the state of these things via an app or rooted file explorer or are this things inaccessible to us, in terms of modifying or viewing them?
JonW434 said:
Interesting. I've been outside the world of Android stuff for a few years and have been relearning everything, or some new things that have changed.
Is there a way to check the state of these things via an app or rooted file explorer or are this things inaccessible to us, in terms of modifying or viewing them?
Click to expand...
Click to collapse
on your fastboot screen bottom left: oem_locked, flashing_unlocked or flashing_locked
JonW434 said:
Has anyone successfully relocked the phone and checked Widevine L1 status after relock?
I read somewhere here that once unlocked.. this phone can never get L1 back and is stuck on L3 forever. But I can't find where. I wonder if it's speculation or has anyone actually tried it?
Click to expand...
Click to collapse
I don't know how to check that but after relock I was able to use Google wallet without any hacks. Also unlock again was not a problem. Now I am on stock 13 ROM rooted. That works good for me.