Passing Google Safety Net On Lineage 18.1 + microG + Magisk Root - OnePlus 8T Questions & Answers

Hi folks!
I'm trying to pass the Google Safety Net on my 8T but I fail both on the basic integrity and the cts profile check.
So here's what I did:
I started from a "clean" phone, out-of-the-box with stock everything.
I installed Lineage OS for microG = no gapps (their custom recovery and the ROM image from here following this wiki guide)
I updated the preinstalled Magisk to the newest version (version 23.0 (23000))
I patched my boot image with Magisk, flashed it, getting root.
I installed microG DroidGuard Helper from the Fdroid nanolx repository (version 0.1.0-10-gf64bf69)
I installed the following module: MagiskHide Props Config (version 5.4.0-v128)
I rebooted
I enabled Magisk Hide and hid microG Services Core ( = com.google.android.gms) and tried to hide DroidGuard (but the checkbox wouldn't stay ticked)
I rebooted
After this, I can't even get past the basic integrity test. The evalType says basic.
So I have read about this Universal Safety Net fix to pass the cts profile check but it says it would require a pass in the basic integrity test first, so I'm out of luck there.
As this is the first time I'm dabbling with rooting my phone please point out any mistakes and request any information you might need to help.
Thanks in advance,
Alex

Unless something has changed very recently you can't pass SafetyNet in microg.

Oh, I see. That's a shame. Do you know why that is or can you point me to a source that explains why this does not work or what would be needed to make it work?

tangboshi said:
Oh, I see. That's a shame. Do you know why that is or can you point me to a source that explains why this does not work or what would be needed to make it work?
Click to expand...
Click to collapse
I believe to remember that the microG thread contains a few information:
[APP] microG GmsCore - lightweight free software clone of Google Play Services
Introduction microG GmsCore is a FLOSS (Free/Libre Open Source Software) framework to allow applications designed for Google Play Services to run on systems, where Play Services is not available. If you use your phone without GAPPS this might...
forum.xda-developers.com
The required DroidGuardHelper isn't up-to-date - and probably can't be updated, I don't know.
You can't also check the µG Github for reported issues:
GitHub - microg/GmsCore: Free implementation of Play Services
Free implementation of Play Services. Contribute to microg/GmsCore development by creating an account on GitHub.
github.com
Personally, I using µG for years but I personally don't require to pass SafetyNet i.e. I never cared.

microG GmsCore 0.2.23.214816 can pass SafetyNet.
Starting from this version microG DroidGuard Helper is no longer needed and it must be removed.

ale5000 said:
microG GmsCore 0.2.23.214816 can pass SafetyNet.
Starting from this version microG DroidGuard Helper is no longer needed and it must be removed.
Click to expand...
Click to collapse
Any guides on this anywhere ? Is it true for all devices ? Mine is XZ2C anyway..
I've tried LineageOS for micro g and official lineageOS installing micro g afterwards and no luck still.
official lineageOS with google services works fine to pass safetynet.
Your input or a little guide would be greatly appreciated. Thank you

Related

Replace fakestore with PLAY STORE and install droidguard and pass safetynet!

This is a module to simple replace fakestore with playstore and install droidguard helper in los microg forks, as many prefer microg over gapps and for an easy life they just install los microg for but los microg comes with fakestore and no droid guard helper which breaks safetnet and user cant use paid apps as yalp store/aurora store downloaded paid apps doesnt pass license verification
for making users work easy i just made this module to do all systemlessly and making ** OTA's INSTALLABLE ** and this thing ota survivable.
LINK: https://github.com/Shabinder/Replace-fakestore-with-playstore-mod-and-install-Droidguard
now we can install paid apps from playstore and can pass safetynet without any issue(add droidguard in magisk hide)
NOTE: In some cases if during safety net check droidguard stops then plz intall the apk as an update over installed app by extracting the module zip in /system/priv-apps/droidguard
For updating playstore download fdroid and add this repo in it " https://nanolx.org/fdroid/repo/?fin...6FE93D14596B381D75BE83A1D616E2D44A12654AD015"
NEED HELP OR REPORT ISSUES: WRITE TO @shabinDER ON TELEGRAM
###credits: MARVIN FOR MICROG , NANOLX FOR MODDED PLAYSTORE , TECHNO SHAB(aka Shabinder) for this module.
Are there any news on this?
I tried the last version, but as already written on GitHub, it also ended in a bootloop.
Unfortunately I had the same problem - ended in bootloop

Rooted OOS - Replace GApps with microG?

Anyone aware of replacing stock GApps with microG on the stock rom? I'm sure signature spoofing would need to be enabled (via Haystack?) and assuming other changes as well. Mainly looking for a stock-ish setup with GApps and telemetry removed similar to the Tomatot Debloater but keeping as much stock functionality as possibly - VoLTE, VoWifi, fp, etc.
Thanks!
Yes it is possible, I am running MicroG on OOS 10.3.0. You can delete GmsCore (Google Play Services) and Google Services Framework in /system/system/product/priv-app through TWRP by mounting system. OOS doesn't have signature spoofing so you'll also need to use EdXposed for FakeGapps and XposedGmsUnifiedNlp. Then flash the MicroG Installer (Magisk module), and update microG in F-Droid. You can then remove all of the OOS filth and spyware with the debloater module. For this ti work, GmsCore and Google Services Framework cannot be debloated, they have to be deleted manually. For some reason safety net isn't passing atm, still figuring this out.
What even is the point of using microG on a proprietary rom? I suggest you use a rom which supports signature spoofing by default like aosip 10
Adolamin said:
Yes it is possible, I am running MicroG on OOS 10.3.0. You can delete GmsCore (Google Play Services) and Google Services Framework in /system/system/product/priv-app through TWRP by mounting system. OOS doesn't have signature spoofing so you'll also need to use EdXposed for FakeGapps and XposedGmsUnifiedNlp. Then flash the MicroG Installer (Magisk module), and update microG in F-Droid. You can then remove all of the OOS filth and spyware with the debloater module. For this ti work, GmsCore and Google Services Framework cannot be debloated, they have to be deleted manually. For some reason safety net isn't passing atm, still figuring this out.
Click to expand...
Click to collapse
Safetynet will not work because it's MicroG. I've seen some users manage to pass safetynet with MicroG but you will need to rely on hacky workarounds like NanoDroid (although I personally wasn't able to get safetynet to pass).
You cannot degogle few things like google package installer, googleExt (something like that), when i tried to google them i got bootlooped, however i tried to remove them via debloter (magisk module), if anyone have completely removed gapps let me know
also microg or unifiednlp dont detect proper location for me when i am at my home idk why.
Kaz205 said:
What even is the point of using microG on a proprietary rom? I suggest you use a rom which supports signature spoofing by default like aosip 10
Safetynet will not work because it's MicroG. I've seen some users manage to pass safetynet with MicroG but you will need to rely on hacky workarounds like NanoDroid (although I personally wasn't able to get safetynet to pass).
Click to expand...
Click to collapse
OOS is currently the best rom IMO, chiefly because the OOS camera is that much better than the gcam ports, not to mention the roms stability.
My old phone has MicroG and safety net passes. I know it's possible, it's probably related to OOS not supporting signature spoofing.

NOGAPPS? MicroG?

Anybody gotten MicroG working on the Moto G7 Power? I've got the MetroPCS version, flashed with the RETUS firmware and rooted with Magisk. I've got most of the Google apps systemlessly uninstalled with the Terminal Debloater Magisk module but would like to get rid of Play Services too without losing stock rom and OTA updates. I always used NanoDroid before on my previous phone, Moto G3, but I can't seem to get it to work on this one. Running the patcher to make the stock rom support signature spoofing seems to work and NanoDroid seems to install without errors but when I reboot from TWRP the MicroG settings are nowhere to be found. It's listed in Magisk and MicroG and it's helper apps are listed as installed apps in Terminal but there is no way to access it. NanoDroid supposedly systemlessly removes any GAPPS that would cause a conflict with MicroG and I can verify in Terminal that Play Services & Play Store, at least, are no longer installed. I also tried the MicroG installer found in the Magisk repository with pretty much the same results. I thought that one might work since the NanoDroid Bromite Webview installer fails to install on this phone, claiming incompatibility, yet the Bromite Webview installer in the Magisk repository works without issue so I was hoping the same might be true with the MicroG installer but no such luck. I've tried various little variances in installation trying to get it to work but I'm pretty much stumped at this point.

Question What ROMs passes SafetyNet check?

I want to install custom ROM but I only have one phone right now, I use this X3 Pro for several apps(mostly banking, internet food services, delivery services) that requires SafetyNet.
Read the ROM description and look for safety net, if it's not written then just ask if it supports it. If you've still got no luck, backup your stock system (full twrp backup) and then flash the ROM and test if it supports safety net
ArrowOS 11/12, Pixel Experience.. these im sure of.
CrDroid
PhotonIce said:
Read the ROM description and look for safety net, if it's not written then just ask if it supports it. If you've still got no luck, backup your stock system (full twrp backup) and then flash the ROM and test if it supports safety net
Click to expand...
Click to collapse
yeah... so many questions can be avoid by just reading threads or google it...
Almost all ROMs except for LineageOS.
You can pass SafetyNet with LineageOS.
Just install Magisk, enable MagiskHide, and properly setup "MagiskHide Props Config" module.
komodo os
plskillme said:
I want to install custom ROM but I only have one phone right now, I use this X3 Pro for several apps(mostly banking, internet food services, delivery services) that requires SafetyNet.
Click to expand...
Click to collapse
All of the rom I tried are passing. If it doesn't just install MagiskHide Props Config. Steps are here. If you are using magisk v23 then enable magisk hide. If you using magiskv24 then enable zygisk, enforce list and choose google play service in the deny list then tick com.android.gms and com.android.gms.unstable. If you can't find it then tick show os app in the menu then reboot. It should pass.
tazaga said:
komodo os
Click to expand...
Click to collapse
this thing doesn't exist
gringo80 said:
this thing doesn't exist
Click to expand...
Click to collapse
There is this ROM but just didn't post on xda. Idk why dev don't post it but you can search on Google and go to their source forge folder. You can download there.
Alec Chan said:
There is this ROM but just didn't post on xda. Idk why dev don't post it but you can search on Google and go to their source forge folder. You can download there.
Click to expand...
Click to collapse
rom post in xda need to provide their kernel source code which is something for whatever reason some people find it uncomfortable to do so
zinconnu said:
You can pass SafetyNet with LineageOS.
Just install Magisk, enable MagiskHide, and properly setup "MagiskHide Props Config" module.
Click to expand...
Click to collapse
Actually, some LOS contributors put together a safetynet fix without the need of magisk, obviously not an official thingy.
GitHub - luk1337/ih8sn
Contribute to luk1337/ih8sn development by creating an account on GitHub.
github.com
SafetyNet seems to pass out of the box with most of the ROM's now, unless you flash Magisk.
But the latest version (Magisk 24.1) with zygisk, has a module available called Universal SafetyNet Fixer (by kdrag0n) which seems to fix both CTS Profile and Basic integrity.

Signature Spoofing in Android 10 (Android Q) (Nanodroid not working)

Hi XDA
I'm having an issue deodexing or signature spoofing, all the tutorials seem to be for Android 9, 11 or 12, but not 10. Everyone seems to recommend Nanodroid but that isn't working for me, the MicroG self-check fails on "System spoofs signature" and "Play Services (GmsCore) has correct signature", I hear this happens when spoofing is enabled system-wide, but most Gapps still don't work properly, like the Play Store crashing immediately on startup (I'd prefer to use the Aurora store so I'm just listing it as a symptom), YouTube (stock and revanced root installed) complaining that Play Services isn't enabled, no notifications and location services not working at all so Maps is useless.
I did try Smali Patcher and that didn't work either (though the Screenshot on restricted apps patch did work) and I've heard some call it "shady" though they didn't say why.
I've heard that there is a way of enabling spoofing on a per-app basis (like apps requesting root access) which I would prefer, and I wasn't really a fan of how Nanodroid disabled the app installation dialog box (I prefer to micromanage updates), though as mentioned above I did like that screenshots couldn't be blocked.
Does my ideal setup exist or it is another pipe-dream?
Thank you in advance.
Look inside here:
doc/NanoDroidPerm.md · master · Christopher Roy Bratusek / NanoDroid · GitLab
microG, F-Droid, GNU Bash, FOSS applications and more for Android
gitlab.com
jwoegerbauer said:
Look inside here:
doc/NanoDroidPerm.md · master · Christopher Roy Bratusek / NanoDroid · GitLab
microG, F-Droid, GNU Bash, FOSS applications and more for Android
gitlab.com
Click to expand...
Click to collapse
Thank you for the suggestion, I ran the script as root but it didn't change anything.
EDIT: I just read through the documentation on the nanodroid repo and it seems you can't set up MicroG using this method on a Gapps preloaded stock ROM without installing it through recovery, which I can't as there's no port of any custom recoveries like TWRP.

Categories

Resources