search

kdrag0n / safetynet-fix

Google SafetyNet attestation workarounds for Magisk
MIT License
6.19k stars 324 forks source link

CTS profile failed, unlocked bootloader still detected #170

Closed ghost closed 1 year ago

ghost commented 2 years ago

Describe the bug This module doesn't hide bootloader status in my custom ROM

Expected behavior Passing CTS in safetynet

Screenshots Screenshot_20220313-121558_YASNAC

Screenshot_20220316-171436_Trebuchet

Screenshot_20220316-171344_Trebuchet

Device info Device model: Huawei Fla-lx1 Android version:11 ROM name/version: CAOS11

Checklist

Displax commented 2 years ago

Use MHPC https://github.com/Magisk-Modules-Repo/MagiskHidePropsConf and configure valid build.fingerprint

ghost commented 2 years ago

Use MHPC https://github.com/Magisk-Modules-Repo/MagiskHidePropsConf and configure valid build.fingerprint

I already did that, did you read my issue all the way?

Displax commented 2 years ago

Use MHPC https://github.com/Magisk-Modules-Repo/MagiskHidePropsConf and configure valid build.fingerprint

I already did that, did you read my issue all the way?

No, you didn't. Your fingerprint still unchanged.

158624653-0d211ada-0f44-44c3-be22-cc32509f5849

Also, check your SELinux state.

ghost commented 2 years ago

@Displax se Linux enforcing, also magiskhide props did nothing to help, so idk

Displax commented 2 years ago

Your problem is not about bootloader status not hidden for MOMO (it uses HARDWARE method). You need to change fingerprint, if MHPC don't working for you - do it by another way (and send correct bugreport to MHPC issues section).

peepshow-21 commented 2 years ago

I'm using Lineage 18.1 (nightly) on a OP 9 (lemonade) Magisk 24.3 with 2.2.1 module

I'm getting CTS Profile match fail too.

Can I post anything useful here to help figure out why?

pndwal commented 2 years ago

@Displax se Linux enforcing, also magiskhide props did nothing to help, so idk

Did you select fingerprint from list when configuring MHPC w/ a terminal emulator app?... Or it will do nothing of course... This is always needed w/ official LOS for example, but unofficial and other custom ROMs may spoof certified (fingerprint) themselves... @Displax knows his stuff...

SafetyNet passes for me on RN8T, but Momo always detects unlocked bootloader on MIUI (unless we fiddle with snapdragon DEVINFO or mediatek SECCFG partitions)... Not detected on many devices however...

pndwal commented 2 years ago

I'm using Lineage 18.1 (nightly) on a OP 9 (lemonade) Magisk 24.3 with 2.2.1 module

I'm getting CTS Profile match fail too.

Can I post anything useful here to help figure out why?

@kdrag0n covers need for MHPC in USNF GitHub main page... Covered in comments above also....

ghost commented 2 years ago

@pndwal yes I did select a fingerprint, still nothing.

AlexKusnezov commented 2 years ago

for me selecting fingerprint (OnePlus 6t Android 11) although I'm on LOS 19.1 did the trick