[Magisk] phh's SuperUser with Android Pay Support

phh's SuperUser with Android Pay Support

Requirements

You have to have Magisk installed on your device!
Magisk - The Universal Systemless Interface

Features

• Include Magisk Manager to completely unroot your device for Android Pay!
  
• Ships with SuperSU's supolicy (temporary solution), mods require sepolicy live patching can use without an issue!

Instructions

• Follow the instructions to install Magisk on your device (please use Magisk v2)
  
• Download the phh's SuperUser and flash through custom recovery
  
• How to use Android Pay:
  Here is a screenshot of Magisk Manager:
  
  Set the timeout you want, and press "Disable root". You can now use Android Pay in this period of time.
  
• If some root apps are not compatible, set SELinux to permissive. Note that I don't recommend switching to permissive permanently.
  Only switch when necessary

Downloads

phh's SuperUser v2

v2 Link

Changelog

• v2
  - Support new root disable method
  - Include Magisk Manager
  - Add supolicy (temporary solution)
  
• v1
  - Initial release

Developer Section

ROM Environment

For rom developers, please ensure that there are no problematic binaries in PATH (e.g. su). Official SuperSU will add /su/bin into PATH, so the default config is a no go

How It Works

Google is being smart this time. Safety Net passes doesn't mean it is possible to use Android Pay.
To pass Safety Net (and most banking apps) => No problematic binaries in PATH
So the way to do so is to place the su binary anywhere but in PATH (e.g. /magisk/phh/su), and bind mount the binary into a directory in PATH (most likely to choose /system/xbin)
By doing so, we can unmount as we want to use pass the simple root detections
However, Android Pay will also detect the current running processes. In the newer Android versions, in order to have root access, an su daemon must be running in the background. Android Pay will detect that and refuse to let users do a transaction. So the workaround is to stop the service, and kill all su processes. A timeout has to be implemented to restart root, or else nothing can initialize root unless a reboot.
I still got more aggressive ways to kill root (and is tested working), but it is not needed for now. I'll keep it undisclosed until the current solution is not working in the future.
I can say THESE METHODS ARE IMPOSSIBLE TO PATCH, BECAUSE THIS WILL REVERT YOUR SYSTEM BACK TO ABSOLUTELY THE SAME CONDITION AS UNROOTED

How To Start Temp Unroot

The unrooting process is now much more simpler. No more raw commands to unmount / kill etc.
To set the timeout of the period of time reamining unrooted, use:

Code:

---

# Need root access
# setprop magisk.timeout <seconds>
# Set to two minutes
setprop magisk.timeout 120

---

To start the unrooting, use:

Code:

---

# Need root access
setprop magisk.phhsu 0

---

The default timeout is 5 minutes (300 sec) if no magisk.timeout is set.
Feel free to include this into any kind of applications (tasker or so I don't know), the sample app (Magisk Manager) is open sourced.

Source

Magisk Manager: http://ift.tt/2aILFDs

Donation

I spent endless hours to debug Android Pay. If you like my work, feel free to donate.
http://ift.tt/29yQS2T

XDA:DevDB Information
phh's SuperUser with Android Pay Support, Tool/Utility for all devices (see above for details)

Contributors
topjohnwu

Version Information
Status: Stable
Current Stable Version: v2

Created 2016-08-09
Last Updated 2016-08-09

from xda-developers http://ift.tt/2bb9BDy
via IFTTT