SuperSU v2.68 BETA, and Samsung 6.0.1 CFARs
Posted on 2016-02-28, 85 comments, 692 +1's, imported from Google+/Chainfire

NOTICE: This content was originally posted to Google+, then imported here. Some formatting may be lost, links may be dead, and images may be missing.

Today's beta update to SuperSU comes with a number of bugfixes and changes, as is usually the case. The important thing this release is compatibility with the new Samsung 6.0.1 retail firmwares.

While the previous SuperSU versions worked fine out-of-the-box with Samsung's beta 6.0 firmwares, the retail firmwares had some extra 'security'.

AUDITDENY

First, they AUDITDENY'd nigh every possibly permutation of SELinux rules. In English, that means they took a pretty convoluted (and possibly performance degrading?) route of disabling policy violation logging.

While they undoubtedly had a brilliant reason for this, this is annoying for developers (both root and non-root) as seemingly random failures are often related to SELinux violations, and you no longer have a way to spot those.

As such, SuperSU now disables all AUDITDENY rules in the SELinux policy.

Permissive mode

Second, they finally killed off per-type permissive mode. While full permissive mode had been disabled on Samsung firmwares for a while already, we could (and did) switch individual types to permissive mode.

For example, the 'init' context, where commands run through 'su' are usually executed with SuperSU, was one of these permissive contexts. This significantly reduced the amount of interaction root app developers had to have with SELinux - many apps needed no changes.

As this no longer works, SuperSU now patches the SELinux policy so that virtually all common cases root apps encounter should be covered. In theory, from a root app's perspective, it should work the same. However, it is always possible I've missed something. As such, developers of root apps should take some extra care and do some extra testing on Samsung retail 6.0 firmwares. Don't forget to report issues to the relevant XDA thread.

Again, I'm sure they had a spectacular reason for doing this, even though it doesn't change anything in practise but add to the number of rules every syscall has to check against.

CF-Auto-Root

I've updated various G920, G925, G928 and N920 CFARs to work with the retail 6.0 firmwares. See the download page.

All other CF-Auto-Root downloads are also being re-created with the SuperSU v2.68 BETA right now. This process generally takes a few hours.

Disclaimer

I've only been able to test the new version on my G920F, while I hope the other Samsung 6.0 firmwares behave the same, no other users have done any testing yet.

Download

SuperSU: http://download.chainfire.eu/supersu

CF-Auto-Root: http://autoroot.chainfire.eu/

Changelog

Full changelogs are available in the 'stable' XDA thread here: http://forum.xda-developers.com/showpost.php?p=64916199&postcount=3

Comments

All your comments, questions, discussion, etc should go to the 'beta' XDA thread here: http://forum.xda-developers.com/apps/supersu/2014-09-02-supersu-v2-05-t2868133 

KNOX

Please imagine there was a wise-crack about knocking KNOX somewhere in this post, and laugh accordingly.

SuperSU Download

+1692
Bai feili commented on 2016-02-28 at 16:27:

good job！

Stefan Kern commented on 2016-02-28 at 16:30:

I thought you said you'll stop providing updates to SuperSU once? Or did I get a misinfo from somewhere? ;)

Skripka Le Chat Gris commented on 2016-02-28 at 16:34:

Samsung making things a pain for developers? Tens surprised. Jerks

Julio Novoa commented on 2016-02-28 at 16:35:

Thank you very much

Jason Pasch commented on 2016-02-28 at 16:40:

Thank you +Chainfire​

Marc Weinhold commented on 2016-02-28 at 17:18:

Maybe some time we can root any Samsung without tripping Knox?

Steve Вrantley commented on 2016-02-28 at 17:35:

Thanks for the update. ?

Henny Roggy commented on 2016-02-28 at 17:43:

+Chainfire​ You are the God of r00t!

Niranjhan commented on 2016-02-28 at 17:44:

Why is the G925I always neglected :(

Lawrence Hults II commented on 2016-02-28 at 18:31:

Oi Samsung... yeah, let's put the fastest SoC and most RAM in this brand new phone we can find, and then bog it down with a bunch of firmware-level security protocols so it runs, if anything, slower that the last generation.

thank you for the hard work tho, it is much appreciated.

Rodrigo Souza commented on 2016-02-28 at 18:40:

Hide icon from launcher option was removed?

Andrii Kutsyi commented on 2016-02-28 at 18:45:

Thanks! ?

Paul Ravenstone commented on 2016-02-28 at 18:50:

*laughed accordingly

Chanseiha Ho commented on 2016-02-28 at 19:03:

My galaxy s5's screen is broken, and I also broke

Horst-G. Thiel commented on 2016-02-28 at 19:47:

Works also on LG G4 M6.x Thank you.

Ahum北冥眞人 commented on 2016-02-28 at 19:47:

期待已久！

Henny Roggy commented on 2016-02-28 at 20:03:

+Chainfire​ is this SU file compatible to your last posted version of TWRP on XDA?

John Apple II commented on 2016-02-28 at 20:33:

Awesome, thanks! And, laughing at the Knox wise-Crack,accordingly. ?

greg kobey commented on 2016-02-29 at 00:58:

I remember when Samsung sent cyanogenmod Galaxy s2 so they could put cm on the phones.. They used to be so developer friendly..I know it's for security reasons but still

Ralph Miranda commented on 2016-02-29 at 02:03:

Fkn A, dude!

Lucifer 2 commented on 2016-02-29 at 04:37:

Thanks for all ur work. Much abliged!

Andreas Vitullo commented on 2016-02-29 at 06:09:

Gokd job but if i upgrade this i must go to recovery and upgrade from a zip file the supersu executable or is totally automatic?

Ralph Miranda commented on 2016-02-29 at 06:50:

+Andreas Vitullo flash the zip

Henny Roggy commented on 2016-02-29 at 12:09:

+Chainfire I flashed this SU file. Everything was fine until I also flashed official TWRP. Since then my device bootloops. Any fix available for that other than flashing the build again and therefore wiping everything?

Andreas Vitullo commented on 2016-02-29 at 14:05:

+Ralph Miranda sorry i haven't open the link i didn't know the file is a zip file i thought was an apk file

Ralph Miranda commented on 2016-02-29 at 15:14:

+Total Security​ flashed TWRP? You mean installed via fastboot? The Dev states your phone may bootloop a couple of times initially after flashing SuperSU and to not interrupt it, it's in the instructions even as the log displays during flashing with a constant reminder to not allow TWRP to install root if prompted before rebooting.

+Andreas Vitullo​​ the Dev has recommended flashing the zip rather than installing the APK within the zip as some do for the last few beta versions at least if you've bothered reading his XDA thread.

RAID ahmed zouari commented on 2016-02-29 at 15:28:

How to root my HTC 816d

And use supersu

Henny Roggy commented on 2016-02-29 at 15:54:

+Ralph Miranda​​​​ You do not understand. Everything was working without TWRP. Then I flashed it and it did not boot after 10 minutes.

Edit: +Chainfire​​ fixed it with a special custom recovery which can be found here:

http://forum.xda-developers.com/showpost.php?p=65564569&postcount=316

Eva Kane commented on 2016-02-29 at 15:54:

SuperSU ZIP Still NOT support Moto devices Android 6.0 ROOT(required patch supolicy file in boot image but script not work!!!).

Xiao-Long Chen commented on 2016-02-29 at 17:52:

+Chainfire Do you know how the per-type permissive mode was disabled? Is it something they changed in the kernel or is it something they set (possibly via libselinux) in the /init binary?

J. W. commented on 2016-02-29 at 18:36:

Do you have any roots for Galaxy note 4, that are as good as kit Kat killer?

袁野 commented on 2016-03-01 at 06:51:

I have found that these previous SuperSU flashable zips doesn't work on Moto X 6.0 stock firmware unless I explicitly enable systemless Root method manually. Don't know if this version works.

British Waters commented on 2016-03-01 at 08:19:

+Muntasir Waleed CF-Auto-Root works seamlessly on 5.1.1 for me now.

Obviously I would be tempted to check on his root database as I'm running the international SM-N910F which is critical as I'm sure your aware [Baseband version critical].

A clean install of the above is also highly recommended as from personal experiences my device was often caught in a bootloop or bricked, given a dirty install. Nothing that can't be fixed however.

Miloua Mostafa commented on 2016-03-01 at 08:45:

Bonjour mes amis

Chainfire commented on 2016-03-01 at 13:29:

+Xiao-Long Chen I think it's kernel-side, but it could be either.

dellon silva commented on 2016-03-01 at 15:56:

Como faz pra instalar?

Bùi Tân commented on 2016-03-03 at 07:45:

please add CF-Auto-Root for SM-G928L 6.0.1 ! thanks.

elsayed nasr commented on 2016-03-03 at 19:06:

شكرا جيد جدااتت

efrain martinez commented on 2016-03-03 at 23:31:

Hello. I think there is a problem with 2.65 with titanium... I can't restore backup and I can not do a backup with titanium.... Somebody can tell me something? Please!

Micha Micha commented on 2016-03-04 at 12:49:

Hello Chainfire, I bought your SuperSu Pro app on Amazon. Now after Flashing new Rom, App is no longer available at Amazon's App Store.

hassan farruq commented on 2016-03-05 at 12:11:

T

Ross Baumgartner commented on 2016-03-06 at 20:20:

Do I smell some SM-G930T love coming out of the oven?

زيزو العياشي commented on 2016-03-06 at 21:19:

انا ابغی أحدث سوبر يوزر

زيزو العياشي commented on 2016-03-06 at 21:21:

ارجوكم قولولي كيف أحدثه كان عندي من أول وبعدين حدثت الجهاز حقي يقلي لازم تحديث ارجوكم ساعدوني جزاكم الله الجنة

زيزو العياشي commented on 2016-03-06 at 21:22:

ارسلولي الرابط إلى المجاني حق سوبر يوزر

زيزو العياشي commented on 2016-03-06 at 21:22:

الروت

Μάριος Στέφος commented on 2016-03-07 at 00:49:

But But i wanna keep my Knox flag to 0. :P

Great work Chainfire thanks for your contribution over the years, sustemless root works like a charm on SM-G920F.

زيزو العياشي commented on 2016-03-07 at 00:50:

+Μάριος Στέφος معرف اللغه الانجليزيه

زيزو العياشي commented on 2016-03-07 at 00:51:

ارجو كتابتها العربي

Denis Januzi commented on 2016-03-09 at 14:07:

+Chainfire​ mate is it possible to root my nexus 5 without flashing custom kernels i want all stock just root on it

Robert O. Dulin, III commented on 2016-03-09 at 20:03:

Always impressed with your work, Chainfire. HUGE part and great part of the Android Dev community. Thank you for all your work.

On pins and needles waiting on that S7 root (T-Mobile preferably...LOL).

Thanks again.

PACMAN PHOTOg commented on 2016-03-11 at 02:10:

+Denis Januzi yes flash su. Well also depends on stock ver

PACMAN PHOTOg commented on 2016-03-11 at 02:11:

Any plans for dev preview 1 N?

Amer Alhusseini commented on 2016-03-11 at 03:18:

Thanks mate .

Ross L.B. Laugher commented on 2016-03-11 at 11:12:

Why does one need a rooted phone to install SuperSU, when SuperSU roots your phone? Is it that you have to 1st use a custom recovery to install SuperSU the 1st time then you can simply install SuperSU over it?

Daniel commented on 2016-03-12 at 16:53:

Will this su binary work on Android n beta preview?

Slim Shady commented on 2016-03-12 at 21:35:

How to install from the zip file

PACMAN PHOTOg commented on 2016-03-12 at 22:50:

+Mohammedi Tarek that's funny. You shouldn't be rooting if you don't know how. But twrp

Slim Shady commented on 2016-03-12 at 23:21:

+PACMAN PHOTOg hi I'm a newbie in rooting world I rooted my device with Kingroot and replaced him with SuperSU with Supersume app now I updated supersu with googleplay and binaries updated successfully , the strange think is when I installed supersu 2.68 the binaries didn't updates installation failed , can you help me please

Daniel commented on 2016-03-12 at 23:23:

+Mohammedi Tarek you root with a Chinese apk then come to chain fire for help? Lmao. Congratulations... Kingroot is an exploit that steals your data sec

Slim Shady commented on 2016-03-12 at 23:30:

+Daniel S that's why I replaced Kingroot with SuperSU can help me to update binaries

Random PUB Night BOT commented on 2016-03-14 at 03:51:

I've downloaded SuperSU from the App Market several times and every time it tells me the binary needs to be updated so I try to update it and for some strange reason it will not update no matter what I do. Now I did root my phone a Samsung Galaxy S4 Verizon phone using kingroot. I'm not sure if that actually makes a difference as to whether SuperSU will work on my phone or not. Any help in figuring this out would be greatly appreciated because I would love to actually try to use SuperSU rather than kingroot.

anthony rocco commented on 2016-03-14 at 17:42:

Hey chainfire, I tried flashing your 2.68 zip in twrp on my verizon lg g3 and when rebooting it gives me a boot cetification error 620. Is it because when it patches the boot partition that it is messing with bumped that is needed to bypass the locked bootloader? I'm running rooted stock marshmallow and just wanted to upgrade from 2.67 that came on the rom?

Asef Baloch commented on 2016-03-15 at 06:32:

سلام علیکم یاحبیبی

Wind World commented on 2016-03-16 at 11:12:

+Chainfire please update AutoRoot Android 6.01 for SM-G928F 

thanks man,

researcher eyp commented on 2016-03-18 at 18:57:

Su kodu güncellemesi nasıl yapılıyor yardım

sal morris commented on 2016-03-19 at 06:30:

I need help I think super su is blocking my software updates. How do I fix this problem. Thanks

mohamed sobhy commented on 2016-03-21 at 02:44:

Doesn't work at doogee f5

sal morris commented on 2016-03-21 at 20:13:

@Merlijn nijhof thank you. And yes I have the galaxy s4 zoom how do I go about using the smart switch is it on the Samsung site. Sorry I'm a tech novice. Lol

Sigi Mares commented on 2016-03-23 at 17:51:

Thanks! It works well on Xperia Z5 (MM 6.0).

Md Riad commented on 2016-03-29 at 11:23:

I can't update my device. What's can I do now

syazil Fairus commented on 2016-04-01 at 08:47:

Wow

Van Papiashvili commented on 2016-04-07 at 08:59:

Does anyone have a mirror link of this 2.68 version? The newer version doesn't work for me. Thanks.

黄镇彬 commented on 2016-04-18 at 06:32:

怎么下载？

يوسف عبدالوهاب commented on 2016-04-21 at 07:39:

i have root file for  LRX21T.G900FDXU1BOA2 , can i flash it for LRX21T.G900FXXS1BPC3 ?

Emanuele Capuano commented on 2016-05-12 at 11:58:

ho appena aggiornato ad android 6.0.1 il mio S5, come faccio a rootarlo?

Veysi Eren commented on 2016-05-26 at 14:18:

samsung A7 için var mi

Дмитрий Менделеев commented on 2016-06-01 at 23:21:

G928F 6.0.1 CFAR works, got root

But it killed pm (the package manager)

When trying to install\uninstall anything:

CANNOT LINK EXECUTABLE: cannot locate symbol "_ZN7android14AndroidRuntime5startEPKcRKNS_6Vector INS_7String8EEE" referenced by "app_process"...

page record for 0x7faab1a010 was not found (block_size=16)

José Ventura Delgado Miranda commented on 2016-07-02 at 20:19:

Hello greetings from Mexico,

Thank you for your great contribution and support second to none, I am a happy and contented user thank you.

I wanted with all respect and trust you a question ... If you plan to work on the root for galaxy s5 sm-g900v marshmallow or a project that does not take place.

in advance thank you very much for your work

صباح الجديد commented on 2016-08-09 at 23:26:

برامج جيد

Carolina Sallas commented on 2016-08-23 at 12:28:

fvsibsonzyv cf jun axé tvujbunex

Bawog Kuu commented on 2016-08-25 at 21:06:

I haz root

One Izry commented on 2017-02-09 at 20:10:

There is some app that need phone root but i don't want to root it.if there is any way that I can do to make my phone rooted?

Eyvaz Nesirov commented on 2017-05-30 at 13:55:

Salam

phil lighbothe commented on 2017-11-21 at 12:46:

Wow! Good! Very interesting article here! https://spying.ninja/tell-android-rooted/

This post is over a month old, commenting has been disabled.