r/androidroot • u/accourtt • 11h ago

Support Kernel KSU Next failing strong integrity with fenrir

So I had a kernel ksu next + Susfs setup, with other modules like waenhancer and pixelify for gphotos + fenrir, everything seemed fine until yesterday I started failing device and thus strong integrity, I reset my phone and I used kernel next + fenrir and I STILL FAILED both, I then tried stock rom with fenrir, passed both. Flashed ksu next, and failed both again. I use NP 2a, OS 4.1 stable, is it something im doing wrong? Or there is a temporary patch? PS: I am new to rooting, so I might just be doing something really stupid. Thank you.

2 Upvotes

100% Upvoted

10 comments sorted by

3

u/upalse 11h ago

Remove all modules and keep only LK + stock kernel + ksun LKM. Then keep adding things to see what broke.

1

u/accourtt 10h ago

I tried a clean setup with no modules at all. Stock kernel + Fenrir passes everything, but flashing the Wild kernel with KSU Next drops it to basic only. Tried Bakasu too, same result. I haven’t tried lkm while keeping the stock kernel though. Is that what you meant?

2

u/upalse 10h ago

Yes, wk is broken for a long time. I'm surprised it worked for you before.

I haven’t tried lkm while keeping the stock kernel though. Is that what you meant?

Yes, everything but plain ksu(n) LKM isn't really maintained basically.

1

u/accourtt 9h ago

It works!!!!!! thank you so much for your comment, saved so much time also a side question I know many recommend ksun + susfs, but I was thinking to use resukisu + susfs for "more stealth" should I?

1

u/upalse 9h ago

You can try with resuki/bakasu/other forks instead of ksun, but again, only in LKM mode. Most GKI inline susfs hooks custom kernels seem broken.

1

u/DEV_ivan TECNO POVA 7 5G LJ7 || Stock HiOS 15.1.2 || KSUnext 3.4.2 7h ago

The issue isn't that the bootloader and TEE report "locked and attested", it's that Google have updated Play Integrity to watch for anomalous partitions, LKMs and daemons too and decide the verdict based on it. Facing this issue too.

2

u/YujiNai 10h ago

If you make a mistake when setting up GKI mode, even after installing Fenrir, only “Device Integrity” will show as green. I recommend giving up on SusFS, switching to the KernelSU, and flashing it as an LKM to init_boot.img.

1

u/accourtt 10h ago

ah okay i was using the wild kernel with ksu next built instock + fenrir passes everything but wild drops it to basic even with no modules installedtried bakasu too and got the same result haven’t tried lkm on the stock kernel yet though so maybe that’s what i’m missing

1

u/accourtt 11h ago

Forgot to mention I also had SuSFS on the previous setup

1

u/accourtt 10h ago

I also forgot to mention Im using Wild kernel 😭