Anyway, 2 lines integrity are better than no integrity ( Device Integrity > No integrity ). No spoof provider

My guess. Zygisk Next 1.3.0. Will be released tomorrow

Zygisk next has built-in shamiko. So apatch won't have compatibility issues with shamiko anymore ( sure). The ability to hide root will probably be better too (maybe).

And will you choose zygisk next + shamiko 1.3.0 or continue with rezygisk 417 + treatwheel 004 ?

Now rezygisk 417 + treatwheel better zygisk next + shamiko

Zygisk no hello is outdated, it is inferior to shamiko and treatwheel

ZygiskNext 1.3.0-RC1 预览版

1. 推出内置的 Zygisk 模块加载器——Zygisk Next linker，详细介绍请参考 Wiki；
2. 整合 Shamiko 的大部分功能，排除列表增加「仅还原挂载」模式，允许在对应用加载模块的同时还原挂载变更 ^1；
3. 允许以匿名内存形式加载模块；
4. 正确实现对多个 zygote 的支持（如一加 zygote_ocomp）；
5. 修复对低版本内核和部分 32 位设备的支持；
6. 修复一些其他问题。

注：

- ^1: ZN 并未整合 Shamiko 的 prop 隐藏与字体模块处理功能。若需要 prop 隐藏，请自行提取 Shamiko 的 service.sh，并通过 service.d 等方式开机启动；若需要在 A12+ 设备上使用字体模块，请安装 FontLoader 。安装 ZN 前无需卸载 Shamiko，Shamiko 即使安装也不会被加载。

- 可以使用 WebUI 或 CLI 配置新功能，CLI 命令如下：

/data/adb/modules/zygisksu/bin/zygiskd enforce-denylist <disabled|enabled|just_umount>
/data/adb/modules/zygisksu/bin/zygiskd memory-type <default|anonymous>
/data/adb/modules/zygisksu/bin/zygiskd linker <system|builtin>

所有选项即时生效。

Zygisk Next 1.3.0-RC1 Preview Release

1. Introduce a built-in Zygisk module loader — Zygisk Next Linker. For detailed information, please refer to the Wiki.
2. Integrate most of Shamiko’s functionality. Add a new “Unmount only” mode to the denylist, allowing module injection while restoring mount changes. ^1
3. Add support for loading modules to anonymous memory.
4. Properly implement multi-zygote support (e.g. OnePlus devices using zygote_ocomp).
5. Fix compatibility issues with older kernels and some 32-bit devices.
6. Fix several bugs and stability issues.

Note:

- ^1: ZN does not include Shamiko’s prop hiding or font module handling. If you need prop hiding, please extract service.sh from Shamiko and start it manually via service.d or similar methods. If you need to use font modules on Android 12+ devices, please install FontLoader. You do not need to uninstall Shamiko before installing ZN — even if Shamiko is installed, it will not be loaded.

- New features can be configured with WebUI and CLI. CLI command is as follows:

/data/adb/modules/zygisksu/bin/zygiskd enforce-denylist <disabled|enabled|just_umount>
/data/adb/modules/zygisksu/bin/zygiskd memory-type <default|anonymous>
/data/adb/modules/zygisksu/bin/zygiskd linker <system|builtin>

All changes will take effect immediately.

SHA256: c2dbd89a8d74b1ea2ed65d2f387728a2cc7f9a2d0f2bd80694c243579fccea55

real5ec1cff | Github

Just as I predicted

Guys!

Since we have kernel integrated BBG (Baseband-guard):

https://github.com/vc-teahouse/Baseband-guard

1. Selinux is always enforcing.
2. Apps requiring selinux permissive won't work.
3. Tell the root apps developer to make it support selinux enforcing instead of telling users to set permissive! (You already have root access)
4. Don't use in development roms which requires selinux permissive.


This is a must have security feature especially since the growing count of malicious modules and new users who flash without knowing. This doesn't eliminate everything but reduces the risk of complete brick by 98%.

Only risk from malicious modules now is lose of data and maybe soft brick by removing boot and init_boot and other non critical partitions.. which can be solved by reflashing and restore from backups!


Hope everyone stays safe!

Also will be sharing a noscript if anyone wants to test BBG though!

Run this noscript ( permisson root ) to check BBG work or not

I will go back to being a zygisk next user. Rezygisk and treatwheel are poorly compatible with my zygisk modules.

https://news.1rj.ru/str/yurikernel

Should I post kernels only in this channel or all?

This is a must have security feature especially since the growing count of malicious modules and new users who flash without knowing. This doesn't eliminate everything but reduces the risk of complete brick by 98%.

I will update the kernel soon to integrate this functionality.

Run noscript this to check you have BBG or not

Read carefully here

This is just to test if you have it or not. It is not a BBG integration.