[Q] iptables issue in android 4.4.2 - Android Q&A, Help & Troubleshooting

Samsung Galaxy Tab Pro 12.2 (SM-T900), android 4.4.2 stock, rooted.
No any app can open a port (even higher 1024) . I'm getting errors like 'iptables: permission denied'. Root Check says device is rooted (and I can edit system files in Root Explorer). I tried 3 smb servers and 2 ssh servers. Everytime server starting it shows 'root permissions granted', but nothing.
Additionally I tried to add static route in terminal. It's appears in route table but not working.
To check is it realy iptables issue I need to (temporary) let non preveleged users edit iptables rules, but don't know how to do it. Can anybody help me?

Related

Smb client mount using cifs library and cifsmanager

Hello everybody, I'm new and I'm a noob
Yesterday night i have root my samsung galaxy tab 10.1, then i mount cifs module with the aim to moun a smb share on my tablet. In the end all works but i can't browse folder without root privileges. For example
Using root file manager or terminal i can browse read, edit or write any file
using another app i can't because it has no privileges.
Probably there'll be three solution
1- Run all app as root (i can't do that please help me)
2- Change permission to all folder (i don't like this way)
3- Resolve problem using other ways ( change cifs.ko or something like that)
Please help me, consider that i use cifs file taken from this thread
http://forum.xda-developers.com/showthread.php?t=1058713&page=2
Maybe you should set the mount point under /mnt/sdcard/
e.g. /mnt/sdcard/yourdir
I've tried but it doesn't work. I have red on the forum to put in the options
uid=1000 (system), gid=1015. You can read at the post 368 of this thread
http://forum.xda-developers.com/showthread.php?t=756158&page=37
But i can't get the solution
everything solved mountin on sdcard using option
uid=0,gid=1015
Solve a problem band another one will come. I have mounted a share and i can't write on it. Any ideas? I think that the problem is the same, on the privileges. I have red about cifs but i can't understand. First or all cifs privileges on android discard the server rule when i write a new file or edit a old one? Second when i use privileges what is the user that execute apps on android? Third i have to use it and what is its code? Thank you
up ^ up ^ up ^ up ^
Well everything works. I write what i did probably it'll be useful for anyone.
First of all android use a series of user each for subsistem ( gps,bluetooth, radio ecc) and app ( music player, contact ecc). When you mount a share any app have access to it only if it has all privileges, so you have to specify in option the uid of the app that should open or write the share. The uid of all apps can be found in /data/system/packages.xml.
That's all folks
Sorry for digging this up, but I just wanted to thank the OP.
I had exactly the same problem on my SGS and manually overriding uid and gid did the trick.
I wonder why only some people seem to have this problem, though.

[Q] VPN on Tablet S 4.0.3 r5

Hi,
Just done a factory reset and upgraded to r5 , this is a UK tablet, region changed to US and flashed. I then rooted using Root_with_Restore_by_Bin4ry_v13 . After several try I got it working, but I had to use a signed VPNfaker to accomplish this.
So now I want to use a VPN, before I used OpenVPN, this worked perfectly, now it fails to connect. I get the error - Running on Sony Tablet S (nbx03) Sony, Android API 15. Your image does not support the VPNService API, Sorry
I tried to use OpenVPN Connect , getting the error due to a know bug in this version of android it is not possible to gain permission to open a VPN Tunnel.
So last attempt using the built in L2tp/IPSec option, with this I just get a timeout error. No Connection.
So was it the rooting method damaged or changed something with VPN or is it this version US R5 ?
Anyone got VPN working on US R5 ?
OpenVPN is working fine on my tablet S with release 5. I use the apps 'OpenVPN Installer' and 'OpenVPN Settings' from Google Play...
Sent from my Sony Tablet S using xda app-developers app
walsera said:
OpenVPN is working fine on my tablet S with release 5. I use the apps 'OpenVPN Installer' and 'OpenVPN Settings' from Google Play...
Sent from my Sony Tablet S using xda app-developers app
Click to expand...
Click to collapse
That was the second option I tried. I enabled the VPN service, then selected the VPN I want to connect. It initiates the connection then stops after a second with no results in the log file. Did you try any of the other VPN apps that don't require root, OpenVPN Connect (I think US Market only) or OpenVPN for Android, this work really well on my Xperia S .
How did you root your Tablet ?
Did you do the incremental update or full install ?
I flashed the full update and basically used the same method like you. I also had to sign VpnFaker.apk for my Swiss tablet... I don't remember any issuses installing OpenVPN (OpenVPN Installerhttps://play.google.com/store/apps/details?id=de.schaeuffelhut.android.openvpn.installer, OpenVPN Settingshttps://play.google.com/store/apps/details?id=de.schaeuffelhut.android.openvpn). Interestingly, no tun.ko module is required.
I quickly tried the apps you suggested and which don't require root. But they didn't work for me in a quick test.
walsera said:
I flashed the full update and basically used the same method like you. I also had to sign VpnFaker.apk for my Swiss tablet... I don't remember any issuses installing OpenVPN (OpenVPN Installerhttps://play.google.com/store/apps/details?id=de.schaeuffelhut.android.openvpn.installer, OpenVPN Settingshttps://play.google.com/store/apps/details?id=de.schaeuffelhut.android.openvpn). Interestingly, no tun.ko module is required.
I quickly tried the apps you suggested and which don't require root. But they didn't work for me in a quick test.
Click to expand...
Click to collapse
Thanks for trying that. I will retry loading my VPN Profiles again in OpenVPN
defsix said:
Thanks for trying that. I will retry loading my VPN Profiles again in OpenVPN
Click to expand...
Click to collapse
Ok, so tried re-installing busybox, tun.ko, OpenVPN settings and OpenVPN installer however still it's not working. I am thinking the problem is deeper than this though. The built in VPN options L2TP/IPSec and PPTP are both failing to work. I just get a time out error. I have uploaded a section of the catlog if someone could have a look at it.
I am still stuck with this problem. I used AIO tool to setup boot loop protection and then re installed the full R5 on top of the old installation. I didn't do a factory reset though, I don't have the time to re install everything.
And still the problem persists.
I am unable to create any VPN
Anyone any ideas ?
ok. Factory Reset.
Factory Reset, reinstalled R5. Titanium Backup restore and still no VPN. I give up.
Sorry to hear that... for more information about the initiation process of your VPN, you could try to start the openvpn binary in a terminal as root with an increased verbosity level... just to see at which step the process actually fails
walsera said:
Sorry to hear that... for more information about the initiation process of your VPN, you could try to start the openvpn binary in a terminal as root with an increased verbosity level... just to see at which step the process actually fails
Click to expand...
Click to collapse
would that give me more or the same as a logcat ?
Could you give me a quick idea how to do this in terminal ?
Well, I am not an expert, but your logfile was just little use for me...
Steps for running openvpn in terminal:
Open terminal
Type 'su' to get root
Change to the directory with your profiles using 'cd PROFILEDIR'
Type 'openvpn' for getting all command line options
To start a connection type something like 'openvpn --config PROFILE.ovpn --verb 3 '
I couldn't test this with my connection because I haven't figured out how to pass my key for my certificate. But I think this is the way to go.
walsera said:
Well, I am not an expert, but your logfile was just little use for me...
Steps for running openvpn in terminal:
Open terminal
Type 'su' to get root
Change to the directory with your profiles using 'cd PROFILEDIR'
Type 'openvpn' for getting all command line options
To start a connection type something like 'openvpn --config PROFILE.ovpn --verb 3 '
I couldn't test this with my connection because I haven't figured out how to pass my key for my certificate. But I think this is the way to go.
Click to expand...
Click to collapse
ok, will give this a try.

Mac address change on a tv dongle failed. I followed all possible ways i found online

Hello everybody i am not usually posting because most of my problems are always solved in already existing threads.
But in this case:
i have an anonymous TV dongle.
model: gxt_dongle_3188
android version: 4.4.2
rooted: with Kingo Root
Busybox is installed
I need to change my wifi-mac address from 54:e4:bd:9f:bd96 to 00:22:f4:f0:12:88, i know that the first 3 sets are vendor's indicator but i dont care for the possible conflicts that the change may create.
I started trying to use all the mac changing apps from playstore and i had any result, then i used terminal as SU with busybox and in my iplink show list i had not eth0, only wlan0 and p2p0 that looks like having MAC addresses.
Then i used ifconfig wlan0 hw ether [my mac] command and had no errors but in the status option i could not find any changes
I used also similar command sequences i found online.
also i found that i dont have the "efs" folder in my folder system and as i show in many tutorials this folder contains files about mac addresses.
Had anyone a problem like this so he/she can give me some help?
thank you in advance .

Direct TV Error 40 Root Check bypass on Amlogic s905x (TX5Pro, Marshmallow)

I downloaded the DirecTV Now app on New Year's Eve hoping for $35/cable. Instead, I was greeted with the same Error 40 that everyone with a rooted device got. It took me a couple of days of researching and playing and reflashing and..., but I've finally figured out the simple(r) method to bypass this stupid root check for DirectTV Now (AKA Error 40, QP1005)
This applies to the TX5Pro, but it should work on any s905x based AMLogic SoC running Marshmallow 6.0 (A95X, CQ9, TX5, TX3, X96, NEXBOX, +many more.) As I understand it, they all have similar Android builds using the p212 board and firmware. I also have a M8S s812 running Kit-Kat 4.4.2 that I'll work on breaking, next.
First things, first: If possible, find your firmware and do a clean flash. Not a requirement, but if you've been playing with this for a while and you've ended up here, you've probably mucked up your /system files in some way or another. I managed to screw up my su binary location a few times and couldn't get it back without a lot of work. Reflashing was a three-minute, headache-free task.
That said, you'll want to adb over tcp/ip as these devices don't like to play the USB cable game.
Code:
adb connect deviceipaddress:5555
Follow up with
Code:
adb shell
and
Code:
su
to get into a root shell (if you don't get one by default.) Mine came with SuperUser from ClockworkMod preinstalled as a system app. Mount your system folder
Code:
mount -o rw,remount,rw /system
and edit your build.prop file with Vim.
Code:
vi /system/build.prop
If Vim is new to you, search the interwebs for a Vim cheat sheet.
Here's the trick with this... DirecTV Now's shared object file in lib/armeabi/libdrmagent_downloadable_jni.so looks for a few keywords within a few properties. Those properties are:
Code:
ro.build.product
ro.build.tags
ro.build.type
ro.build.display.id
...and the keywords are:
Code:
"release-keys, OnePlus2, OnePlus, Z26CL, STUDIO_C, user" are keywords that it favors, while "cm, cyanogen, cyanogenmod, debug, userdebug, A0001" are disqualifying keywords. Supposedly, "test-keys" is a bad word, too.
In my case, I needed to edit my build.prop to eliminate any sign of the bad words. Example:
Code:
ro.build.display.id=p212-userdebug 6.0.1 MHC19J 20160909 test-keys
to
ro.build.display.id=p212-user 6.0.1 MHC19J 20160909 release-keys
Run through the file and replace anything that says userdebug with user and test-keys with release-keys until you get to "#end build properties" Then save and reboot.
After reboot, install Hide My Root (I used the one from Amphoras) and hide the Su binary. This is where things might be getting tricky for some of you... on the TX5Pro, the SuperUser app is a system installed app, meaning it can't be uninstalled (it can, but it's not exactly a simple task for everyone) so you'll need to go into settings -> apps -> superuser and disable the app from there. Reboot again. Now, with the su binary hidden and the app's manifest not showing up in the system, the error 40 message should go away. This option will allow you to quickly restore su and SuperUser without needing a bunch of additional steps. You'll still need to set the device location service to "battery saving" (or use mock locations) but that's a simple task anyone can figure out.
The app is a choppy on high def feeds for some reason. I can't tell if this is processing/memory issue or a feed (wifi) issue. By default, the app doesn't work on ethernet, meaning you'll have to use wifi until you can fix that issue. But hey, one thing at a time, right? Anyway, I hope this helps anyone with this particular headache.
Thanks for pointing me in the right direction...
Got DirecTV NOW working on my nexus 6 running pure nexus ROM... I just did the edits with super su root and root explorer. Then disabled super su and rebooted.
Now to update the the build.prop files on the lineage os 13.0 nexus 10, and my wife's kltevzw (on ting gsm network) running lineage os 14.1
hi please help i flashed wrong twrp recovery i think now my amlogic smartbox failed to boot in recovery mode and the main problem is my smartbox Encryption Unsuccessful Factory reset, when i click factory reset nothing happend please guide how to solve this
Sent from my SM-N910G using Tapatalk
jameson.donaghy said:
I downloaded the DirecTV Now app on New Year's Eve hoping for $35/cable.
Click to expand...
Click to collapse
Any chance that you tried this out with Data Free TV/"Sponsored Data" with an AT&T wireless account? i.e. running the box through a Cellular Hotspot or tethered to your phone. I've been looking at if one could use one of therse Android TV Boxes to basically get Data Free TV.
my live tv app detect root try with magisk also but no success in my s905x help me guys
Sent from my SM-N910G using Tapatalk
is anyone help me out
Sent from my SM-N910G using Tapatalk
I edited my build.prop files to try and "hide" the root and I still get the error. I also tried root cloak with xposed and still nothing
Thanks so much
This really helped. I used Xposed module to hide those keywords. Worked a charm!

Custom android ROM, delete iptables binary

Hi
I have installed CM 13.0 custom rom on my galaxy j5 j500h, and I am trying to do some modifications. I do not want any application or even the system to use 'iptables' to setup firewall rules , so I just removed the 'iptables' binary from /system/bin , thinking that this will end in network access without any restrictions, but after restarting the phone I have no network access, the phone can get IP from dhcp but no access to any network resources, pinging any host gives 'network not accessible' error, I suspected that the system uses 'iptables' at startup to setup something, unfortunately I can not find anything in all init*.rc files nor in init.d scripts.
Does anyone have any idea?
Thank you

Categories

Resources