Release Magisk v26.4

The Magisk app will guide users through repair setup

.github/workflows/build.yml

@@ -2,17 +2,17 @@ name: Magisk Build
 
 on:
   push:
-    branches: [ master ]
+    branches: [master]
     paths:
-      - 'app/**'
-      - 'native/**'
-      - 'stub/**'
-      - 'buildSrc/**'
-      - 'build.py'
-      - 'gradle.properties'
-      - '.github/workflows/build.yml'
+      - "app/**"
+      - "native/**"
+      - "stub/**"
+      - "buildSrc/**"
+      - "build.py"
+      - "gradle.properties"
+      - ".github/workflows/build.yml"
   pull_request:
-    branches: [ master ]
+    branches: [master]
   workflow_dispatch:
 
 jobs:
@@ -22,36 +22,24 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-latest, windows-latest, macos-latest ]
-    env:
-      NDK_CCACHE: ccache
-      CCACHE_DIR: ${{ github.workspace }}/.ccache
-      CCACHE_COMPILERCHECK: "%compiler% -dumpmachine; %compiler% -dumpversion"
-      RUSTC_WRAPPER: sccache
-
+        os: [ubuntu-latest, windows-latest, macos-13]
     steps:
       - name: Check out
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
-          submodules: 'recursive'
+          submodules: "recursive"
           fetch-depth: 0
 
       - name: Set up JDK 17
         uses: actions/setup-java@v3
         with:
-          distribution: 'temurin'
-          java-version: '17'
+          distribution: "temurin"
+          java-version: "17"
 
       - name: Set up Python 3
         uses: actions/setup-python@v4
         with:
-          python-version: '3.x'
-
-      - name: Set up ccache
-        uses: hendrikmuhs/ccache-action@v1.2
-        with:
-          key: ${{ runner.os }}-${{ github.sha }}
-          restore-keys: ${{ runner.os }}
+          python-version: "3.x"
 
       - name: Set up sccache
         uses: hendrikmuhs/ccache-action@v1.2
@@ -59,6 +47,7 @@ jobs:
           variant: sccache
           key: ${{ runner.os }}-${{ github.sha }}
           restore-keys: ${{ runner.os }}
+          max-size: 10000M
 
       - name: Cache Gradle dependencies
         uses: actions/cache@v3
@@ -106,3 +95,34 @@ jobs:
         with:
           name: ${{ github.sha }}-symbols
           path: app/build/outputs
+
+  test:
+    name: Test on ${{ matrix.api }}
+    runs-on: macos-13
+    needs: build
+    strategy:
+      fail-fast: false
+      matrix:
+        api: [23, 26, 28, 29, 34]
+
+    steps:
+      - name: Check out
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Set up Python 3
+        uses: actions/setup-python@v4
+        with:
+          python-version: "3.x"
+
+      - name: Download build artifacts
+        uses: actions/download-artifact@v3
+        with:
+          name: ${{ github.sha }}
+          path: out
+
+      - name: AVD test
+        run: |
+          brew install coreutils bash
+          scripts/avd_test.sh ${{ matrix.api }}

.gitmodules

@@ -4,9 +4,6 @@
 [submodule "busybox"]
 	path = native/src/external/busybox
 	url = https://github.com/topjohnwu/ndk-busybox.git
-[submodule "dtc"]
-	path = native/src/external/dtc
-	url = https://github.com/dgibson/dtc.git
 [submodule "lz4"]
 	path = native/src/external/lz4
 	url = https://github.com/lz4/lz4.git
@@ -16,12 +13,6 @@
 [submodule "xz"]
 	path = native/src/external/xz
 	url = https://github.com/xz-mirror/xz.git
-[submodule "nanopb"]
-	path = native/src/external/nanopb
-	url = https://github.com/nanopb/nanopb.git
-[submodule "mincrypt"]
-	path = native/src/external/mincrypt
-	url = https://github.com/topjohnwu/mincrypt.git
 [submodule "pcre"]
 	path = native/src/external/pcre
 	url = https://android.googlesource.com/platform/external/pcre
@@ -43,6 +34,9 @@
 [submodule "lsplt"]
 	path = native/src/external/lsplt
 	url = https://github.com/LSPosed/LSPlt.git
+[submodule "system_properties"]
+	path = native/src/external/system_properties
+	url = https://github.com/topjohnwu/system_properties.git
 [submodule "termux-elf-cleaner"]
 	path = tools/termux-elf-cleaner
 	url = https://github.com/termux/termux-elf-cleaner.git

README.MD

@@ -18,14 +18,15 @@ Some highlight features:
 
 [Github](https://github.com/topjohnwu/Magisk/) is the only source where you can get official Magisk information and downloads.
 
-[![](https://img.shields.io/badge/Magisk-v25.2-blue)](https://github.com/topjohnwu/Magisk/releases/tag/v25.2)
-[![](https://img.shields.io/badge/Magisk%20Beta-v26.0-blue)](https://github.com/topjohnwu/Magisk/releases/tag/v26.0)
+[![](https://img.shields.io/badge/Magisk-v26.3-blue)](https://github.com/topjohnwu/Magisk/releases/tag/v26.3)
+[![](https://img.shields.io/badge/Magisk%20Beta-v26.3-blue)](https://github.com/topjohnwu/Magisk/releases/tag/v26.3)
 [![](https://img.shields.io/badge/Magisk-Canary-red)](https://raw.githubusercontent.com/topjohnwu/magisk-files/canary/app-release.apk)
 [![](https://img.shields.io/badge/Magisk-Debug-red)](https://raw.githubusercontent.com/topjohnwu/magisk-files/canary/app-debug.apk)
 
 ## Useful Links
 
 - [Installation Instruction](https://topjohnwu.github.io/Magisk/install.html)
+- [Building and Development](https://topjohnwu.github.io/Magisk/build.html)
 - [Magisk Documentation](https://topjohnwu.github.io/Magisk/)
 
 ## Bug Reports
@@ -36,30 +37,6 @@ For installation issues, upload both boot image and install logs.<br>
 For Magisk issues, upload boot logcat or dmesg.<br>
 For Magisk app crashes, record and upload the logcat when the crash occurs.
 
-## Building and Development
-
-- Magisk builds on any OS Android Studio supports. Install Android Studio and do the initial setups.
-- Clone sources: `git clone --recurse-submodules https://github.com/topjohnwu/Magisk.git`
-- Install Python 3.8+ \
-  (Windows only: select **'Add Python to PATH'** in installer, and run `pip install colorama` after install)
-- Configure to use the JDK bundled in Android Studio:
-  - macOS: `export JAVA_HOME="/Applications/Android Studio.app/Contents/jre/Contents/Home"`
-  - Linux: `export PATH="/path/to/androidstudio/jre/bin:$PATH"`
-  - Windows: Add `C:\Path\To\Android Studio\jre\bin` to environment variable `PATH`
-- Set environment variable `ANDROID_SDK_ROOT` to the Android SDK folder (can be found in Android Studio settings)
-- Run `./build.py ndk` to let the script download and install NDK for you
-- To start building, run `build.py` to see your options. \
-  For each action, use `-h` to access help (e.g. `./build.py all -h`)
-- To start development, open the project with Android Studio. The IDE can be used for both app (Kotlin/Java) and native sources.
-- Optionally, set custom configs with `config.prop`. A sample `config.prop.sample` is provided.
-
-## Signing and Distribution
-
-- The certificate of the key used to sign the final Magisk APK product is also directly embedded into some executables. In release builds, Magisk's root daemon will enforce this certificate check and reject and forcefully uninstall any non-matching Magisk apps to protect users from malicious and unverified Magisk APKs.
-- To do any development on Magisk itself, switch to an **official debug build and reinstall Magisk** to bypass the signature check.
-- To distribute your own Magisk builds signed with your own keys, set your signing configs in `config.prop`.
-- Check [Google's Documentation](https://developer.android.com/studio/publish/app-signing.html#generate-key) for more details on generating your own key.
-
 ## Translation Contributions
 
 Default string resources for the Magisk app and its stub APK are located here:

app/build.gradle.kts

@@ -74,13 +74,13 @@ dependencies {
     implementation("com.github.topjohnwu:indeterminate-checkbox:1.0.7")
     implementation("com.github.topjohnwu:lz4-java:1.7.1")
     implementation("com.jakewharton.timber:timber:5.0.1")
-    implementation("org.bouncycastle:bcpkix-jdk18on:1.72")
+    implementation("org.bouncycastle:bcpkix-jdk18on:1.76")
     implementation("dev.rikka.rikkax.layoutinflater:layoutinflater:1.3.0")
     implementation("dev.rikka.rikkax.insets:insets:1.3.0")
-    implementation("dev.rikka.rikkax.recyclerview:recyclerview-ktx:1.3.1")
+    implementation("dev.rikka.rikkax.recyclerview:recyclerview-ktx:1.3.2")
     implementation("io.noties.markwon:core:4.6.2")
 
-    val vLibsu = "5.0.5"
+    val vLibsu = "5.2.1"
     implementation("com.github.topjohnwu.libsu:core:${vLibsu}")
     implementation("com.github.topjohnwu.libsu:service:${vLibsu}")
     implementation("com.github.topjohnwu.libsu:nio:${vLibsu}")
@@ -90,32 +90,32 @@ dependencies {
     implementation("com.squareup.retrofit2:converter-moshi:${vRetrofit}")
     implementation("com.squareup.retrofit2:converter-scalars:${vRetrofit}")
 
-    val vOkHttp = "4.10.0"
+    val vOkHttp = "4.12.0"
     implementation("com.squareup.okhttp3:okhttp:${vOkHttp}")
     implementation("com.squareup.okhttp3:logging-interceptor:${vOkHttp}")
     implementation("com.squareup.okhttp3:okhttp-dnsoverhttps:${vOkHttp}")
 
-    val vMoshi = "1.14.0"
+    val vMoshi = "1.15.0"
     implementation("com.squareup.moshi:moshi:${vMoshi}")
     kapt("com.squareup.moshi:moshi-kotlin-codegen:${vMoshi}")
 
-    val vRoom = "2.5.1"
+    val vRoom = "2.6.0"
     implementation("androidx.room:room-runtime:${vRoom}")
     implementation("androidx.room:room-ktx:${vRoom}")
     kapt("androidx.room:room-compiler:${vRoom}")
 
-    val vNav = "2.5.3"
+    val vNav = "2.7.4"
     implementation("androidx.navigation:navigation-fragment-ktx:${vNav}")
     implementation("androidx.navigation:navigation-ui-ktx:${vNav}")
 
-    implementation("androidx.biometric:biometric:1.1.0")
     implementation("androidx.constraintlayout:constraintlayout:2.1.4")
     implementation("androidx.swiperefreshlayout:swiperefreshlayout:1.1.0")
     implementation("androidx.appcompat:appcompat:1.6.1")
-    implementation("androidx.recyclerview:recyclerview:1.3.0")
-    implementation("androidx.fragment:fragment-ktx:1.5.6")
+    implementation("androidx.recyclerview:recyclerview:1.3.2")
+    implementation("androidx.fragment:fragment-ktx:1.6.1")
     implementation("androidx.transition:transition:1.4.1")
-    implementation("androidx.core:core-ktx:1.9.0")
-    implementation("androidx.core:core-splashscreen:1.0.0")
-    implementation("com.google.android.material:material:1.8.0")
+    implementation("androidx.core:core-ktx:1.12.0")
+    implementation("androidx.core:core-splashscreen:1.0.1")
+    implementation("androidx.profileinstaller:profileinstaller:1.3.1")
+    implementation("com.google.android.material:material:1.10.0")
 }

app/shared/src/main/AndroidManifest.xml

@@ -5,6 +5,7 @@
     <uses-permission android:name="android.permission.INTERNET" />
     <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
     <uses-permission android:name="android.permission.REQUEST_INSTALL_PACKAGES" />
     <uses-permission android:name="android.permission.HIDE_OVERLAY_WINDOWS" />
     <uses-permission android:name="android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION" />

app/src/main/AndroidManifest.xml

@@ -82,11 +82,15 @@
             android:name="androidx.room.MultiInstanceInvalidationService"
             tools:node="remove" />
 
-        <!-- We don't need emoji compat -->
+        <!-- We handle initialization ourselves -->
         <provider
             android:name="androidx.startup.InitializationProvider"
             android:authorities="${applicationId}.androidx-startup"
-            android:exported="false"
+            tools:node="remove" />
+
+        <!-- We handle profile installation ourselves  -->
+        <receiver
+            android:name="androidx.profileinstaller.ProfileInstallReceiver"
             tools:node="remove" />
 
     </application>

app/src/main/java/androidx/lifecycle/ProcessLifecycleAccessor.java

@@ -1,12 +0,0 @@
-package androidx.lifecycle;
-
-import android.content.Context;
-
-import androidx.annotation.NonNull;
-
-public class ProcessLifecycleAccessor {
-    public static void init(@NonNull Context context) {
-        LifecycleDispatcher.init(context);
-        ProcessLifecycleOwner.init(context);
-    }
-}

app/src/main/java/com/topjohnwu/magisk/arch/BaseFragment.kt

@@ -10,6 +10,7 @@ import androidx.databinding.DataBindingUtil
 import androidx.databinding.OnRebindCallback
 import androidx.databinding.ViewDataBinding
 import androidx.fragment.app.Fragment
+import androidx.lifecycle.Lifecycle
 import androidx.navigation.NavDirections
 import com.topjohnwu.magisk.BR
 
@@ -37,6 +38,9 @@ abstract class BaseFragment<Binding : ViewDataBinding> : Fragment(), ViewModelHo
             it.setVariable(BR.viewModel, viewModel)
             it.lifecycleOwner = viewLifecycleOwner
         }
+        if (this is MenuProvider) {
+            activity?.addMenuProvider(this, viewLifecycleOwner, Lifecycle.State.STARTED)
+        }
         savedInstanceState?.let { viewModel.onRestoreState(it) }
         return binding.root
     }
@@ -66,8 +70,6 @@ abstract class BaseFragment<Binding : ViewDataBinding> : Fragment(), ViewModelHo
 
     override fun onViewCreated(view: View, savedInstanceState: Bundle?) {
         super.onViewCreated(view, savedInstanceState)
-        if (this is MenuProvider)
-            activity?.addMenuProvider(this, viewLifecycleOwner)
         binding.addOnRebindCallback(object : OnRebindCallback<Binding>() {
             override fun onPreBind(binding: Binding): Boolean {
                 this@BaseFragment.onPreBind(binding)
@@ -91,5 +93,4 @@ abstract class BaseFragment<Binding : ViewDataBinding> : Fragment(), ViewModelHo
     fun NavDirections.navigate() {
         navigation?.currentDestination?.getAction(actionId)?.let { navigation!!.navigate(this) }
     }
-
 }

app/src/main/java/com/topjohnwu/magisk/core/App.kt

@@ -5,10 +5,13 @@ import android.app.Application
 import android.content.Context
 import android.content.res.Configuration
 import android.os.Bundle
-import androidx.lifecycle.ProcessLifecycleAccessor
+import androidx.profileinstaller.ProfileInstaller
+import com.topjohnwu.magisk.BuildConfig
 import com.topjohnwu.magisk.StubApk
 import com.topjohnwu.magisk.core.di.ServiceLocator
 import com.topjohnwu.magisk.core.utils.DispatcherExecutor
+import com.topjohnwu.magisk.core.utils.NetworkObserver
+import com.topjohnwu.magisk.core.utils.ProcessLifecycle
 import com.topjohnwu.magisk.core.utils.RootUtils
 import com.topjohnwu.magisk.core.utils.ShellInit
 import com.topjohnwu.magisk.core.utils.refreshLocale
@@ -19,6 +22,8 @@ import com.topjohnwu.superuser.Shell
 import com.topjohnwu.superuser.internal.UiThreadHandler
 import com.topjohnwu.superuser.ipc.RootService
 import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.GlobalScope
+import kotlinx.coroutines.launch
 import timber.log.Timber
 import java.lang.ref.WeakReference
 import kotlin.system.exitProcess
@@ -81,7 +86,13 @@ open class App() : Application() {
 
     override fun onCreate() {
         super.onCreate()
-        ProcessLifecycleAccessor.init(this)
+        ProcessLifecycle.init(this)
+        NetworkObserver.init(this)
+        if (!BuildConfig.DEBUG && !isRunningAsStub) {
+            GlobalScope.launch(Dispatchers.IO) {
+                ProfileInstaller.writeProfile(this@App)
+            }
+        }
     }
 
     override fun onConfigurationChanged(newConfig: Configuration) {

app/src/main/java/com/topjohnwu/magisk/core/Config.kt

@@ -1,22 +1,19 @@
 package com.topjohnwu.magisk.core
 
 import android.annotation.SuppressLint
-import android.content.SharedPreferences
-import android.util.Xml
 import androidx.appcompat.app.AppCompatDelegate
 import androidx.core.content.edit
 import com.topjohnwu.magisk.BuildConfig
 import com.topjohnwu.magisk.core.di.AppContext
 import com.topjohnwu.magisk.core.di.ServiceLocator
+import com.topjohnwu.magisk.core.ktx.writeTo
 import com.topjohnwu.magisk.core.repository.BoolDBPropertyNoWrite
 import com.topjohnwu.magisk.core.repository.DBConfig
 import com.topjohnwu.magisk.core.repository.PreferenceConfig
 import com.topjohnwu.magisk.core.utils.refreshLocale
 import com.topjohnwu.magisk.ui.theme.Theme
 import kotlinx.coroutines.GlobalScope
-import org.xmlpull.v1.XmlPullParser
 import java.io.File
-import java.io.InputStream
 
 object Config : PreferenceConfig, DBConfig {
 
@@ -25,13 +22,12 @@ object Config : PreferenceConfig, DBConfig {
     override val context get() = ServiceLocator.deContext
     override val coroutineScope get() = GlobalScope
 
-    @get:SuppressLint("ApplySharedPref")
-    val prefsFile: File get() {
-        // Flush prefs to disk
-        prefs.edit().apply {
-            remove(Key.ASKED_HOME)
-        }.commit()
-        return File("${context.filesDir.parent}/shared_prefs", "${fileName}.xml")
+    private val prefsFile = File("${context.filesDir.parent}/shared_prefs", "${fileName}.xml")
+
+    @SuppressLint("ApplySharedPref")
+    fun getPrefsFile(): File {
+        prefs.edit().remove(Key.ASKED_HOME).commit()
+        return prefsFile
     }
 
     object Key {
@@ -118,7 +114,6 @@ object Config : PreferenceConfig, DBConfig {
 
     @JvmField var keepVerity = false
     @JvmField var keepEnc = false
-    @JvmField var patchVbmeta = false
     @JvmField var recovery = false
 
     var bootId by preference(Key.BOOT_ID, "")
@@ -161,7 +156,12 @@ object Config : PreferenceConfig, DBConfig {
     var rootMode by dbSettings(Key.ROOT_ACCESS, Value.ROOT_ACCESS_APPS_AND_ADB)
     var suMntNamespaceMode by dbSettings(Key.SU_MNT_NS, Value.NAMESPACE_MODE_REQUESTER)
     var suMultiuserMode by dbSettings(Key.SU_MULTIUSER_MODE, Value.MULTIUSER_MODE_OWNER_ONLY)
-    var suBiometric by dbSettings(Key.SU_BIOMETRIC, false)
+    private var suBiometric by dbSettings(Key.SU_BIOMETRIC, false)
+    var userAuth
+        get() = Info.isDeviceSecure && suBiometric
+        set(value) {
+            suBiometric = value
+        }
     var zygisk by dbSettings(Key.ZYGISK, false)
     var denyList by BoolDBPropertyNoWrite(Key.DENYLIST, false)
     var suManager by dbStrings(Key.SU_MANAGER, "", true)
@@ -172,9 +172,8 @@ object Config : PreferenceConfig, DBConfig {
     fun load(pkg: String?) {
         // Only try to load prefs when fresh install and a previous package name is set
         if (pkg != null && prefs.all.isEmpty()) runCatching {
-            context.contentResolver.openInputStream(Provider.preferencesUri(pkg))?.use {
-                prefs.edit { parsePrefs(it) }
-            }
+            context.contentResolver.openInputStream(Provider.preferencesUri(pkg))?.writeTo(prefsFile)
+            return
         }
 
         prefs.edit {
@@ -191,52 +190,4 @@ object Config : PreferenceConfig, DBConfig {
             }
         }
     }
-
-    private fun SharedPreferences.Editor.parsePrefs(input: InputStream) {
-        runCatching {
-            val parser = Xml.newPullParser()
-            parser.setFeature(XmlPullParser.FEATURE_PROCESS_NAMESPACES, false)
-            parser.setInput(input, "UTF-8")
-            parser.nextTag()
-            parser.require(XmlPullParser.START_TAG, null, "map")
-            while (parser.next() != XmlPullParser.END_TAG) {
-                if (parser.eventType != XmlPullParser.START_TAG)
-                    continue
-                val key: String = parser.getAttributeValue(null, "name")
-                fun value() = parser.getAttributeValue(null, "value")!!
-                when (parser.name) {
-                    "string" -> {
-                        parser.require(XmlPullParser.START_TAG, null, "string")
-                        putString(key, parser.nextText())
-                        parser.require(XmlPullParser.END_TAG, null, "string")
-                    }
-                    "boolean" -> {
-                        parser.require(XmlPullParser.START_TAG, null, "boolean")
-                        putBoolean(key, value().toBoolean())
-                        parser.nextTag()
-                        parser.require(XmlPullParser.END_TAG, null, "boolean")
-                    }
-                    "int" -> {
-                        parser.require(XmlPullParser.START_TAG, null, "int")
-                        putInt(key, value().toInt())
-                        parser.nextTag()
-                        parser.require(XmlPullParser.END_TAG, null, "int")
-                    }
-                    "long" -> {
-                        parser.require(XmlPullParser.START_TAG, null, "long")
-                        putLong(key, value().toLong())
-                        parser.nextTag()
-                        parser.require(XmlPullParser.END_TAG, null, "long")
-                    }
-                    "float" -> {
-                        parser.require(XmlPullParser.START_TAG, null, "int")
-                        putFloat(key, value().toFloat())
-                        parser.nextTag()
-                        parser.require(XmlPullParser.END_TAG, null, "int")
-                    }
-                    else -> parser.next()
-                }
-            }
-        }
-    }
 }

app/src/main/java/com/topjohnwu/magisk/core/Info.kt

@@ -1,14 +1,12 @@
 package com.topjohnwu.magisk.core
 
-import android.os.Build
-import androidx.lifecycle.LiveData
+import android.app.KeyguardManager
 import androidx.lifecycle.MutableLiveData
 import com.topjohnwu.magisk.StubApk
 import com.topjohnwu.magisk.core.di.AppContext
 import com.topjohnwu.magisk.core.ktx.getProperty
 import com.topjohnwu.magisk.core.model.UpdateInfo
 import com.topjohnwu.magisk.core.repository.NetworkService
-import com.topjohnwu.magisk.core.utils.NetworkObserver
 import com.topjohnwu.superuser.ShellUtils.fastCmd
 
 val isRunningAsStub get() = Info.stub != null
@@ -28,35 +26,31 @@ object Info {
     // Device state
     @JvmStatic val env by lazy { loadState() }
     @JvmField var isSAR = false
+    var legacySAR = false
     var isAB = false
     @JvmField val isZygiskEnabled = System.getenv("ZYGISK_ENABLED") == "1"
     @JvmStatic val isFDE get() = crypto == "block"
     @JvmField var ramdisk = false
-    @JvmField var vbmeta = false
+    var patchBootVbmeta = false
     var crypto = ""
     var noDataExec = false
     var isRooted = false
 
     @JvmField var hasGMS = true
-    val isSamsung = Build.MANUFACTURER.equals("samsung", ignoreCase = true)
     @JvmField val isEmulator =
         getProperty("ro.kernel.qemu", "0") == "1" ||
             getProperty("ro.boot.qemu", "0") == "1"
 
-    val isConnected: LiveData<Boolean> by lazy {
-        MutableLiveData(false).also { field ->
-            NetworkObserver.observe(AppContext) {
-                remote = EMPTY_REMOTE
-                field.postValue(it)
-            }
-        }
-    }
+    val isConnected = MutableLiveData(false)
 
     val showSuperUser: Boolean get() {
         return env.isActive && (Const.USER_ID == 0
                 || Config.suMultiuserMode == Config.Value.MULTIUSER_MODE_USER)
     }
 
+    val isDeviceSecure get() =
+        AppContext.getSystemService(KeyguardManager::class.java).isDeviceSecure
+
     private fun loadState(): Env {
         val v = fastCmd("magisk -v").split(":".toRegex())
         return Env(

app/src/main/java/com/topjohnwu/magisk/core/Provider.kt

@@ -6,17 +6,23 @@ import android.os.ParcelFileDescriptor
 import android.os.ParcelFileDescriptor.MODE_READ_ONLY
 import com.topjohnwu.magisk.core.base.BaseProvider
 import com.topjohnwu.magisk.core.su.SuCallbackHandler
+import com.topjohnwu.magisk.core.su.TestHandler
 
 class Provider : BaseProvider() {
 
     override fun call(method: String, arg: String?, extras: Bundle?): Bundle? {
-        SuCallbackHandler.run(context!!, method, extras)
-        return Bundle.EMPTY
+        return when (method) {
+            SuCallbackHandler.LOG, SuCallbackHandler.NOTIFY -> {
+                SuCallbackHandler.run(context!!, method, extras)
+                Bundle.EMPTY
+            }
+            else -> TestHandler.run(method)
+        }
     }
 
     override fun openFile(uri: Uri, mode: String): ParcelFileDescriptor? {
         return when (uri.encodedPath ?: return null) {
-            "/prefs_file" -> ParcelFileDescriptor.open(Config.prefsFile, MODE_READ_ONLY)
+            "/prefs_file" -> ParcelFileDescriptor.open(Config.getPrefsFile(), MODE_READ_ONLY)
             else -> super.openFile(uri, mode)
         }
     }

app/src/main/java/com/topjohnwu/magisk/core/base/BaseActivity.kt

@@ -20,6 +20,7 @@ import com.topjohnwu.magisk.R
 import com.topjohnwu.magisk.core.isRunningAsStub
 import com.topjohnwu.magisk.core.ktx.reflectField
 import com.topjohnwu.magisk.core.ktx.toast
+import com.topjohnwu.magisk.core.utils.RequestAuthentication
 import com.topjohnwu.magisk.core.utils.RequestInstall
 import com.topjohnwu.magisk.core.wrap
 
@@ -43,6 +44,12 @@ abstract class BaseActivity : AppCompatActivity() {
         installCallback = null
     }
 
+    var authenticateCallback: ((Boolean) -> Unit)? = null
+    val requestAuthenticate = registerForActivityResult(RequestAuthentication()) {
+        authenticateCallback?.invoke(it)
+        authenticateCallback = null
+    }
+
     private var contentCallback: ContentResultCallback? = null
     private val getContent = registerForActivityResult(GetContent()) {
         if (it != null) contentCallback?.onActivityResult(it)

app/src/main/java/com/topjohnwu/magisk/core/data/SuLogDao.kt

@@ -1,15 +1,27 @@
 package com.topjohnwu.magisk.core.data
 
 import androidx.room.*
+import androidx.room.migration.Migration
+import androidx.sqlite.db.SupportSQLiteDatabase
 import com.topjohnwu.magisk.core.model.su.SuLog
 import kotlinx.coroutines.Dispatchers
 import kotlinx.coroutines.withContext
 import java.util.*
 
-@Database(version = 1, entities = [SuLog::class], exportSchema = false)
+@Database(version = 2, entities = [SuLog::class], exportSchema = false)
 abstract class SuLogDatabase : RoomDatabase() {
 
     abstract fun suLogDao(): SuLogDao
+
+    companion object {
+        val MIGRATION_1_2 = object : Migration(1, 2) {
+            override fun migrate(database: SupportSQLiteDatabase) = with(database) {
+                execSQL("ALTER TABLE logs ADD COLUMN target INTEGER NOT NULL DEFAULT -1")
+                execSQL("ALTER TABLE logs ADD COLUMN context TEXT NOT NULL DEFAULT ''")
+                execSQL("ALTER TABLE logs ADD COLUMN gids TEXT NOT NULL DEFAULT ''")
+            }
+        }
+    }
 }
 
 @Dao

app/src/main/java/com/topjohnwu/magisk/core/di/ServiceLocator.kt

@@ -45,6 +45,7 @@ object ServiceLocator {
 
 private fun createSuLogDatabase(context: Context) =
     Room.databaseBuilder(context, SuLogDatabase::class.java, "sulogs.db")
+        .addMigrations(SuLogDatabase.MIGRATION_1_2)
         .fallbackToDestructiveMigration()
         .build()
 

app/src/main/java/com/topjohnwu/magisk/core/ktx/XAndroid.kt

@@ -12,7 +12,6 @@ import android.graphics.Canvas
 import android.graphics.drawable.AdaptiveIconDrawable
 import android.graphics.drawable.BitmapDrawable
 import android.graphics.drawable.LayerDrawable
-import android.net.Uri
 import android.os.Build
 import android.os.Build.VERSION.SDK_INT
 import android.os.Process
@@ -21,16 +20,12 @@ import android.view.inputmethod.InputMethodManager
 import android.widget.Toast
 import androidx.appcompat.content.res.AppCompatResources
 import androidx.core.content.getSystemService
-import com.topjohnwu.magisk.core.Const
 import com.topjohnwu.magisk.core.utils.RootUtils
 import com.topjohnwu.magisk.core.utils.currentLocale
 import com.topjohnwu.magisk.utils.APKInstall
-import com.topjohnwu.superuser.Shell
 import com.topjohnwu.superuser.internal.UiThreadHandler
 import java.io.File
-import kotlin.Array
 import kotlin.String
-import java.lang.reflect.Array as JArray
 
 fun Context.rawResource(id: Int) = resources.openRawResource(id)
 
@@ -56,110 +51,6 @@ val Context.deviceProtectedContext: Context get() =
         createDeviceProtectedStorageContext()
     } else { this }
 
-fun Intent.startActivityWithRoot() {
-    val args = mutableListOf("am", "start", "--user", Const.USER_ID.toString())
-    val cmd = toCommand(args).joinToString(" ")
-    Shell.cmd(cmd).submit()
-}
-
-fun Intent.toCommand(args: MutableList<String> = mutableListOf()): MutableList<String> {
-    action?.also {
-        args.add("-a")
-        args.add(it)
-    }
-    component?.also {
-        args.add("-n")
-        args.add(it.flattenToString())
-    }
-    data?.also {
-        args.add("-d")
-        args.add(it.toString())
-    }
-    categories?.also {
-        for (cat in it) {
-            args.add("-c")
-            args.add(cat)
-        }
-    }
-    type?.also {
-        args.add("-t")
-        args.add(it)
-    }
-    extras?.also {
-        loop@ for (key in it.keySet()) {
-            val v = it[key] ?: continue
-            var value: Any = v
-            val arg: String
-            when {
-                v is String -> arg = "--es"
-                v is Boolean -> arg = "--ez"
-                v is Int -> arg = "--ei"
-                v is Long -> arg = "--el"
-                v is Float -> arg = "--ef"
-                v is Uri -> arg = "--eu"
-                v is ComponentName -> {
-                    arg = "--ecn"
-                    value = v.flattenToString()
-                }
-                v is List<*> -> {
-                    if (v.isEmpty())
-                        continue@loop
-
-                    arg = if (v[0] is Int)
-                        "--eial"
-                    else if (v[0] is Long)
-                        "--elal"
-                    else if (v[0] is Float)
-                        "--efal"
-                    else if (v[0] is String)
-                        "--esal"
-                    else
-                        continue@loop  /* Unsupported */
-
-                    val sb = StringBuilder()
-                    for (o in v) {
-                        sb.append(o.toString().replace(",", "\\,"))
-                        sb.append(',')
-                    }
-                    // Remove trailing comma
-                    sb.deleteCharAt(sb.length - 1)
-                    value = sb
-                }
-                v.javaClass.isArray -> {
-                    arg = if (v is IntArray)
-                        "--eia"
-                    else if (v is LongArray)
-                        "--ela"
-                    else if (v is FloatArray)
-                        "--efa"
-                    else if (v is Array<*> && v.isArrayOf<String>())
-                        "--esa"
-                    else
-                        continue@loop  /* Unsupported */
-
-                    val sb = StringBuilder()
-                    val len = JArray.getLength(v)
-                    for (i in 0 until len) {
-                        sb.append(JArray.get(v, i)!!.toString().replace(",", "\\,"))
-                        sb.append(',')
-                    }
-                    // Remove trailing comma
-                    sb.deleteCharAt(sb.length - 1)
-                    value = sb
-                }
-                else -> continue@loop
-            }  /* Unsupported */
-
-            args.add(arg)
-            args.add(key)
-            args.add(value.toString())
-        }
-    }
-    args.add("-f")
-    args.add(flags.toString())
-    return args
-}
-
 fun Context.cachedFile(name: String) = File(cacheDir, name)
 
 fun ApplicationInfo.getLabel(pm: PackageManager): String {

app/src/main/java/com/topjohnwu/magisk/core/ktx/XSU.kt

@@ -1,8 +1,6 @@
 package com.topjohnwu.magisk.core.ktx
 
-import android.content.Context
 import com.topjohnwu.magisk.core.Config
-import com.topjohnwu.magisk.core.Const
 import com.topjohnwu.superuser.Shell
 import kotlinx.coroutines.Dispatchers
 import kotlinx.coroutines.withContext
@@ -15,12 +13,4 @@ fun reboot(reason: String = if (Config.recovery) "recovery" else "") {
     Shell.cmd("/system/bin/svc power reboot $reason || /system/bin/reboot $reason").submit()
 }
 
-fun relaunchApp(context: Context) {
-    val intent = context.packageManager.getLaunchIntentForPackage(context.packageName) ?: return
-    val args = mutableListOf("am", "start", "--user", Const.USER_ID.toString())
-    val cmd = intent.toCommand(args).joinToString(separator = " ")
-    Shell.cmd("run_delay 1 \"$cmd\"").exec()
-    Runtime.getRuntime().exit(0)
-}
-
 suspend fun Shell.Job.await() = withContext(Dispatchers.IO) { exec() }

app/src/main/java/com/topjohnwu/magisk/core/model/su/SuLog.kt

@@ -14,7 +14,10 @@ class SuLog(
     val packageName: String,
     val appName: String,
     val command: String,
-    val action: Boolean,
+    val action: Int,
+    val target: Int,
+    val context: String,
+    val gids: String,
     val time: Long = System.currentTimeMillis()
 ) {
     @PrimaryKey(autoGenerate = true) var id: Int = 0
@@ -25,7 +28,10 @@ fun PackageManager.createSuLog(
     toUid: Int,
     fromPid: Int,
     command: String,
-    policy: Int
+    policy: Int,
+    target: Int,
+    context: String,
+    gids: String,
 ): SuLog {
     val appInfo = info.applicationInfo
     return SuLog(
@@ -35,7 +41,10 @@ fun PackageManager.createSuLog(
         packageName = getNameForUid(appInfo.uid)!!,
         appName = appInfo.getLabel(this),
         command = command,
-        action = policy == SuPolicy.ALLOW
+        action = policy,
+        target = target,
+        context = context,
+        gids = gids,
     )
 }
 
@@ -44,7 +53,10 @@ fun createSuLog(
     toUid: Int,
     fromPid: Int,
     command: String,
-    policy: Int
+    policy: Int,
+    target: Int,
+    context: String,
+    gids: String,
 ): SuLog {
     return SuLog(
         fromUid = fromUid,
@@ -53,6 +65,9 @@ fun createSuLog(
         packageName = "[UID] $fromUid",
         appName = "[UID] $fromUid",
         command = command,
-        action = policy == SuPolicy.ALLOW
+        action = policy,
+        target = target,
+        context = context,
+        gids = gids,
     )
 }

app/src/main/java/com/topjohnwu/magisk/core/su/SuCallbackHandler.kt

@@ -57,17 +57,20 @@ object SuCallbackHandler {
         val toUid = data.getIntComp("to.uid", -1)
         val pid = data.getIntComp("pid", -1)
         val command = data.getString("command", "")
+        val target = data.getIntComp("target", -1)
+        val seContext = data.getString("context", "")
+        val gids = data.getString("gids", "")
 
         val pm = context.packageManager
 
         val log = runCatching {
             pm.getPackageInfo(fromUid, pid)?.let {
-                pm.createSuLog(it, toUid, pid, command, policy)
+                pm.createSuLog(it, toUid, pid, command, policy, target, seContext, gids)
             }
-        }.getOrNull() ?: createSuLog(fromUid, toUid, pid, command, policy)
+        }.getOrNull() ?: createSuLog(fromUid, toUid, pid, command, policy, target, seContext, gids)
 
         if (notify)
-            notify(context, log.action, log.appName)
+            notify(context, log.action == SuPolicy.ALLOW, log.appName)
 
         runBlocking { ServiceLocator.logRepo.insert(log) }
     }

app/src/main/java/com/topjohnwu/magisk/core/su/SuRequestHandler.kt

@@ -13,6 +13,7 @@ import kotlinx.coroutines.Dispatchers
 import kotlinx.coroutines.withContext
 import timber.log.Timber
 import java.io.DataOutputStream
+import java.io.File
 import java.io.FileOutputStream
 import java.io.IOException
 import java.util.concurrent.TimeUnit
@@ -22,7 +23,7 @@ class SuRequestHandler(
     private val policyDB: PolicyDao
 ) {
 
-    private lateinit var output: DataOutputStream
+    private lateinit var output: File
     private lateinit var policy: SuPolicy
     lateinit var pkgInfo: PackageInfo
         private set
@@ -52,37 +53,32 @@ class SuRequestHandler(
         return true
     }
 
-    private fun close() {
-        if (::output.isInitialized)
-            runCatching { output.close() }
-    }
-
-    private suspend fun init(intent: Intent) = withContext(Dispatchers.IO) {
-        try {
-            val fifo = intent.getStringExtra("fifo") ?: throw IOException("fifo == null")
-            output = DataOutputStream(FileOutputStream(fifo))
-            val uid = intent.getIntExtra("uid", -1)
-            if (uid <= 0) {
-                throw IOException("uid == $uid")
-            }
-            policy = SuPolicy(uid)
-            val pid = intent.getIntExtra("pid", -1)
-            try {
-                pkgInfo = pm.getPackageInfo(uid, pid) ?: PackageInfo().apply {
-                    val name = pm.getNameForUid(uid) ?: throw PackageManager.NameNotFoundException()
-                    // We only fill in sharedUserId and leave other fields uninitialized
-                    sharedUserId = name.split(":")[0]
-                }
-                return@withContext true
-            } catch (e: PackageManager.NameNotFoundException) {
-                respond(SuPolicy.DENY, -1)
-                return@withContext false
-            }
-        } catch (e: IOException) {
-            Timber.e(e)
-            close()
-            return@withContext false
+    private suspend fun init(intent: Intent): Boolean {
+        val uid = intent.getIntExtra("uid", -1)
+        val pid = intent.getIntExtra("pid", -1)
+        val fifo = intent.getStringExtra("fifo")
+        if (uid <= 0 || pid <= 0 || fifo == null) {
+            Timber.e("Unexpected extras: uid=[${uid}], pid=[${pid}], fifo=[${fifo}]")
+            return false
         }
+        output = File(fifo)
+        policy = SuPolicy(uid)
+        try {
+            pkgInfo = pm.getPackageInfo(uid, pid) ?: PackageInfo().apply {
+                val name = pm.getNameForUid(uid) ?: throw PackageManager.NameNotFoundException()
+                // We only fill in sharedUserId and leave other fields uninitialized
+                sharedUserId = name.split(":")[0]
+            }
+        } catch (e: PackageManager.NameNotFoundException) {
+            Timber.e(e)
+            respond(SuPolicy.DENY, -1)
+            return false
+        }
+        if (!output.canWrite()) {
+            Timber.e("Cannot write to $output")
+            return false
+        }
+        return true
     }
 
     suspend fun respond(action: Int, time: Int) {
@@ -97,14 +93,15 @@ class SuRequestHandler(
 
         withContext(Dispatchers.IO) {
             try {
-                output.writeInt(policy.policy)
-                output.flush()
+                DataOutputStream(FileOutputStream(output)).use {
+                    it.writeInt(policy.policy)
+                    it.flush()
+                }
             } catch (e: IOException) {
                 Timber.e(e)
-            } finally {
-                close()
-                if (until >= 0)
-                    policyDB.update(policy)
+            }
+            if (until >= 0) {
+                policyDB.update(policy)
             }
         }
     }

app/src/main/java/com/topjohnwu/magisk/core/su/TestHandler.kt

@@ -0,0 +1,68 @@
+package com.topjohnwu.magisk.core.su
+
+import android.os.Bundle
+import com.topjohnwu.magisk.core.Config
+import com.topjohnwu.magisk.core.Info
+import com.topjohnwu.magisk.core.di.ServiceLocator
+import com.topjohnwu.magisk.core.tasks.MagiskInstaller
+import com.topjohnwu.magisk.core.utils.RootUtils
+import com.topjohnwu.superuser.Shell
+import com.topjohnwu.superuser.internal.NOPList
+import kotlinx.coroutines.runBlocking
+
+object TestHandler {
+
+    fun run(method: String): Bundle {
+        val r = Bundle()
+
+        fun setup(): Boolean {
+            val nop = NOPList.getInstance()
+            return runBlocking {
+                MagiskInstaller.Emulator(nop, nop).exec()
+            }
+        }
+
+        fun test(): Boolean {
+            // Make sure Zygisk works correctly
+            if (!Info.isZygiskEnabled) {
+                r.putString("reason", "zygisk not enabled")
+                return false
+            }
+
+            // Make sure the Magisk app can get root
+            val shell = Shell.getShell()
+            if (!shell.isRoot) {
+                r.putString("reason", "shell not root")
+                return false
+            }
+
+            // Make sure the root service is running
+            RootUtils.Connection.await()
+
+            // Clear existing grant for ADB shell
+            runBlocking {
+                ServiceLocator.policyDB.delete(2000)
+                Config.suAutoResponse = Config.Value.SU_AUTO_ALLOW
+                Config.prefs.edit().commit()
+            }
+            return true
+        }
+
+        val b = runCatching {
+            when (method) {
+                "setup" -> setup()
+                "test" -> test()
+                else -> {
+                    r.putString("reason", "unknown method")
+                    false
+                }
+            }
+        }.getOrElse {
+            r.putString("reason", it.stackTraceToString())
+            false
+        }
+
+        r.putBoolean("result", b)
+        return r
+    }
+}

app/src/main/java/com/topjohnwu/magisk/core/tasks/MagiskInstaller.kt

@@ -1,24 +1,30 @@
 package com.topjohnwu.magisk.core.tasks
 
 import android.net.Uri
+import android.system.ErrnoException
 import android.system.Os
+import android.system.OsConstants
+import android.system.OsConstants.O_WRONLY
 import android.widget.Toast
 import androidx.annotation.WorkerThread
 import androidx.core.os.postDelayed
 import com.topjohnwu.magisk.BuildConfig
 import com.topjohnwu.magisk.R
 import com.topjohnwu.magisk.StubApk
-import com.topjohnwu.magisk.core.*
+import com.topjohnwu.magisk.core.AppApkPath
+import com.topjohnwu.magisk.core.Config
+import com.topjohnwu.magisk.core.Const
+import com.topjohnwu.magisk.core.Info
 import com.topjohnwu.magisk.core.di.ServiceLocator
+import com.topjohnwu.magisk.core.isRunningAsStub
+import com.topjohnwu.magisk.core.ktx.copyAndClose
 import com.topjohnwu.magisk.core.ktx.reboot
 import com.topjohnwu.magisk.core.ktx.toast
-import com.topjohnwu.magisk.core.ktx.withStreams
 import com.topjohnwu.magisk.core.ktx.writeTo
 import com.topjohnwu.magisk.core.utils.MediaStoreUtils
 import com.topjohnwu.magisk.core.utils.MediaStoreUtils.inputStream
 import com.topjohnwu.magisk.core.utils.MediaStoreUtils.outputStream
 import com.topjohnwu.magisk.core.utils.RootUtils
-import com.topjohnwu.magisk.signing.SignBoot
 import com.topjohnwu.superuser.Shell
 import com.topjohnwu.superuser.ShellUtils
 import com.topjohnwu.superuser.internal.NOPList
@@ -40,6 +46,7 @@ import java.util.*
 import java.util.concurrent.atomic.AtomicBoolean
 import java.util.zip.ZipEntry
 import java.util.zip.ZipFile
+import java.util.zip.ZipInputStream
 
 abstract class MagiskInstallImpl protected constructor(
     protected val console: MutableList<String> = NOPList.getInstance(),
@@ -111,7 +118,9 @@ abstract class MagiskInstallImpl protected constructor(
                     val name = n.substring(3, n.length - 3)
                     val dest = File(installDir, name)
                     zf.getInputStream(it).writeTo(dest)
+                    dest.setExecutable(true)
                 }
+                zf.close()
             } else {
                 val info = context.applicationInfo
                 var libs = File(info.nativeLibraryDir).listFiles { _, name ->
@@ -119,7 +128,8 @@ abstract class MagiskInstallImpl protected constructor(
                 } ?: emptyArray()
 
                 // Also symlink magisk32 on non 64-bit only 64-bit devices
-                val lib32 = info.javaClass.getDeclaredField("secondaryNativeLibraryDir").get(info) as String?
+                val lib32 = info.javaClass.getDeclaredField("secondaryNativeLibraryDir")
+                    .get(info) as String?
                 if (lib32 != null) {
                     libs += File(lib32, "libmagisk32.so")
                 }
@@ -164,102 +174,218 @@ abstract class MagiskInstallImpl protected constructor(
         return true
     }
 
-    private fun InputStream.cleanPump(out: OutputStream) = withStreams(this, out) { src, _ ->
-        src.copyTo(out)
-    }
+    private fun InputStream.copyAndCloseOut(out: OutputStream) = out.use { copyTo(it) }
 
     private fun newTarEntry(name: String, size: Long): TarEntry {
         console.add("-- Writing: $name")
         return TarEntry(TarHeader.createHeader(name, size, 0, false, 420 /* 0644 */))
     }
 
+    private class NoAvailableStream(s: InputStream) : FilterInputStream(s) {
+        // Make sure available is never called on the actual stream and always return 0
+        // 1. Workaround bug in LZ4FrameInputStream
+        // 2. Reduce max buffer size to prevent OOM
+        override fun available() = 0
+    }
+
+    private class NoBootException : IOException()
+
     @Throws(IOException::class)
-    private fun processTar(input: InputStream, output: OutputStream): OutputStream {
+    private fun processTar(tarIn: TarInputStream, tarOut: TarOutputStream): ExtendedFile {
         console.add("- Processing tar file")
-        val tarOut = TarOutputStream(output)
-        TarInputStream(input).use { tarIn ->
-            lateinit var entry: TarEntry
+        lateinit var entry: TarEntry
 
-            fun decompressedStream(): InputStream {
-                val src = if (entry.name.endsWith(".lz4")) LZ4FrameInputStream(tarIn) else tarIn
-                return object : FilterInputStream(src) {
-                    override fun available() = 0  /* Workaround bug in LZ4FrameInputStream */
-                    override fun close() { /* Never close src stream */ }
-                }
-            }
+        fun decompressedStream(): InputStream {
+            val stream = if (entry.name.endsWith(".lz4")) LZ4FrameInputStream(tarIn) else tarIn
+            return NoAvailableStream(stream)
+        }
 
-            while (tarIn.nextEntry?.let { entry = it } != null) {
-                if (entry.name.startsWith("boot.img") ||
-                    entry.name.startsWith("init_boot.img") ||
-                    (Config.recovery && entry.name.contains("recovery.img"))) {
-                    val name = entry.name.replace(".lz4", "")
-                    console.add("-- Extracting: $name")
+        while (tarIn.nextEntry?.let { entry = it } != null) {
+            if (entry.name.startsWith("boot.img") ||
+                entry.name.startsWith("init_boot.img") ||
+                (Config.recovery && entry.name.contains("recovery.img"))) {
+                val name = entry.name.replace(".lz4", "")
+                console.add("-- Extracting: $name")
 
-                    val extract = installDir.getChildFile(name)
-                    decompressedStream().cleanPump(extract.newOutputStream())
-                } else if (entry.name.contains("vbmeta.img")) {
-                    val rawData = decompressedStream().readBytes()
-                    // Valid vbmeta.img should be at least 256 bytes
-                    if (rawData.size < 256)
-                        continue
+                val extract = installDir.getChildFile(name)
+                decompressedStream().copyAndCloseOut(extract.newOutputStream())
+            } else if (entry.name.contains("vbmeta.img")) {
+                val rawData = decompressedStream().readBytes()
+                // Valid vbmeta.img should be at least 256 bytes
+                if (rawData.size < 256)
+                    continue
 
-                    // Patch flags to AVB_VBMETA_IMAGE_FLAGS_HASHTREE_DISABLED |
-                    // AVB_VBMETA_IMAGE_FLAGS_VERIFICATION_DISABLED
-                    console.add("-- Patching: vbmeta.img")
-                    ByteBuffer.wrap(rawData).putInt(120, 3)
-                    tarOut.putNextEntry(newTarEntry("vbmeta.img", rawData.size.toLong()))
-                    tarOut.write(rawData)
-                } else {
-                    console.add("-- Copying: ${entry.name}")
-                    tarOut.putNextEntry(entry)
-                    tarIn.copyTo(tarOut, bufferSize = 1024 * 1024)
-                }
+                // Patch flags to AVB_VBMETA_IMAGE_FLAGS_HASHTREE_DISABLED |
+                // AVB_VBMETA_IMAGE_FLAGS_VERIFICATION_DISABLED
+                console.add("-- Patching: vbmeta.img")
+                ByteBuffer.wrap(rawData).putInt(120, 3)
+                tarOut.putNextEntry(newTarEntry("vbmeta.img", rawData.size.toLong()))
+                tarOut.write(rawData)
+                // vbmeta partition exist, disable boot vbmeta patch
+                Info.patchBootVbmeta = false
+            } else if (entry.name.contains("userdata.img")) {
+                continue
+            } else {
+                console.add("-- Copying: ${entry.name}")
+                tarOut.putNextEntry(entry)
+                tarIn.copyTo(tarOut, bufferSize = 1024 * 1024)
             }
         }
+
         val boot = installDir.getChildFile("boot.img")
         val initBoot = installDir.getChildFile("init_boot.img")
         val recovery = installDir.getChildFile("recovery.img")
-        if (Config.recovery && recovery.exists() && boot.exists()) {
-            // Install to recovery
-            srcBoot = recovery
-            // Repack boot image to prevent auto restore
-            arrayOf(
-                "cd $installDir",
-                "chmod -R 755 .",
-                "./magiskboot unpack boot.img",
-                "./magiskboot repack boot.img",
-                "cat new-boot.img > boot.img",
-                "./magiskboot cleanup",
-                "rm -f new-boot.img",
-                "cd /").sh()
-            boot.newInputStream().use {
-                tarOut.putNextEntry(newTarEntry("boot.img", boot.length()))
+
+        fun ExtendedFile.copyToTar() {
+            newInputStream().use {
+                tarOut.putNextEntry(newTarEntry(name, length()))
                 it.copyTo(tarOut)
             }
-            boot.delete()
-        } else {
-            srcBoot = when {
-                initBoot.exists() -> initBoot
-                boot.exists() -> boot
-                else -> {
-                    console.add("! No boot image found")
-                    throw IOException()
+            delete()
+        }
+
+        // Patch priority: recovery > init_boot > boot
+        return when {
+            recovery.exists() -> {
+                if (boot.exists()) {
+                    // Repack boot image to prevent auto restore
+                    arrayOf(
+                        "cd $installDir",
+                        "chmod -R 755 .",
+                        "./magiskboot unpack boot.img",
+                        "./magiskboot repack boot.img",
+                        "cat new-boot.img > boot.img",
+                        "./magiskboot cleanup",
+                        "rm -f new-boot.img",
+                        "cd /").sh()
+                    boot.copyToTar()
+                }
+                recovery
+            }
+            initBoot.exists() -> {
+                if (boot.exists())
+                    boot.copyToTar()
+                initBoot
+            }
+            boot.exists() -> boot
+            else -> throw NoBootException()
+        }
+    }
+
+    @Throws(IOException::class)
+    private fun processZip(zipIn: ZipInputStream): ExtendedFile {
+        console.add("- Processing zip file")
+        val boot = installDir.getChildFile("boot.img")
+        val initBoot = installDir.getChildFile("init_boot.img")
+        lateinit var entry: ZipEntry
+        while (zipIn.nextEntry?.also { entry = it } != null) {
+            if (entry.isDirectory) continue
+            when (entry.name.substringAfterLast('/')) {
+                "payload.bin" -> {
+                    try {
+                        return processPayload(zipIn)
+                    } catch (e: IOException) {
+                        // No boot image in payload.bin, continue to find boot images
+                    }
+                }
+                "init_boot.img" -> {
+                    console.add("- Extracting init_boot.img")
+                    zipIn.copyAndCloseOut(initBoot.newOutputStream())
+                    return initBoot
+                }
+                "boot.img" -> {
+                    console.add("- Extracting boot.img")
+                    zipIn.copyAndCloseOut(boot.newOutputStream())
+                    // Don't return here since there might be an init_boot.img
                 }
             }
         }
-        return tarOut
+        if (boot.exists()) {
+            return boot
+        } else {
+            throw NoBootException()
+        }
+    }
+
+    @Throws(IOException::class)
+    private fun processPayload(input: InputStream): ExtendedFile {
+        var fifo: File? = null
+        try {
+            console.add("- Processing payload.bin")
+            fifo = File.createTempFile("payload-fifo-", null, installDir)
+            fifo.delete()
+            Os.mkfifo(fifo.path, 420 /* 0644 */)
+
+            // Enqueue the shell command first, or the subsequent FIFO open will block
+            val future = arrayOf(
+                "cd $installDir",
+                "./magiskboot extract $fifo",
+                "cd /"
+            ).eq()
+
+            val fd = Os.open(fifo.path, O_WRONLY, 0)
+            try {
+                val bufSize = 1024 * 1024
+                val buf = ByteBuffer.allocate(bufSize)
+                buf.position(input.read(buf.array()).coerceAtLeast(0)).flip()
+                while (buf.hasRemaining()) {
+                    try {
+                        Os.write(fd, buf)
+                    } catch (e: ErrnoException) {
+                        if (e.errno != OsConstants.EPIPE)
+                            throw e
+                        // If SIGPIPE, then the other side is closed, we're done
+                        break
+                    }
+                    if (!buf.hasRemaining()) {
+                        buf.limit(bufSize)
+                        buf.position(input.read(buf.array()).coerceAtLeast(0)).flip()
+                    }
+                }
+            } finally {
+                Os.close(fd)
+            }
+
+            val success = try { future.get().isSuccess } catch (e: Exception) { false }
+            if (!success) {
+                console.add("! Error while extracting payload.bin")
+                throw IOException()
+            }
+            val boot = installDir.getChildFile("boot.img")
+            val initBoot = installDir.getChildFile("init_boot.img")
+            return when {
+                initBoot.exists() -> {
+                    console.add("-- Extract init_boot.img")
+                    initBoot
+                }
+                boot.exists() -> {
+                    console.add("-- Extract boot.img")
+                    boot
+                }
+                else -> {
+                    throw NoBootException()
+                }
+            }
+        } catch (e: ErrnoException) {
+            throw IOException(e)
+        } finally {
+            fifo?.delete()
+        }
     }
 
     private fun handleFile(uri: Uri): Boolean {
         val outStream: OutputStream
-        var outFile: MediaStoreUtils.UriFile? = null
+        val outFile: MediaStoreUtils.UriFile
 
         // Process input file
         try {
             uri.inputStream().buffered().use { src ->
                 src.mark(500)
-                val magic = ByteArray(5)
-                if (src.skip(257) != 257L || src.read(magic) != magic.size) {
+                val magic = ByteArray(4)
+                val tarMagic = ByteArray(5)
+                if (src.read(magic) != magic.size || src.skip(253) != 253L ||
+                    src.read(tarMagic) != tarMagic.size
+                ) {
                     console.add("! Invalid input file")
                     return false
                 }
@@ -275,29 +401,52 @@ abstract class MagiskInstallImpl protected constructor(
                     toString()
                 }
 
-                outStream = if (magic.contentEquals("ustar".toByteArray())) {
+                srcBoot = if (tarMagic.contentEquals("ustar".toByteArray())) {
                     // tar file
                     outFile = MediaStoreUtils.getFile("$filename.tar", true)
-                    processTar(src, outFile!!.uri.outputStream())
+                    outStream = TarOutputStream(outFile.uri.outputStream())
+
+                    try {
+                        processTar(TarInputStream(src), outStream)
+                    } catch (e: IOException) {
+                        outStream.close()
+                        outFile.delete()
+                        throw e
+                    }
                 } else {
                     // raw image
-                    srcBoot = installDir.getChildFile("boot.img")
-                    console.add("- Copying image to cache")
-                    src.cleanPump(srcBoot.newOutputStream())
                     outFile = MediaStoreUtils.getFile("$filename.img", true)
-                    outFile!!.uri.outputStream()
+                    outStream = outFile.uri.outputStream()
+
+                    try {
+                        if (magic.contentEquals("CrAU".toByteArray())) {
+                            processPayload(src)
+                        } else if (magic.contentEquals("PK\u0003\u0004".toByteArray())) {
+                            processZip(ZipInputStream(src))
+                        } else {
+                            console.add("- Copying image to cache")
+                            installDir.getChildFile("boot.img").also {
+                                src.copyAndCloseOut(it.newOutputStream())
+                            }
+                        }
+                    } catch (e: IOException) {
+                        outStream.close()
+                        outFile.delete()
+                        throw e
+                    }
                 }
             }
         } catch (e: IOException) {
+            if (e is NoBootException)
+                console.add("! No boot image found")
             console.add("! Process error")
-            outFile?.delete()
             Timber.e(e)
             return false
         }
 
         // Patch file
         if (!patchBoot()) {
-            outFile!!.delete()
+            outFile.delete()
             return false
         }
 
@@ -314,7 +463,7 @@ abstract class MagiskInstallImpl protected constructor(
                 }
                 outStream.putNextEntry(newTarEntry(name, newBoot.length()))
             }
-            newBoot.newInputStream().cleanPump(outStream)
+            newBoot.newInputStream().copyAndClose(outStream)
             newBoot.delete()
 
             console.add("")
@@ -324,7 +473,7 @@ abstract class MagiskInstallImpl protected constructor(
             console.add("****************************")
         } catch (e: IOException) {
             console.add("! Failed to output to $outFile")
-            outFile!!.delete()
+            outFile.delete()
             Timber.e(e)
             return false
         }
@@ -337,22 +486,6 @@ abstract class MagiskInstallImpl protected constructor(
     }
 
     private fun patchBoot(): Boolean {
-        var isSigned = false
-        if (!srcBoot.isCharacter) {
-            try {
-                srcBoot.newInputStream().use {
-                    if (SignBoot.verifySignature(it, null)) {
-                        isSigned = true
-                        console.add("- Boot image is signed with AVB 1.0")
-                    }
-                }
-            } catch (e: IOException) {
-                console.add("! Unable to check signature")
-                Timber.e(e)
-                return false
-            }
-        }
-
         val newBoot = installDir.getChildFile("new-boot.img")
         if (!useRootDir) {
             // Create output files before hand
@@ -364,34 +497,15 @@ abstract class MagiskInstallImpl protected constructor(
             "cd $installDir",
             "KEEPFORCEENCRYPT=${Config.keepEnc} " +
             "KEEPVERITY=${Config.keepVerity} " +
-            "PATCHVBMETAFLAG=${Config.patchVbmeta} " +
+            "PATCHVBMETAFLAG=${Info.patchBootVbmeta} " +
             "RECOVERYMODE=${Config.recovery} " +
-            "SYSTEM_ROOT=${Info.isSAR} " +
+            "LEGACYSAR=${Info.legacySAR} " +
             "sh boot_patch.sh $srcBoot")
+        val isSuccess = cmds.sh().isSuccess
 
-        if (!cmds.sh().isSuccess)
-            return false
+        shell.newJob().add("./magiskboot cleanup", "cd /").exec()
 
-        val job = shell.newJob().add("./magiskboot cleanup", "cd /")
-
-        if (isSigned) {
-            console.add("- Signing boot image with verity keys")
-            val signed = File.createTempFile("signed", ".img", context.cacheDir)
-            try {
-                val src = newBoot.newInputStream().buffered()
-                val out = signed.outputStream().buffered()
-                withStreams(src, out) { _, _ ->
-                    SignBoot.doSignature(null, null, src, out, "/boot")
-                }
-            } catch (e: IOException) {
-                console.add("! Unable to sign image")
-                Timber.e(e)
-                return false
-            }
-            job.add("cat $signed > $newBoot", "rm -f $signed")
-        }
-        job.exec()
-        return true
+        return isSuccess
     }
 
     private fun flashBoot() = "direct_install $installDir $srcBoot".sh().isSuccess
@@ -413,6 +527,7 @@ abstract class MagiskInstallImpl protected constructor(
         return true
     }
 
+    private fun Array<String>.eq() = shell.newJob().add(*this).to(console, logs).enqueue()
     private fun String.sh() = shell.newJob().add(this).to(console, logs).exec()
     private fun Array<String>.sh() = shell.newJob().add(*this).to(console, logs).exec()
     private fun String.fsh() = ShellUtils.fastCmd(shell, this)

app/src/main/java/com/topjohnwu/magisk/core/utils/BiometricHelper.kt

@@ -1,59 +0,0 @@
-package com.topjohnwu.magisk.core.utils
-
-import androidx.biometric.BiometricManager
-import androidx.biometric.BiometricPrompt
-import androidx.core.content.ContextCompat
-import androidx.fragment.app.FragmentActivity
-import com.topjohnwu.magisk.R
-import com.topjohnwu.magisk.core.Config
-import com.topjohnwu.magisk.core.di.AppContext
-
-object BiometricHelper {
-
-    private val mgr by lazy { BiometricManager.from(AppContext) }
-
-    val isSupported get() = when (mgr.canAuthenticate()) {
-        BiometricManager.BIOMETRIC_SUCCESS -> true
-        else -> false
-    }
-
-    val isEnabled: Boolean get() {
-        val enabled = Config.suBiometric
-        if (enabled && !isSupported) {
-            Config.suBiometric = false
-            return false
-        }
-        return enabled
-    }
-
-    fun authenticate(
-        activity: FragmentActivity,
-        onError: () -> Unit = {},
-        onSuccess: () -> Unit): BiometricPrompt {
-        val prompt = BiometricPrompt(activity,
-            ContextCompat.getMainExecutor(activity),
-            object : BiometricPrompt.AuthenticationCallback() {
-                override fun onAuthenticationError(errorCode: Int, errString: CharSequence) {
-                    onError()
-                }
-
-                override fun onAuthenticationFailed() {
-                    onError()
-                }
-
-                override fun onAuthenticationSucceeded(result: BiometricPrompt.AuthenticationResult) {
-                    onSuccess()
-                }
-            }
-        )
-        val info = BiometricPrompt.PromptInfo.Builder()
-            .setConfirmationRequired(true)
-            .setDeviceCredentialAllowed(false)
-            .setTitle(activity.getString(R.string.authenticate))
-            .setNegativeButtonText(activity.getString(android.R.string.cancel))
-            .build()
-        prompt.authenticate(info)
-        return prompt
-    }
-
-}

app/src/main/java/com/topjohnwu/magisk/core/utils/MediaStoreUtils.kt

@@ -102,6 +102,8 @@ object MediaStoreUtils {
 
     fun Uri.outputStream() = cr.openOutputStream(this, "rwt") ?: throw FileNotFoundException()
 
+    fun Uri.fileDescriptor(mode: String) = cr.openFileDescriptor(this, mode) ?: throw FileNotFoundException()
+
     val Uri.displayName: String get() {
         if (scheme == "file") {
             // Simple uri wrapper over file, directly get file name

app/src/main/java/com/topjohnwu/magisk/core/utils/NetworkObserver.kt

@@ -14,14 +14,10 @@ import androidx.core.content.getSystemService
 import androidx.lifecycle.DefaultLifecycleObserver
 import androidx.lifecycle.LifecycleOwner
 import androidx.lifecycle.ProcessLifecycleOwner
+import com.topjohnwu.magisk.core.Info
 import com.topjohnwu.magisk.core.ktx.registerRuntimeReceiver
 
-typealias ConnectionCallback = (Boolean) -> Unit
-
-class NetworkObserver(
-    context: Context,
-    private val callback: ConnectionCallback
-): DefaultLifecycleObserver {
+class NetworkObserver(context: Context): DefaultLifecycleObserver {
     private val manager = context.getSystemService<ConnectivityManager>()!!
 
     private val networkCallback = object : ConnectivityManager.NetworkCallback() {
@@ -29,11 +25,11 @@ class NetworkObserver(
 
         override fun onAvailable(network: Network) {
             activeList.add(network)
-            callback(true)
+            postValue(true)
         }
         override fun onLost(network: Network) {
             activeList.remove(network)
-            callback(!activeList.isEmpty())
+            postValue(!activeList.isEmpty())
         }
     }
 
@@ -45,7 +41,7 @@ class NetworkObserver(
         }
         override fun onReceive(context: Context, intent: Intent) {
             if (context.isIdleMode()) {
-                callback(false)
+                postValue(false)
             } else {
                 postCurrentState()
             }
@@ -67,13 +63,18 @@ class NetworkObserver(
     }
 
     private fun postCurrentState() {
-        callback(manager.getNetworkCapabilities(manager.activeNetwork)
+        postValue(manager.getNetworkCapabilities(manager.activeNetwork)
             ?.hasCapability(NetworkCapabilities.NET_CAPABILITY_VALIDATED) ?: false)
     }
 
+    private fun postValue(b: Boolean) {
+        Info.remote = Info.EMPTY_REMOTE
+        Info.isConnected.postValue(b)
+    }
+
     companion object {
-        fun observe(context: Context, callback: ConnectionCallback): NetworkObserver {
-            return NetworkObserver(context, callback).apply { postCurrentState() }
+        fun init(context: Context): NetworkObserver {
+            return NetworkObserver(context).apply { postCurrentState() }
         }
     }
 }

app/src/main/java/com/topjohnwu/magisk/core/utils/ProcessLifecycle.java

@@ -0,0 +1,15 @@
+package com.topjohnwu.magisk.core.utils;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+import androidx.lifecycle.LifecycleDispatcher;
+import androidx.lifecycle.ProcessLifecycleOwner;
+
+// Use Java to bypass Kotlin internal visibility modifier
+public class ProcessLifecycle {
+    public static void init(@NonNull Context context) {
+        LifecycleDispatcher.init(context);
+        ProcessLifecycleOwner.init$lifecycle_process_release(context);
+    }
+}

app/src/main/java/com/topjohnwu/magisk/core/utils/RequestAuthentication.kt

@@ -0,0 +1,17 @@
+package com.topjohnwu.magisk.core.utils
+
+import android.app.Activity
+import android.app.KeyguardManager
+import android.content.Context
+import android.content.Intent
+import androidx.activity.result.contract.ActivityResultContract
+
+class RequestAuthentication: ActivityResultContract<Unit, Boolean>() {
+
+    override fun createIntent(context: Context, input: Unit) =
+        context.getSystemService(KeyguardManager::class.java)
+            .createConfirmDeviceCredentialIntent(null, null)
+
+    override fun parseResult(resultCode: Int, intent: Intent?) =
+        resultCode == Activity.RESULT_OK
+}

app/src/main/java/com/topjohnwu/magisk/core/utils/ShellInit.kt

@@ -73,17 +73,17 @@ class ShellInit : Shell.Initializer() {
         fun getVar(name: String) = fastCmd("echo \$$name")
         fun getBool(name: String) = getVar(name).toBoolean()
 
-        Info.isSAR = getBool("SYSTEM_ROOT")
+        Info.isSAR = getBool("SYSTEM_AS_ROOT")
         Info.ramdisk = getBool("RAMDISKEXIST")
-        Info.vbmeta = getBool("VBMETAEXIST")
         Info.isAB = getBool("ISAB")
         Info.crypto = getVar("CRYPTOTYPE")
+        Info.patchBootVbmeta = getBool("PATCHVBMETAFLAG")
+        Info.legacySAR = getBool("LEGACYSAR")
 
         // Default presets
         Config.recovery = getBool("RECOVERYMODE")
         Config.keepVerity = getBool("KEEPVERITY")
         Config.keepEnc = getBool("KEEPFORCEENCRYPT")
-        Config.patchVbmeta = getBool("PATCHVBMETAFLAG")
 
         return true
     }

app/src/main/java/com/topjohnwu/magisk/events/BiometricEvent.kt

@@ -1,38 +0,0 @@
-package com.topjohnwu.magisk.events
-
-import com.topjohnwu.magisk.arch.ActivityExecutor
-import com.topjohnwu.magisk.arch.UIActivity
-import com.topjohnwu.magisk.arch.ViewEvent
-import com.topjohnwu.magisk.core.utils.BiometricHelper
-
-class BiometricEvent(
-    builder: Builder.() -> Unit
-) : ViewEvent(), ActivityExecutor {
-
-    private var listenerOnFailure: () -> Unit = {}
-    private var listenerOnSuccess: () -> Unit = {}
-
-    init {
-        builder(Builder())
-    }
-
-    override fun invoke(activity: UIActivity<*>) {
-        BiometricHelper.authenticate(
-            activity,
-            onError = listenerOnFailure,
-            onSuccess = listenerOnSuccess
-        )
-    }
-
-    inner class Builder internal constructor() {
-
-        fun onFailure(listener: () -> Unit) {
-            listenerOnFailure = listener
-        }
-
-        fun onSuccess(listener: () -> Unit) {
-            listenerOnSuccess = listener
-        }
-    }
-
-}

app/src/main/java/com/topjohnwu/magisk/events/ViewEvents.kt

@@ -51,6 +51,16 @@ class RecreateEvent : ViewEvent(), ActivityExecutor {
     }
 }
 
+class AuthEvent(
+    private val callback: () -> Unit
+) : ViewEvent(), ActivityExecutor {
+
+    override fun invoke(activity: UIActivity<*>) {
+        activity.authenticateCallback = { if (it) callback() }
+        activity.requestAuthenticate.launch(Unit)
+    }
+}
+
 class GetContentEvent(
     private val type: String,
     private val callback: ContentResultCallback

app/src/main/java/com/topjohnwu/magisk/signing/CryptoUtils.java

@@ -1,115 +0,0 @@
-package com.topjohnwu.magisk.signing;
-
-import org.bouncycastle.asn1.ASN1InputStream;
-import org.bouncycastle.asn1.ASN1ObjectIdentifier;
-import org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers;
-import org.bouncycastle.asn1.pkcs.PrivateKeyInfo;
-import org.bouncycastle.asn1.x509.AlgorithmIdentifier;
-import org.bouncycastle.asn1.x9.X9ObjectIdentifiers;
-
-import java.io.ByteArrayInputStream;
-import java.io.IOException;
-import java.io.InputStream;
-import java.security.GeneralSecurityException;
-import java.security.Key;
-import java.security.KeyFactory;
-import java.security.PrivateKey;
-import java.security.PublicKey;
-import java.security.cert.CertificateFactory;
-import java.security.cert.X509Certificate;
-import java.security.spec.ECPrivateKeySpec;
-import java.security.spec.ECPublicKeySpec;
-import java.security.spec.InvalidKeySpecException;
-import java.security.spec.PKCS8EncodedKeySpec;
-import java.util.HashMap;
-import java.util.Map;
-
-public class CryptoUtils {
-
-    static final Map<String, String> ID_TO_ALG;
-    static final Map<String, String> ALG_TO_ID;
-
-    static {
-        ID_TO_ALG = new HashMap<>();
-        ALG_TO_ID = new HashMap<>();
-        ID_TO_ALG.put(X9ObjectIdentifiers.ecdsa_with_SHA256.getId(), "SHA256withECDSA");
-        ID_TO_ALG.put(X9ObjectIdentifiers.ecdsa_with_SHA384.getId(), "SHA384withECDSA");
-        ID_TO_ALG.put(X9ObjectIdentifiers.ecdsa_with_SHA512.getId(), "SHA512withECDSA");
-        ID_TO_ALG.put(PKCSObjectIdentifiers.sha1WithRSAEncryption.getId(), "SHA1withRSA");
-        ID_TO_ALG.put(PKCSObjectIdentifiers.sha256WithRSAEncryption.getId(), "SHA256withRSA");
-        ID_TO_ALG.put(PKCSObjectIdentifiers.sha512WithRSAEncryption.getId(), "SHA512withRSA");
-        ALG_TO_ID.put("SHA256withECDSA", X9ObjectIdentifiers.ecdsa_with_SHA256.getId());
-        ALG_TO_ID.put("SHA384withECDSA", X9ObjectIdentifiers.ecdsa_with_SHA384.getId());
-        ALG_TO_ID.put("SHA512withECDSA", X9ObjectIdentifiers.ecdsa_with_SHA512.getId());
-        ALG_TO_ID.put("SHA1withRSA", PKCSObjectIdentifiers.sha1WithRSAEncryption.getId());
-        ALG_TO_ID.put("SHA256withRSA", PKCSObjectIdentifiers.sha256WithRSAEncryption.getId());
-        ALG_TO_ID.put("SHA512withRSA", PKCSObjectIdentifiers.sha512WithRSAEncryption.getId());
-    }
-
-    static String getSignatureAlgorithm(Key key) throws Exception {
-        if ("EC".equals(key.getAlgorithm())) {
-            int curveSize;
-            KeyFactory factory = KeyFactory.getInstance("EC");
-            if (key instanceof PublicKey) {
-                ECPublicKeySpec spec = factory.getKeySpec(key, ECPublicKeySpec.class);
-                curveSize = spec.getParams().getCurve().getField().getFieldSize();
-            } else if (key instanceof PrivateKey) {
-                ECPrivateKeySpec spec = factory.getKeySpec(key, ECPrivateKeySpec.class);
-                curveSize = spec.getParams().getCurve().getField().getFieldSize();
-            } else {
-                throw new InvalidKeySpecException();
-            }
-            if (curveSize <= 256) {
-                return "SHA256withECDSA";
-            } else if (curveSize <= 384) {
-                return "SHA384withECDSA";
-            } else {
-                return "SHA512withECDSA";
-            }
-        } else if ("RSA".equals(key.getAlgorithm())) {
-            return "SHA256withRSA";
-        } else {
-            throw new IllegalArgumentException("Unsupported key type " + key.getAlgorithm());
-        }
-    }
-
-    static AlgorithmIdentifier getSignatureAlgorithmIdentifier(Key key) throws Exception {
-        String id = ALG_TO_ID.get(getSignatureAlgorithm(key));
-        if (id == null) {
-            throw new IllegalArgumentException("Unsupported key type " + key.getAlgorithm());
-        }
-        return new AlgorithmIdentifier(new ASN1ObjectIdentifier(id));
-    }
-
-    public static X509Certificate readCertificate(InputStream input)
-            throws IOException, GeneralSecurityException {
-        try {
-            CertificateFactory cf = CertificateFactory.getInstance("X.509");
-            return (X509Certificate) cf.generateCertificate(input);
-        } finally {
-            input.close();
-        }
-    }
-
-    /** Read a PKCS#8 format private key. */
-    public static PrivateKey readPrivateKey(InputStream input)
-            throws IOException, GeneralSecurityException {
-        try {
-            ByteArrayStream buf = new ByteArrayStream();
-            buf.readFrom(input);
-            byte[] bytes = buf.toByteArray();
-            /* Check to see if this is in an EncryptedPrivateKeyInfo structure. */
-            PKCS8EncodedKeySpec spec = new PKCS8EncodedKeySpec(bytes);
-            /*
-             * Now it's in a PKCS#8 PrivateKeyInfo structure. Read its Algorithm
-             * OID and use that to construct a KeyFactory.
-             */
-            ASN1InputStream bIn = new ASN1InputStream(new ByteArrayInputStream(spec.getEncoded()));
-            PrivateKeyInfo pki = PrivateKeyInfo.getInstance(bIn.readObject());
-            String algOid = pki.getPrivateKeyAlgorithm().getAlgorithm().getId();
-            return KeyFactory.getInstance(algOid).generatePrivate(spec);
-        } finally {
-            input.close();
-        }
-    }
-}

app/src/main/java/com/topjohnwu/magisk/signing/SignBoot.java

@@ -1,382 +0,0 @@
-package com.topjohnwu.magisk.signing;
-
-import androidx.annotation.NonNull;
-import androidx.annotation.Nullable;
-
-import org.bouncycastle.asn1.ASN1Encodable;
-import org.bouncycastle.asn1.ASN1EncodableVector;
-import org.bouncycastle.asn1.ASN1InputStream;
-import org.bouncycastle.asn1.ASN1Integer;
-import org.bouncycastle.asn1.ASN1Object;
-import org.bouncycastle.asn1.ASN1ObjectIdentifier;
-import org.bouncycastle.asn1.ASN1Primitive;
-import org.bouncycastle.asn1.ASN1Sequence;
-import org.bouncycastle.asn1.DEROctetString;
-import org.bouncycastle.asn1.DERPrintableString;
-import org.bouncycastle.asn1.DERSequence;
-import org.bouncycastle.asn1.x509.AlgorithmIdentifier;
-
-import java.io.ByteArrayInputStream;
-import java.io.FileInputStream;
-import java.io.FilterInputStream;
-import java.io.IOException;
-import java.io.InputStream;
-import java.io.OutputStream;
-import java.nio.ByteBuffer;
-import java.nio.ByteOrder;
-import java.security.PrivateKey;
-import java.security.PublicKey;
-import java.security.Signature;
-import java.security.cert.CertificateEncodingException;
-import java.security.cert.CertificateFactory;
-import java.security.cert.X509Certificate;
-import java.util.Arrays;
-
-public class SignBoot {
-
-    private static final int BOOT_IMAGE_HEADER_V1_RECOVERY_DTBO_SIZE_OFFSET = 1632;
-    private static final int BOOT_IMAGE_HEADER_V2_DTB_SIZE_OFFSET = 1648;
-
-    // Arbitrary maximum header version value; when greater assume the field is dt/extra size
-    private static final int BOOT_IMAGE_HEADER_VERSION_MAXIMUM = 8;
-
-    // Maximum header size byte value to read (currently the bootimg minimum page size)
-    private static final int BOOT_IMAGE_HEADER_SIZE_MAXIMUM = 2048;
-
-    private static class PushBackRWStream extends FilterInputStream {
-        private OutputStream out;
-        private int pos = 0;
-        private byte[] backBuf;
-
-        PushBackRWStream(InputStream in, OutputStream o) {
-            super(in);
-            out = o;
-        }
-
-        @Override
-        public int read() throws IOException {
-            int b;
-            if (backBuf != null && backBuf.length > pos) {
-                b = backBuf[pos++];
-            } else {
-                b = super.read();
-                out.write(b);
-            }
-            return b;
-        }
-
-        @Override
-        public int read(byte[] bytes, int off, int len) throws IOException {
-            int read = 0;
-            if (backBuf != null && backBuf.length > pos) {
-                read = Math.min(len, backBuf.length - pos);
-                System.arraycopy(backBuf, pos, bytes, off, read);
-                pos += read;
-                off += read;
-                len -= read;
-            }
-            if (len > 0) {
-                int ar = super.read(bytes, off, len);
-                read += ar;
-                out.write(bytes, off, ar);
-            }
-            return read;
-        }
-
-        void unread(byte[] buf) {
-            backBuf = buf;
-        }
-    }
-
-    private static int fullRead(InputStream in, byte[] b) throws IOException {
-        return fullRead(in, b, 0, b.length);
-    }
-
-    private static int fullRead(InputStream in, byte[] b, int off, int len) throws IOException {
-        int n = 0;
-        while (n < len) {
-            int count = in.read(b, off + n, len - n);
-            if (count <= 0)
-                break;
-            n += count;
-        }
-        return n;
-    }
-
-    public static boolean doSignature(
-            @Nullable X509Certificate cert, @Nullable PrivateKey key,
-            @NonNull InputStream imgIn, @NonNull OutputStream imgOut, @NonNull String target
-    ) {
-        try {
-            PushBackRWStream in = new PushBackRWStream(imgIn, imgOut);
-            byte[] hdr = new byte[BOOT_IMAGE_HEADER_SIZE_MAXIMUM];
-            // First read the header
-            fullRead(in, hdr);
-            int signableSize = getSignableImageSize(hdr);
-            // Unread header
-            in.unread(hdr);
-            BootSignature bootsig = new BootSignature(target, signableSize);
-            if (cert == null) {
-                cert = CryptoUtils.readCertificate(
-                        new ByteArrayInputStream(KeyData.verityCert()));
-            }
-            bootsig.setCertificate(cert);
-            if (key == null) {
-                key = CryptoUtils.readPrivateKey(
-                        new ByteArrayInputStream(KeyData.verityKey()));
-            }
-            byte[] sig = bootsig.sign(key, in, signableSize);
-            bootsig.setSignature(sig, CryptoUtils.getSignatureAlgorithmIdentifier(key));
-            byte[] encoded_bootsig = bootsig.getEncoded();
-            imgOut.write(encoded_bootsig);
-            imgOut.flush();
-            return true;
-        } catch (Exception e) {
-            e.printStackTrace();
-            return false;
-        }
-    }
-
-    public static boolean verifySignature(InputStream imgIn, X509Certificate cert) {
-        try {
-            // Read the header for size
-            byte[] hdr = new byte[BOOT_IMAGE_HEADER_SIZE_MAXIMUM];
-            if (fullRead(imgIn, hdr) != hdr.length) {
-                System.err.println("Unable to read image header");
-                return false;
-            }
-            int signableSize = getSignableImageSize(hdr);
-
-            // Read the rest of the image
-            byte[] rawImg = Arrays.copyOf(hdr, signableSize);
-            int remain = signableSize - hdr.length;
-            if (fullRead(imgIn, rawImg, hdr.length, remain) != remain) {
-                System.err.println("Unable to read image");
-                return false;
-            }
-
-            // Read footer, which contains the signature
-            byte[] signature = new byte[4096];
-            if (imgIn.read(signature) == -1 || Arrays.equals(signature, new byte [signature.length])) {
-                System.err.println("Invalid image: not signed");
-                return false;
-            }
-
-            BootSignature bootsig = new BootSignature(signature);
-            if (cert != null) {
-                bootsig.setCertificate(cert);
-            }
-            if (bootsig.verify(rawImg, signableSize)) {
-                System.err.println("Signature is VALID");
-                return true;
-            } else {
-                System.err.println("Signature is INVALID");
-            }
-        } catch (Exception e) {
-            e.printStackTrace();
-            return false;
-        }
-        return false;
-    }
-
-    public static int getSignableImageSize(byte[] data) throws Exception {
-        if (!Arrays.equals(Arrays.copyOfRange(data, 0, 8),
-                "ANDROID!".getBytes("US-ASCII"))) {
-            throw new IllegalArgumentException("Invalid image header: missing magic");
-        }
-        ByteBuffer image = ByteBuffer.wrap(data);
-        image.order(ByteOrder.LITTLE_ENDIAN);
-        image.getLong(); // magic
-        int kernelSize = image.getInt();
-        image.getInt(); // kernel_addr
-        int ramdskSize = image.getInt();
-        image.getInt(); // ramdisk_addr
-        int secondSize = image.getInt();
-        image.getLong(); // second_addr + tags_addr
-        int pageSize = image.getInt();
-        if (pageSize >= 0x02000000) {
-            throw new IllegalArgumentException("Invalid image header: PXA header detected");
-        }
-        int length = pageSize // include the page aligned image header
-                + ((kernelSize + pageSize - 1) / pageSize) * pageSize
-                + ((ramdskSize + pageSize - 1) / pageSize) * pageSize
-                + ((secondSize + pageSize - 1) / pageSize) * pageSize;
-        int headerVersion = image.getInt(); // boot image header version or dt/extra size
-        if (headerVersion > 0 && headerVersion < BOOT_IMAGE_HEADER_VERSION_MAXIMUM) {
-            image.position(BOOT_IMAGE_HEADER_V1_RECOVERY_DTBO_SIZE_OFFSET);
-            int recoveryDtboLength = image.getInt();
-            length += ((recoveryDtboLength + pageSize - 1) / pageSize) * pageSize;
-            image.getLong(); // recovery_dtbo address
-            int headerSize = image.getInt();
-            if (headerVersion == 2) {
-                image.position(BOOT_IMAGE_HEADER_V2_DTB_SIZE_OFFSET);
-                int dtbLength = image.getInt();
-                length += ((dtbLength + pageSize - 1) / pageSize) * pageSize;
-                image.getLong(); // dtb address
-            }
-            if (image.position() != headerSize) {
-                throw new IllegalArgumentException("Invalid image header: invalid header length");
-            }
-        } else {
-            // headerVersion is 0 or actually dt/extra size in this case
-            length += ((headerVersion + pageSize - 1) / pageSize) * pageSize;
-        }
-        length = ((length + pageSize - 1) / pageSize) * pageSize;
-        if (length <= 0) {
-            throw new IllegalArgumentException("Invalid image header: invalid length");
-        }
-        return length;
-    }
-
-    static class BootSignature extends ASN1Object {
-        private ASN1Integer formatVersion;
-        private ASN1Encodable certificate;
-        private AlgorithmIdentifier algId;
-        private DERPrintableString target;
-        private ASN1Integer length;
-        private DEROctetString signature;
-        private PublicKey publicKey;
-        private static final int FORMAT_VERSION = 1;
-
-        /**
-         * Initializes the object for signing an image file
-         * @param target Target name, included in the signed data
-         * @param length Length of the image, included in the signed data
-         */
-        public BootSignature(String target, int length) {
-            this.formatVersion = new ASN1Integer(FORMAT_VERSION);
-            this.target = new DERPrintableString(target);
-            this.length = new ASN1Integer(length);
-        }
-
-        /**
-         * Initializes the object for verifying a signed image file
-         * @param signature Signature footer
-         */
-        public BootSignature(byte[] signature) throws Exception {
-            ASN1InputStream stream = new ASN1InputStream(signature);
-            ASN1Sequence sequence = (ASN1Sequence) stream.readObject();
-            formatVersion = (ASN1Integer) sequence.getObjectAt(0);
-            if (formatVersion.getValue().intValue() != FORMAT_VERSION) {
-                throw new IllegalArgumentException("Unsupported format version");
-            }
-            certificate = sequence.getObjectAt(1);
-            byte[] encoded = ((ASN1Object) certificate).getEncoded();
-            ByteArrayInputStream bis = new ByteArrayInputStream(encoded);
-            CertificateFactory cf = CertificateFactory.getInstance("X.509");
-            X509Certificate c = (X509Certificate) cf.generateCertificate(bis);
-            publicKey = c.getPublicKey();
-            ASN1Sequence algId = (ASN1Sequence) sequence.getObjectAt(2);
-            this.algId = new AlgorithmIdentifier((ASN1ObjectIdentifier) algId.getObjectAt(0));
-            ASN1Sequence attrs = (ASN1Sequence) sequence.getObjectAt(3);
-            target = (DERPrintableString) attrs.getObjectAt(0);
-            length = (ASN1Integer) attrs.getObjectAt(1);
-            this.signature = (DEROctetString) sequence.getObjectAt(4);
-        }
-
-        public ASN1Object getAuthenticatedAttributes() {
-            ASN1EncodableVector attrs = new ASN1EncodableVector();
-            attrs.add(target);
-            attrs.add(length);
-            return new DERSequence(attrs);
-        }
-
-        public byte[] getEncodedAuthenticatedAttributes() throws IOException {
-            return getAuthenticatedAttributes().getEncoded();
-        }
-
-        public void setSignature(byte[] sig, AlgorithmIdentifier algId) {
-            this.algId = algId;
-            signature = new DEROctetString(sig);
-        }
-
-        public void setCertificate(X509Certificate cert)
-                throws CertificateEncodingException, IOException {
-            ASN1InputStream s = new ASN1InputStream(cert.getEncoded());
-            certificate = s.readObject();
-            publicKey = cert.getPublicKey();
-        }
-
-        public byte[] sign(PrivateKey key, InputStream is, int len) throws Exception {
-            Signature signer = Signature.getInstance(CryptoUtils.getSignatureAlgorithm(key));
-            signer.initSign(key);
-            int read;
-            byte buffer[] = new byte[4096];
-            while ((read = is.read(buffer, 0, Math.min(len, buffer.length))) > 0) {
-                signer.update(buffer, 0, read);
-                len -= read;
-            }
-            signer.update(getEncodedAuthenticatedAttributes());
-            return signer.sign();
-        }
-
-        public boolean verify(byte[] image, int length) throws Exception {
-            if (this.length.getValue().intValue() != length) {
-                throw new IllegalArgumentException("Invalid image length");
-            }
-            String algName = CryptoUtils.ID_TO_ALG.get(algId.getAlgorithm().getId());
-            if (algName == null) {
-                throw new IllegalArgumentException("Unsupported algorithm " + algId.getAlgorithm());
-            }
-            Signature verifier = Signature.getInstance(algName);
-            verifier.initVerify(publicKey);
-            verifier.update(image, 0, length);
-            verifier.update(getEncodedAuthenticatedAttributes());
-            return verifier.verify(signature.getOctets());
-        }
-
-        @Override
-        public ASN1Primitive toASN1Primitive() {
-            ASN1EncodableVector v = new ASN1EncodableVector();
-            v.add(formatVersion);
-            v.add(certificate);
-            v.add(algId);
-            v.add(getAuthenticatedAttributes());
-            v.add(signature);
-            return new DERSequence(v);
-        }
-
-    }
-
-    public static void main(String[] args) throws Exception {
-        if (args.length > 0 && "-verify".equals(args[0])) {
-            X509Certificate cert = null;
-            if (args.length >= 2) {
-                // args[1] is the path to a public key certificate
-                cert = CryptoUtils.readCertificate(new FileInputStream(args[1]));
-            }
-            boolean signed = SignBoot.verifySignature(System.in, cert);
-            System.exit(signed ? 0 : 1);
-        } else if (args.length > 0 && "-sign".equals(args[0])) {
-            X509Certificate cert = null;
-            PrivateKey key = null;
-            String name = "/boot";
-
-            if (args.length >= 3) {
-                cert = CryptoUtils.readCertificate(new FileInputStream(args[1]));
-                key = CryptoUtils.readPrivateKey(new FileInputStream(args[2]));
-            }
-            if (args.length == 2) {
-                name = args[1];
-            } else if (args.length >= 4) {
-                name = args[3];
-            }
-
-            boolean result = SignBoot.doSignature(cert, key, System.in, System.out, name);
-            System.exit(result ? 0 : 1);
-        } else {
-            System.err.println(
-                    "BootSigner <actions> [args]\n" +
-                    "Input from stdin, output to stdout\n" +
-                    "\n" +
-                    "Actions:\n" +
-                    "   -verify [x509.pem]\n" +
-                    "      verify image. cert is optional.\n" +
-                    "   -sign [x509.pem] [pk8] [name]\n" +
-                    "      sign image. name and the cert/key pair are optional.\n" +
-                    "      name should be either /boot (default) or /recovery.\n"
-            );
-        }
-    }
-
-}

app/src/main/java/com/topjohnwu/magisk/ui/flash/FlashViewModel.kt

@@ -5,7 +5,7 @@ import androidx.databinding.Bindable
 import androidx.databinding.ObservableArrayList
 import androidx.lifecycle.LiveData
 import androidx.lifecycle.MutableLiveData
-import androidx.lifecycle.Transformations
+import androidx.lifecycle.map
 import androidx.lifecycle.viewModelScope
 import com.topjohnwu.magisk.BR
 import com.topjohnwu.magisk.R
@@ -34,7 +34,7 @@ class FlashViewModel : BaseViewModel() {
 
     private val _state = MutableLiveData(State.FLASHING)
     val state: LiveData<State> get() = _state
-    val flashing = Transformations.map(state) { it == State.FLASHING }
+    val flashing = state.map { it == State.FLASHING }
 
     @get:Bindable
     var showReboot = Info.isRooted

app/src/main/java/com/topjohnwu/magisk/ui/home/DeveloperItem.kt

@@ -24,6 +24,10 @@ private interface RikkaImpl : Dev {
     override val name get() = "RikkaW"
 }
 
+private interface CanyieImpl : Dev {
+    override val name get() = "canyie"
+}
+
 sealed class DeveloperItem : Dev {
 
     abstract val items: List<IconLink>
@@ -61,6 +65,14 @@ sealed class DeveloperItem : Dev {
                 object : IconLink.Github.User(), RikkaImpl {}
             )
     }
+
+    object Canyie : DeveloperItem(), CanyieImpl {
+        override val items =
+            listOf<IconLink>(
+                object : IconLink.Twitter() { override val name = "canyie2977" },
+                object : IconLink.Github.User(), CanyieImpl {}
+            )
+    }
 }
 
 sealed class IconLink : RvItem() {

app/src/main/java/com/topjohnwu/magisk/ui/install/InstallViewModel.kt

@@ -37,8 +37,7 @@ import java.io.IOException
 class InstallViewModel(svc: NetworkService, markwon: Markwon) : BaseViewModel() {
 
     val isRooted get() = Info.isRooted
-    val hideVbmeta = Info.vbmeta || Info.isSamsung || Info.isAB
-    val skipOptions = Info.isEmulator || (Info.isSAR && !Info.isFDE && hideVbmeta && Info.ramdisk)
+    val skipOptions = Info.isEmulator || (Info.isSAR && !Info.isFDE && Info.ramdisk)
     val noSecondSlot = !isRooted || !Info.isAB || Info.isEmulator
 
     @get:Bindable
@@ -105,7 +104,6 @@ class InstallViewModel(svc: NetworkService, markwon: Markwon) : BaseViewModel()
             step,
             Config.keepVerity,
             Config.keepEnc,
-            Config.patchVbmeta,
             Config.recovery
         ))
     }
@@ -116,7 +114,6 @@ class InstallViewModel(svc: NetworkService, markwon: Markwon) : BaseViewModel()
             step = it.step
             Config.keepVerity = it.keepVerity
             Config.keepEnc = it.keepEnc
-            Config.patchVbmeta = it.patchVbmeta
             Config.recovery = it.recovery
         }
     }
@@ -137,7 +134,6 @@ class InstallViewModel(svc: NetworkService, markwon: Markwon) : BaseViewModel()
         val step: Int,
         val keepVerity: Boolean,
         val keepEnc: Boolean,
-        val patchVbmeta: Boolean,
         val recovery: Boolean,
     ) : Parcelable
 

app/src/main/java/com/topjohnwu/magisk/ui/log/SuLogRvItem.kt

@@ -3,6 +3,7 @@ package com.topjohnwu.magisk.ui.log
 import androidx.databinding.Bindable
 import com.topjohnwu.magisk.BR
 import com.topjohnwu.magisk.R
+import com.topjohnwu.magisk.core.di.AppContext
 import com.topjohnwu.magisk.core.ktx.timeDateFormat
 import com.topjohnwu.magisk.core.ktx.toTime
 import com.topjohnwu.magisk.core.model.su.SuLog
@@ -14,7 +15,7 @@ class SuLogRvItem(val log: SuLog) : ObservableRvItem(), DiffItem<SuLogRvItem> {
 
     override val layoutRes = R.layout.item_log_access_md2
 
-    val date = log.time.toTime(timeDateFormat)
+    val info = genInfo()
 
     @get:Bindable
     var isTop = false
@@ -25,4 +26,28 @@ class SuLogRvItem(val log: SuLog) : ObservableRvItem(), DiffItem<SuLogRvItem> {
         set(value) = set(value, field, { field = it }, BR.bottom)
 
     override fun itemSameAs(other: SuLogRvItem) = log.appName == other.log.appName
+
+    private fun genInfo(): String {
+        val res = AppContext.resources
+        val sb = StringBuilder()
+        val date = log.time.toTime(timeDateFormat)
+        val toUid = res.getString(R.string.target_uid, log.toUid)
+        val fromPid = res.getString(R.string.pid, log.fromPid)
+        sb.append("$date\n$toUid  $fromPid")
+        if (log.target != -1) {
+            val pid = if (log.target == 0) "magiskd" else log.target.toString()
+            val target = res.getString(R.string.target_pid, pid)
+            sb.append("  $target")
+        }
+        if (log.context.isNotEmpty()) {
+            val context = res.getString(R.string.selinux_context, log.context)
+            sb.append("\n$context")
+        }
+        if (log.gids.isNotEmpty()) {
+            val gids = res.getString(R.string.supp_group, log.gids)
+            sb.append("\n$gids")
+        }
+        sb.append("\n${log.command}")
+        return sb.toString()
+    }
 }

app/src/main/java/com/topjohnwu/magisk/ui/settings/SettingsItems.kt

@@ -14,7 +14,6 @@ import com.topjohnwu.magisk.core.Const
 import com.topjohnwu.magisk.core.Info
 import com.topjohnwu.magisk.core.ktx.activity
 import com.topjohnwu.magisk.core.tasks.HideAPK
-import com.topjohnwu.magisk.core.utils.BiometricHelper
 import com.topjohnwu.magisk.core.utils.MediaStoreUtils
 import com.topjohnwu.magisk.core.utils.availableLocales
 import com.topjohnwu.magisk.core.utils.currentLocale
@@ -283,17 +282,15 @@ object Tapjack : BaseSettingsItem.Toggle() {
     override var value by Config::suTapjack
 }
 
-object Biometrics : BaseSettingsItem.Toggle() {
-    override val title = R.string.settings_su_biometric_title.asText()
-    override var description = R.string.settings_su_biometric_summary.asText()
-    override var value by Config::suBiometric
+object Authentication : BaseSettingsItem.Toggle() {
+    override val title = R.string.settings_su_auth_title.asText()
+    override var description = R.string.settings_su_auth_summary.asText()
+    override var value by Config::userAuth
 
     override fun refresh() {
-        isEnabled = BiometricHelper.isSupported
+        isEnabled = Info.isDeviceSecure
         if (!isEnabled) {
-            value = false
-            description = R.string.no_biometric.asText()
-            notifyPropertyChanged(BR.checked)
+            description = R.string.settings_su_auth_insecure.asText()
         }
     }
 }

app/src/main/java/com/topjohnwu/magisk/ui/settings/SettingsViewModel.kt

@@ -18,7 +18,7 @@ import com.topjohnwu.magisk.core.ktx.toast
 import com.topjohnwu.magisk.core.tasks.HideAPK
 import com.topjohnwu.magisk.databinding.bindExtra
 import com.topjohnwu.magisk.events.AddHomeIconEvent
-import com.topjohnwu.magisk.events.BiometricEvent
+import com.topjohnwu.magisk.events.AuthEvent
 import com.topjohnwu.magisk.events.SnackbarEvent
 import com.topjohnwu.superuser.Shell
 import kotlinx.coroutines.launch
@@ -72,7 +72,7 @@ class SettingsViewModel : BaseViewModel(), BaseSettingsItem.Handler {
         if (Info.showSuperUser) {
             list.addAll(listOf(
                 Superuser,
-                Tapjack, Biometrics, AccessMode, MultiuserMode, MountNamespaceMode,
+                Tapjack, Authentication, AccessMode, MultiuserMode, MountNamespaceMode,
                 AutomaticResponse, RequestTimeout, SUNotification
             ))
             if (Build.VERSION.SDK_INT < Build.VERSION_CODES.O) {
@@ -92,7 +92,7 @@ class SettingsViewModel : BaseViewModel(), BaseSettingsItem.Handler {
         when (item) {
             DownloadPath -> withExternalRW(andThen)
             UpdateChecker -> withPostNotificationPermission(andThen)
-            Biometrics -> authenticate(andThen)
+            Authentication -> AuthEvent(andThen).publish()
             Theme -> SettingsFragmentDirections.actionSettingsFragmentToThemeFragment().navigate()
             DenyListConfig -> SettingsFragmentDirections.actionSettingsFragmentToDenyFragment().navigate()
             SystemlessHosts -> createHosts()
@@ -119,13 +119,6 @@ class SettingsViewModel : BaseViewModel(), BaseSettingsItem.Handler {
         }
     }
 
-    private fun authenticate(callback: () -> Unit) {
-        BiometricEvent {
-            // allow the change on success
-            onSuccess { callback() }
-        }.publish()
-    }
-
     private fun createHosts() {
         Shell.cmd("add_hosts_module").submit {
             AppContext.toast(R.string.settings_hosts_toast, Toast.LENGTH_SHORT)

app/src/main/java/com/topjohnwu/magisk/ui/superuser/PolicyRvItem.kt

@@ -73,6 +73,8 @@ class PolicyRvItem(
         viewModel.deletePressed(this)
     }
 
-    override fun itemSameAs(other: PolicyRvItem) = item.uid == other.item.uid
+    override fun itemSameAs(other: PolicyRvItem) = packageName == other.packageName
+
+    override fun contentSameAs(other: PolicyRvItem) = item.policy == other.item.policy
 
 }

app/src/main/java/com/topjohnwu/magisk/ui/superuser/SuperuserViewModel.kt

@@ -10,16 +10,20 @@ import androidx.lifecycle.viewModelScope
 import com.topjohnwu.magisk.BR
 import com.topjohnwu.magisk.R
 import com.topjohnwu.magisk.arch.AsyncLoadViewModel
+import com.topjohnwu.magisk.core.Config
 import com.topjohnwu.magisk.core.Info
 import com.topjohnwu.magisk.core.data.magiskdb.PolicyDao
 import com.topjohnwu.magisk.core.di.AppContext
 import com.topjohnwu.magisk.core.ktx.getLabel
 import com.topjohnwu.magisk.core.model.su.SuPolicy
-import com.topjohnwu.magisk.core.utils.BiometricHelper
 import com.topjohnwu.magisk.core.utils.currentLocale
-import com.topjohnwu.magisk.databinding.*
+import com.topjohnwu.magisk.databinding.MergeObservableList
+import com.topjohnwu.magisk.databinding.RvItem
+import com.topjohnwu.magisk.databinding.bindExtra
+import com.topjohnwu.magisk.databinding.diffList
+import com.topjohnwu.magisk.databinding.set
 import com.topjohnwu.magisk.dialog.SuperuserRevokeDialog
-import com.topjohnwu.magisk.events.BiometricEvent
+import com.topjohnwu.magisk.events.AuthEvent
 import com.topjohnwu.magisk.events.SnackbarEvent
 import com.topjohnwu.magisk.utils.asText
 import com.topjohnwu.magisk.view.TextItem
@@ -106,17 +110,15 @@ class SuperuserViewModel(
         fun updateState() = viewModelScope.launch {
             db.delete(item.item.uid)
             val list = ArrayList(itemsPolicies)
-            list.removeAll { it.itemSameAs(item) }
+            list.removeAll { it.item.uid == item.item.uid }
             itemsPolicies.update(list)
             if (list.isEmpty() && itemsHelpers.isEmpty()) {
                 itemsHelpers.add(itemNoData)
             }
         }
 
-        if (BiometricHelper.isEnabled) {
-            BiometricEvent {
-                onSuccess { updateState() }
-            }.publish()
+        if (Config.userAuth) {
+            AuthEvent { updateState() }.publish()
         } else {
             SuperuserRevokeDialog(item.title) { updateState() }.show()
         }
@@ -155,24 +157,21 @@ class SuperuserViewModel(
     }
 
     fun togglePolicy(item: PolicyRvItem, enable: Boolean) {
+        val items = itemsPolicies.filter { it.item.uid == item.item.uid }
         fun updateState() {
             viewModelScope.launch {
                 val res = if (enable) R.string.su_snack_grant else R.string.su_snack_deny
                 item.item.policy = if (enable) SuPolicy.ALLOW else SuPolicy.DENY
                 db.update(item.item)
-                itemsPolicies.forEach {
-                    if (it.item.uid == item.item.uid) {
-                        it.notifyPropertyChanged(BR.enabled)
-                    }
+                items.forEach {
+                    it.notifyPropertyChanged(BR.enabled)
                 }
                 SnackbarEvent(res.asText(item.appName)).publish()
             }
         }
 
-        if (BiometricHelper.isEnabled) {
-            BiometricEvent {
-                onSuccess { updateState() }
-            }.publish()
+        if (Config.userAuth) {
+            AuthEvent { updateState() }.publish()
         } else {
             updateState()
         }

app/src/main/java/com/topjohnwu/magisk/ui/surequest/SuRequestViewModel.kt

@@ -27,12 +27,12 @@ import com.topjohnwu.magisk.core.ktx.toast
 import com.topjohnwu.magisk.core.model.su.SuPolicy.Companion.ALLOW
 import com.topjohnwu.magisk.core.model.su.SuPolicy.Companion.DENY
 import com.topjohnwu.magisk.core.su.SuRequestHandler
-import com.topjohnwu.magisk.core.utils.BiometricHelper
 import com.topjohnwu.magisk.databinding.set
-import com.topjohnwu.magisk.events.BiometricEvent
+import com.topjohnwu.magisk.events.AuthEvent
 import com.topjohnwu.magisk.events.DieEvent
 import com.topjohnwu.magisk.events.ShowUIEvent
 import com.topjohnwu.magisk.utils.TextHolder
+import kotlinx.coroutines.Dispatchers
 import kotlinx.coroutines.launch
 import java.util.concurrent.TimeUnit.SECONDS
 
@@ -70,17 +70,14 @@ class SuRequestViewModel(
     }
 
     private val handler = SuRequestHandler(AppContext.packageManager, policyDB)
-    private lateinit var timer: CountDownTimer
+    private val millis = SECONDS.toMillis(Config.suDefaultTimeout.toLong())
+    private var timer = SuTimer(millis, 1000)
     private var initialized = false
 
     fun grantPressed() {
         cancelTimer()
-        if (BiometricHelper.isEnabled) {
-            BiometricEvent {
-                onSuccess {
-                    respond(ALLOW)
-                }
-            }.publish()
+        if (Config.userAuth) {
+            AuthEvent { respond(ALLOW) }.publish()
         } else {
             respond(ALLOW)
         }
@@ -96,7 +93,7 @@ class SuRequestViewModel(
     }
 
     fun handleRequest(intent: Intent) {
-        viewModelScope.launch {
+        viewModelScope.launch(Dispatchers.Default) {
             if (handler.start(intent))
                 showDialog()
             else
@@ -125,8 +122,7 @@ class SuRequestViewModel(
         selectedItemPosition = timeoutPrefs.getInt(packageName, 0)
 
         // Set timer
-        val millis = SECONDS.toMillis(Config.suDefaultTimeout.toLong())
-        timer = SuTimer(millis, 1000).apply { start() }
+        timer.start()
 
         // Actually show the UI
         ShowUIEvent(if (Config.suTapjack) EmptyAccessibilityDelegate else null).publish()

app/src/main/java/com/topjohnwu/magisk/view/Shortcuts.kt

@@ -31,7 +31,7 @@ object Shortcuts {
         val info = ShortcutInfoCompat.Builder(context, Const.Nav.HOME)
             .setShortLabel(context.getString(R.string.magisk))
             .setIntent(intent)
-            .setIcon(IconCompat.createFromIcon(context, context.getIcon(R.drawable.ic_launcher)))
+            .setIcon(context.getIconCompat(R.drawable.ic_launcher))
             .build()
         ShortcutManagerCompat.requestPinShortcut(context, info, null)
     }
@@ -47,6 +47,18 @@ object Shortcuts {
         }
     }
 
+    private fun Context.getIconCompat(id: Int): IconCompat {
+        return if (isRunningAsStub) {
+            val bitmap = getBitmap(id)
+            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O)
+                IconCompat.createWithAdaptiveBitmap(bitmap)
+            else
+                IconCompat.createWithBitmap(bitmap)
+        } else {
+            IconCompat.createWithResource(this, id)
+        }
+    }
+
     @RequiresApi(api = 25)
     private fun getShortCuts(context: Context): List<ShortcutInfo> {
         val intent = context.packageManager.getLaunchIntentForPackage(context.packageName)

app/src/main/res/layout/fragment_home_md2.xml

@@ -242,6 +242,14 @@
                         android:layout_height="wrap_content"
                         android:layout_marginTop="@dimen/l_50" />
 
+                    <include
+                        item="@{DeveloperItem.Canyie.INSTANCE}"
+                        layout="@layout/item_developer"
+                        viewModel="@{viewModel}"
+                        android:layout_width="wrap_content"
+                        android:layout_height="wrap_content"
+                        android:layout_marginTop="@dimen/l_50" />
+
                 </LinearLayout>
 
             </com.google.android.material.card.MaterialCardView>

app/src/main/res/layout/fragment_install_md2.xml

@@ -108,15 +108,6 @@
                             android:text="@string/keep_force_encryption"
                             app:tint="?colorPrimary" />
 
-                        <CheckBox
-                            style="@style/WidgetFoundation.Checkbox"
-                            gone="@{viewModel.hideVbmeta}"
-                            android:layout_width="match_parent"
-                            android:layout_height="wrap_content"
-                            android:checked="@={Config.patchVbmeta}"
-                            android:text="@string/patch_vbmeta"
-                            app:tint="?colorPrimary" />
-
                         <CheckBox
                             style="@style/WidgetFoundation.Checkbox"
                             gone="@{Info.ramdisk}"

app/src/main/res/layout/include_log_superuser.xml

@@ -29,8 +29,13 @@
             tools:listitem="@layout/item_log_access_md2"
             tools:paddingTop="24dp" />
 
+        <ProgressBar
+            style="@style/WidgetFoundation.ProgressBar.Indeterminate"
+            goneUnless="@{viewModel.loading}"
+            android:layout_marginTop="@dimen/l1" />
+
         <FrameLayout
-            gone="@{!viewModel.items.empty}"
+            gone="@{viewModel.loading || !viewModel.items.empty}"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
             android:layout_gravity="center">

app/src/main/res/layout/item_log_access_md2.xml

@@ -25,9 +25,9 @@
 
         <include
             android:id="@+id/log_track_container"
-            bullet="@{item.log.action ? R.drawable.ic_check_md2 : R.drawable.ic_close_md2}"
+            bullet="@{item.log.action == 2 ? R.drawable.ic_check_md2 : R.drawable.ic_close_md2}"
             isBottom="@{item.isBottom}"
-            isSelected="@{!item.log.action}"
+            isSelected="@{item.log.action != 2}"
             isTop="@{item.isTop}"
             layout="@layout/item_log_track_md2"
             android:layout_width="wrap_content"
@@ -54,48 +54,22 @@
                 android:text="@{item.log.appName}"
                 android:textAppearance="@style/AppearanceFoundation.Body"
                 android:textStyle="bold"
-                app:layout_constraintBottom_toTopOf="@+id/log_date"
+                app:layout_constraintBottom_toTopOf="@+id/log_info"
                 app:layout_constraintEnd_toEndOf="parent"
                 app:layout_constraintStart_toStartOf="parent"
                 app:layout_constraintTop_toTopOf="parent"
                 tools:text="@string/magisk" />
 
             <TextView
-                android:id="@+id/log_date"
+                android:id="@+id/log_info"
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
-                android:text="@{item.date}"
+                android:text="@{item.info}"
                 android:textAppearance="@style/AppearanceFoundation.Caption.Variant"
-                app:layout_constraintBottom_toTopOf="@+id/log_app_details"
+                app:layout_constraintBottom_toBottomOf="parent"
                 app:layout_constraintTop_toBottomOf="@+id/log_app_name"
                 app:layout_constraintEnd_toEndOf="parent"
-                app:layout_constraintStart_toStartOf="parent"
-                tools:text="06:00 PM, 10 Oct 2019" />
-
-            <TextView
-                android:id="@+id/log_app_details"
-                android:layout_width="0dp"
-                android:layout_height="wrap_content"
-                android:text="@{String.format(`%s  %s`, @string/pid(item.log.fromPid), @string/target_uid(item.log.toUid))}"
-                android:textAppearance="@style/AppearanceFoundation.Caption.Variant"
-                app:layout_constraintBottom_toTopOf="@id/log_command"
-                app:layout_constraintEnd_toEndOf="parent"
-                app:layout_constraintStart_toStartOf="parent"
-                app:layout_constraintTop_toBottomOf="@+id/log_date"
-                tools:text="PID: 7196  Target UID: 0" />
-
-            <TextView
-                android:id="@+id/log_command"
-                android:layout_width="0dp"
-                android:layout_height="wrap_content"
-                android:fontFamily="monospace"
-                android:text="@{item.log.command}"
-                android:textAppearance="@style/AppearanceFoundation.Caption.Variant"
-                app:layout_constraintEnd_toEndOf="parent"
-                app:layout_constraintStart_toStartOf="parent"
-                app:layout_constraintTop_toBottomOf="@+id/log_app_details"
-                app:layout_constraintBottom_toBottomOf="parent"
-                tools:text="/system/bin/sh" />
+                app:layout_constraintStart_toStartOf="parent" />
 
         </androidx.constraintlayout.widget.ConstraintLayout>
 

app/src/main/res/layout/item_module_md2.xml

@@ -24,11 +24,15 @@
         android:layout_height="wrap_content">
 
         <com.google.android.material.card.MaterialCardView
+            android:id="@+id/module"
             style="@style/WidgetFoundation.Card"
             isEnabled="@{!item.removed &amp;&amp; item.enabled &amp;&amp; !item.showNotice}"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
+            android:clickable="@{!item.removed &amp;&amp; item.enabled &amp;&amp; !item.showNotice}"
+            android:focusable="@{!item.removed &amp;&amp; item.enabled &amp;&amp; !item.showNotice}"
             android:nextFocusRight="@id/module_indicator"
+            android:onClick="@{() -> item.setEnabled(!item.enabled)}"
             app:cardBackgroundColor="@color/color_card_background_color_selector"
             tools:isEnabled="false"
             tools:layout_gravity="center"
@@ -95,6 +99,7 @@
                     android:layout_height="wrap_content"
                     android:layout_marginEnd="@dimen/l_50"
                     android:checked="@={item.enabled}"
+                    android:nextFocusLeft="@id/module"
                     app:layout_constraintBottom_toBottomOf="@+id/module_version_author"
                     app:layout_constraintEnd_toEndOf="parent"
                     app:layout_constraintHorizontal_bias="1"

app/src/main/res/layout/item_policy_md2.xml

@@ -17,10 +17,13 @@
         android:layout_gravity="center">
 
         <com.google.android.material.card.MaterialCardView
+            android:id="@+id/policy"
             style="@style/WidgetFoundation.Card"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
             android:alpha="@{item.enabled ? 1f : .5f}"
+            android:focusable="true"
+            android:nextFocusRight="@id/policy_indicator"
             android:onClick="@{() -> item.toggleExpand()}">
 
             <LinearLayout
@@ -35,10 +38,10 @@
                     <ImageView
                         android:id="@+id/policy_app_icon"
                         style="@style/WidgetFoundation.Image"
+                        srcCompat="@{item.icon}"
                         android:layout_marginStart="@dimen/l1"
                         android:layout_marginTop="@dimen/l1"
                         android:layout_marginBottom="@dimen/l1"
-                        srcCompat="@{item.icon}"
                         app:layout_constraintBottom_toBottomOf="parent"
                         app:layout_constraintStart_toStartOf="parent"
                         app:layout_constraintTop_toTopOf="parent"
@@ -86,8 +89,9 @@
                         android:id="@+id/policy_indicator"
                         android:layout_width="wrap_content"
                         android:layout_height="wrap_content"
-                        android:checked="@={item.enabled}"
                         android:layout_marginEnd="@dimen/l1"
+                        android:checked="@={item.enabled}"
+                        android:nextFocusLeft="@id/policy"
                         app:layout_constraintBottom_toBottomOf="parent"
                         app:layout_constraintEnd_toEndOf="parent"
                         app:layout_constraintTop_toTopOf="parent" />
@@ -96,20 +100,20 @@
 
                 <LinearLayout
                     android:id="@+id/policy_expand_container"
-                    android:orientation="horizontal"
                     gone="@{!item.isExpanded}"
                     android:layout_width="match_parent"
                     android:layout_height="match_parent"
                     android:background="?colorSurfaceVariant"
+                    android:orientation="horizontal"
                     tools:visibility="visible">
 
                     <Button
                         android:id="@+id/policy_notify"
                         style="@style/WidgetFoundation.Button.Text"
                         isSelected="@{item.shouldNotify}"
-                        android:layout_weight="1"
                         android:layout_width="0dp"
                         android:layout_height="wrap_content"
+                        android:layout_weight="1"
                         android:minHeight="24dp"
                         android:onClick="@{() -> item.toggleNotify()}"
                         android:text="@string/superuser_toggle_notification"
@@ -131,9 +135,9 @@
                         android:id="@+id/policy_log"
                         style="@style/WidgetFoundation.Button.Text"
                         isSelected="@{item.shouldLog}"
-                        android:layout_weight="1"
                         android:layout_width="0dp"
                         android:layout_height="wrap_content"
+                        android:layout_weight="1"
                         android:minHeight="24dp"
                         android:onClick="@{() -> item.toggleLog()}"
                         android:text="@string/logs"
@@ -154,9 +158,9 @@
                     <Button
                         android:id="@+id/policy_delete"
                         style="@style/WidgetFoundation.Button.Text"
-                        android:layout_weight="1"
                         android:layout_width="0dp"
                         android:layout_height="wrap_content"
+                        android:layout_weight="1"
                         android:minHeight="24dp"
                         android:onClick="@{() -> item.revoke()}"
                         android:text="@string/superuser_toggle_revoke"

app/src/main/res/raw/manager.sh

@@ -154,7 +154,7 @@ check_boot_ramdisk() {
   $ISAB && return 0
 
   # If we are using legacy SAR, but not A/B, assume we do not have ramdisk
-  if grep ' / ' /proc/mounts | grep -q '/dev/root'; then
+  if $LEGACYSAR; then
     # Override recovery mode to true
     RECOVERYMODE=true
     return 1
@@ -193,24 +193,25 @@ check_encryption() {
 mount_partitions() {
   [ "$(getprop ro.build.ab_update)" = "true" ] && SLOT=$(getprop ro.boot.slot_suffix)
   # Check whether non rootfs root dir exists
-  SYSTEM_ROOT=false
-  grep ' / ' /proc/mounts | grep -qv 'rootfs' && SYSTEM_ROOT=true
+  SYSTEM_AS_ROOT=false
+  grep ' / ' /proc/mounts | grep -qv 'rootfs' && SYSTEM_AS_ROOT=true
+
+  LEGACYSAR=false
+  grep ' / ' /proc/mounts | grep -q '/dev/root' && LEGACYSAR=true
 }
 
 get_flags() {
-  KEEPVERITY=$SYSTEM_ROOT
+  KEEPVERITY=$SYSTEM_AS_ROOT
   ISENCRYPTED=false
   [ "$(getprop ro.crypto.state)" = "encrypted" ] && ISENCRYPTED=true
   KEEPFORCEENCRYPT=$ISENCRYPTED
-  # Although this most certainly won't work without root, keep it just in case
-  if [ -e /dev/block/by-name/vbmeta_a ] || [ -e /dev/block/by-name/vbmeta ]; then
-    VBMETAEXIST=true
+  if [ -n "$(getprop ro.boot.vbmeta.device)" -o -n "$(getprop ro.boot.vbmeta.size)" ]; then
+    PATCHVBMETAFLAG=false
+  elif getprop ro.product.ab_ota_partitions | grep -wq vbmeta; then
+    PATCHVBMETAFLAG=false
   else
-    VBMETAEXIST=false
+    PATCHVBMETAFLAG=true
   fi
-  # Preset PATCHVBMETAFLAG to false in the non-root case
-  PATCHVBMETAFLAG=false
-  # Make sure RECOVERYMODE has value
   [ -z $RECOVERYMODE ] && RECOVERYMODE=false
 }
 

app/src/main/res/values-ar/strings.xml

@@ -142,9 +142,6 @@
     <string name="superuser_notification">إشعارات طلبات الروت</string>
     <string name="settings_su_reauth_title">إعادة المصادقة بعد الترقية</string>
     <string name="settings_su_reauth_summary">أعد مصادقة صلاحيات الروت بعد إجراء ترقيات للتطبيق</string>
-    <string name="settings_su_biometric_title">تفعيل التحقق بالبصمة</string>
-    <string name="settings_su_biometric_summary">تحقق إضافي بالبصمة لطلبات الروت </string>
-    <string name="no_biometric">جهازك غير مدعوم، أو أنك لم تضبّط البصماتَ بجهازك</string>
     <string name="settings_customization">تخصيص</string>
 
     <string name="multiuser_mode">نمط مستخدمين متعددين</string>

app/src/main/res/values-ast/strings.xml

@@ -155,9 +155,6 @@
     <string name="settings_su_reauth_summary">Vuelve pidir los permisos de superusuariu dempués d\'anovar les aplicaciones</string>
     <string name="settings_su_tapjack_title">Proteición escontra\'l tapjacking</string>
     <string name="settings_su_tapjack_summary">El diálogu de concesión de permisos de superusuariu nun respuende a la entrada mentanto lu torgue otra ventana o superposición</string>
-    <string name="settings_su_biometric_title">Autenticación biométrica</string>
-    <string name="settings_su_biometric_summary">Usa l\'autenticación biométrica pa permitir les solicitúes de superusuariu</string>
-    <string name="no_biometric">El preséu nun ye compatible o nun s\'activaron los axustes biométricos</string>
     <string name="settings_customization">Personalización</string>
     <string name="setting_add_shortcut_summary">Amiesta un atayu a la pantalla d\'aniciu en casu de que\'l nome y l\'iconu seyan difíciles de reconocer darréu d\'anubrir l\'aplicación</string>
     <string name="settings_doh_title">DNS per HTTPS</string>

app/src/main/res/values-az/strings.xml

@@ -165,9 +165,6 @@
     <string name="settings_su_reauth_summary">Tətbiqləri yüksəltdikdən sonra Superuser icazəsi istə</string>
     <string name="settings_su_tapjack_title">Tapjack Qoruması</string>
     <string name="settings_su_tapjack_summary">Superuser icazə pəncərəsi digər pəncərələr tərəfindən əngəlləndikdə heçbir girişə cavab verməyəcək</string>
-    <string name="settings_su_biometric_title">Biometrik İcazə</string>
-    <string name="settings_su_biometric_summary">Superuser istəkləri üçün biometrik icazədən istifadə et</string>
-    <string name="no_biometric">Cihaz ya dəstəklənmir ya da biometrik ayarlar yoxdur</string>
     <string name="settings_customization">Özəlləşdirmə</string>
     <string name="setting_add_shortcut_summary">Tətbiqi gizlətdikdən sonra tapmaq çətin olmasın deyə ana ekrana qısayol əlavə et</string>
     <string name="settings_doh_title">HTTPS əvəzinə DNS</string>

app/src/main/res/values-be/strings.xml

@@ -142,9 +142,6 @@
     <string name="settings_su_reauth_summary">Паўторна запытваць правы суперкарыстальніка пасля абнаўлення праграмы</string>
     <string name="settings_su_tapjack_title">Уключыць абарону ад перахоплівання ўводу</string>
     <string name="settings_su_tapjack_summary">Дыялог выдачы правоў суперкарыстальніка не будзе адказваць на ўвод, калі па-над ім знаходзяцца іншыя вокны</string>
-    <string name="settings_su_biometric_title">Уключыць біяметрычную аўтэнтыфікацыю</string>
-    <string name="settings_su_biometric_summary">Выкарыстанне біяметрычнай аўтэнтыфікацыі для запытаў правоў суперкарыстальніка</string>
-    <string name="no_biometric">Не падтрымліваецца прыладай альбо не ўключана ў наладах</string>
     <string name="settings_customization">Персаналізацыя</string>
     <string name="setting_add_shortcut_summary">Дадаць на хатні экран прыгожы цэтлік на той выпадак, калі пасля хавання праграмы будзе цяжка разглядзець значок і назву</string>
     <string name="settings_doh_title">DNS паверх HTTPS</string>

app/src/main/res/values-bg/strings.xml

@@ -1,79 +1,154 @@
 <resources>
 
-    <!--Welcome Activity-->
+    <!--Sections-->
     <string name="modules">Модули</string>
     <string name="superuser">Superuser</string>
     <string name="logs">Дневник</string>
     <string name="settings">Настройки</string>
     <string name="install">Инсталиране</string>
+    <string name="section_home">Начало</string>
+    <string name="section_theme">Теми</string>
+    <string name="denylist">Черен списък</string>
 
-    <!--Status Fragment-->
-    <string name="invalid_update_channel">Невалиден канал за актуализации</string>
-
-    <!--Install Fragment-->
-    <string name="keep_force_encryption">Запазване на наложеното криптиране</string>
-    <string name="keep_dm_verity">Запазване на AVB 2.0/dm-verity</string>
-    <string name="uninstall_magisk_title">Деинсталиране на Magisk</string>
-    <string name="uninstall_magisk_msg">Всички модули ще бъдат изключени/премахнати. Руут достъпът ще бъде премахнат и е възможно криптиране на данните Ви.</string>
-    <string name="update">Актуализация</string>
-
-    <!--Module Fragment-->
-    <string name="no_info_provided">(Не е представена информация)</string>
-    <string name="reboot_recovery">Рестартиране в режима за възстановяване</string>
-    <string name="reboot_bootloader">Рестартиране в буутлоудъра</string>
-    <string name="reboot_download">Рестартиране в даунлоуд режима</string>
-
-    <!--Repo Fragment-->
-    <string name="update_available">Налице е актуализация.</string>
-    <string name="home_installed_version">Инсталирани</string>
-
-    <!--Log Fragment-->
-    <string name="menuSaveLog">Запазване на доклад</string>
-    <string name="menuClearLog">Изчистване на дневника</string>
-    <string name="logs_cleared">Успешно изчистване на дневника.</string>
-
-    <!--About Activity-->
+    <!--Home-->
+    <string name="no_connection">Няма връзка</string>
     <string name="app_changelog">Списък с промени</string>
+    <string name="loading">Зареждане…</string>
+    <string name="update">Обновяване</string>
+    <string name="not_available">Липсва</string>
+    <string name="hide">Скриване</string>
+    <string name="home_package">Пакет</string>
+    <string name="home_app_title">Приложение</string>
 
-    <!--Toasts, Dialogs-->
-    <string name="repo_install_title">Инсталиране на %1$s %2$s(%3$d)</string>
-    <string name="download">Изтегляне</string>
-    <string name="reboot">Рестартиране</string>
-    <string name="magisk_update_title">Достъпно е издание на Magisk.</string>
-    <string name="release_notes">Бележки</string>
-    <string name="manager_download_install">Докоснете за изтегляне и инсталиране.</string>
-    <string name="update_channel">Актуализации на Magisk</string>
-    <string name="flashing">Инсталиране</string>
-    <string name="open_link_failed_toast">Не е намерено приложение за отваряне на препратката.</string>
-    <string name="direct_install">Директно инсталиране (Препоръчва се.)</string>
-    <string name="install_inactive_slot">Инсталиране на неактивен слот (След OTA)</string>
-    <string name="install_inactive_slot_msg">Вашето устройство НАЛОЖИТЕЛНО ще стартира текущия неактивен слот при следващото рестартиране.\nИзползвайте тази опция само след като приключи инсталирането на OTA.\nПродължаване?</string>
-    .
-    <string name="complete_uninstall">Пълно деинсталиране</string>
-    <string name="restore_img">Възстановяване на образи</string>
-    <string name="restore_img_msg">Възстановяване…</string>
-    <string name="restore_done">Възстановяването е успешно!</string>
-    <string name="restore_fail">Не е налице архив на стоковия образ!</string>
-    <string name="setup_fail">Първоначалната настройка е неуспешна.</string>
-    <string name="env_fix_title">Изисква допълнително настройване</string>
-    <string name="setup_title">Допълнително надстройване</string>
-    <string name="setup_msg">Надстройването на средата е в ход…</string>
-    <string name="download_file_error">Грешка при изтегляне на файла.</string>
+    <string name="home_notice_content">Изтегляйте Magisk САМО от официалната страница в GitHub. Файловете от неизвестни източници могат да бъдат зловредни!</string>
+    <string name="home_support_title">Подкрепете ни</string>
+    <string name="home_follow_title">Последвайте ни</string>
+    <string name="home_item_source">Изходен код</string>
+    <string name="home_support_content">Magisk е, и винаги ще бъде, безплатен и с отворен изходен код. Въпреки това можете да покажете подкрапата си чрез дарение.</string>
+    <string name="home_installed_version">Инсталиранo</string>
+    <string name="home_latest_version">Последно</string>
+    <string name="invalid_update_channel">Каналът за обновяване е недействителен</string>
+    <string name="uninstall_magisk_title">Премахване на Magisk</string>
+    <string name="uninstall_magisk_msg">Всички модули ще бъдат изключени/премахнати. Достъпът до правата на суперпотребителя ще бъде премахнат!\nАко вътрешното хранилище е разшифровано с Magisk, то ще бъде шифровано отново!</string>
 
-    <!--Settings Activity -->
+    <!--Install-->
+    <string name="keep_force_encryption">Запазване на наложеното шифроване</string>
+    <string name="keep_dm_verity">Запазване на AVB 2.0/dm-verity</string>
+    <string name="patch_vbmeta">Закърпване на vbmeta в образ на boot</string>
+    <string name="recovery_mode">Режим за възстановяване</string>
+    <string name="install_options_title">Настройки</string>
+    <string name="install_method_title">Метод</string>
+    <string name="install_next">Напред</string>
+    <string name="install_start">Начало</string>
+    <string name="manager_download_install">За да изтеглите и инсталирате, докоснете</string>
+    <string name="direct_install">Директно инсталиране (препоръчително)</string>
+    <string name="install_inactive_slot">Инсталиране в неактивен дял (след OTA)</string>
+    <string name="install_inactive_slot_msg">Устройство ЗАДЪЛЖИТЕЛНО ще зареди от текущия неактивен дял при следващия рестарт.\nИзползвайте само при приключила инсталация на OTA.\nПродължаване?</string>
+    <string name="setup_title">Допълнителни настройки</string>
+    <string name="select_patch_file">Избор и закърпване на файл</string>
+    <string name="patch_file_msg">Изберете образ (*.img) или архив на ODIN (*.tar)</string>
+    <string name="reboot_delay_toast">Рестартиране след 5 секунди…</string>
+    <string name="flash_screen_title">Инсталиране</string>
+
+    <!--Superuser-->
+    <string name="su_request_title">Запитване за достъп</string>
+    <string name="touch_filtered_warning">Тъй като друго приложение закрива заявката за достъп до правата на суперпотребителя, Magisk не може да потвърди вашия отговор</string>
+    <string name="deny">Отказ</string>
+    <string name="prompt">Запитване</string>
+    <string name="grant">Разрешаване</string>
+    <string name="su_warning">Дава пълен достъп до устройството.\nОткажете, ако не сте сигурни.</string>
+    <string name="forever">Винаги</string>
+    <string name="once">Веднъж</string>
+    <string name="tenmin">10 мин.</string>
+    <string name="twentymin">20 мин.</string>
+    <string name="thirtymin">30 мин.</string>
+    <string name="sixtymin">60 мин.</string>
+    <string name="su_allow_toast">%1$s получи достъп до суперпотребителя</string>
+    <string name="su_deny_toast">%1$s не получи достъп до суперпотребителя</string>
+    <string name="su_snack_grant">Достъп до суперпотребителя е разрешен на %1$s</string>
+    <string name="su_snack_deny">Достъп до суперпотребителя е отказан на %1$s</string>
+    <string name="su_snack_notif_on">Известията за %1$s са включени</string>
+    <string name="su_snack_notif_off">Известията за %1$s са изключени</string>
+    <string name="su_snack_log_on">Записването в дневника за %1$s е включено</string>
+    <string name="su_snack_log_off">Записването в дневника за %1$s е изключено</string>
+    <string name="su_revoke_title">Оттегляне?</string>
+    <string name="su_revoke_msg">Потвърждавате ли оттегляне на достъпа на %1$s?</string>
+    <string name="toast">Тост</string>
+    <string name="none">Без</string>
+
+    <string name="superuser_toggle_notification">Известия</string>
+    <string name="superuser_toggle_revoke">Оттегляне</string>
+    <string name="superuser_policy_none">За момента няма приложения, които да са поискали достъп до правата на суперпотребителя.</string>
+
+    <!--Logs-->
+    <string name="log_data_none">Дневникът е празен</string>
+    <string name="log_data_magisk_none">Дневникът на Magisk е празен</string>
+    <string name="menuSaveLog">Запазване на дневника</string>
+    <string name="menuClearLog">Изчистване на дневника</string>
+    <string name="logs_cleared">Дневникът е изчистен</string>
+    <string name="pid">PID: %1$d</string>
+    <string name="target_uid">Целеви UID: %1$d</string>
+
+    <!--SafetyNet-->
+
+    <!--MagiskHide-->
+    <string name="show_system_app">Показване на системни приложения</string>
+    <string name="show_os_app">Показване на приложения на ОС</string>
+    <string name="hide_filter_hint">Филтрира по име</string>
+    <string name="hide_search">Търсене</string>
+
+    <!--Module-->
+    <string name="no_info_provided">(Липсва информация)</string>
+    <string name="reboot_userspace">Бърз рестарт</string>
+    <string name="reboot_recovery">Рестарт в режим за възстановяване</string>
+    <string name="reboot_bootloader">Рестарт в bootloader</string>
+    <string name="reboot_download">Рестарт в режим за изтегляне</string>
+    <string name="reboot_edl">Рестарт в EDL</string>
+    <string name="module_version_author">%1$s от %2$s</string>
+    <string name="module_state_remove">Премахване</string>
+    <string name="module_state_restore">Възстановяване</string>
+    <string name="module_action_install_external">Инсталиране от хранилището</string>
+    <string name="update_available">Има обновяване</string>
+    <string name="suspend_text_riru">Модулът е спрян, защото е включено: %1$s</string>
+    <string name="suspend_text_zygisk">Модулът е спрян, защото не е включено: %1$s</string>
+    <string name="zygisk_module_unloaded">Поради несъвместимост модулът Zygisk не е зареден</string>
+    <string name="module_empty">Не са инсталирани модули</string>
+    <string name="confirm_install">Инсталиране на модула %1$s?</string>
+    <string name="confirm_install_title">Подвърждаване на инсталиране</string>
+
+    <!--Settings-->
+    <string name="settings_dark_mode_title">Режим на темата</string>
+    <string name="settings_dark_mode_message">Изберете режима, който ви отива най-много!</string>
+    <string name="settings_dark_mode_light">Винаги светло</string>
+    <string name="settings_dark_mode_system">Според системата</string>
+    <string name="settings_dark_mode_dark">Винаги тъмно</string>
+    <string name="settings_download_path_title">Папка за изтегляния</string>
+    <string name="settings_download_path_message">Файловете ще бъдат запазвани в %1$s</string>
+    <string name="settings_hide_app_title">Скриване на приложението на Magisk</string>
+    <string name="settings_hide_app_summary">Инсталира междинно приложение с произволен идестификатор и име</string>
+    <string name="settings_restore_app_title">Възстановяване на приложението на Magisk</string>
+    <string name="settings_restore_app_summary">Показва и възстановява оригиналното приложение</string>
     <string name="language">Език</string>
-    <string name="system_default">(Системен)</string>
-    <string name="settings_check_update_title">Проверка за актуализации</string>
-    <string name="settings_check_update_summary">Периодично проверяване за актуализации във фонов режим.</string>
-    <string name="settings_update_channel_title">Канал за актуализации</string>
+    <string name="system_default">(Според системата)</string>
+    <string name="settings_check_update_title">Проверка за обновяване</string>
+    <string name="settings_check_update_summary">Периодична проверка за обновяване във фонов режим</string>
+    <string name="settings_update_channel_title">Канал за обновяване</string>
     <string name="settings_update_stable">Стабилен</string>
     <string name="settings_update_beta">Бета</string>
     <string name="settings_update_custom">Потребителски</string>
-    <string name="settings_update_custom_msg">Въведете потребителски адрес</string>
-    <string name="settings_hosts_title">Несистемни хостове</string>
-    <string name="settings_hosts_summary">Поддръжка на несистемни хостове за използване на приложения, блокиращи реклами.</string>
-    <string name="settings_hosts_toast">Добавен е модул с несистемни хостове.</string>
-
+    <string name="settings_update_custom_msg">Адрес на потребителски канал</string>
+    <string name="settings_zygisk_summary">Изпълняване на части от Magisk в демон на zygote</string>
+    <string name="settings_denylist_title">Налагане на черен списък</string>
+    <string name="settings_denylist_summary">На процесите в черния списък ще бъдат възстановени всички модификации, направени от Magisk</string>
+    <string name="settings_denylist_error">Изизква %1$s да бъде включено</string>
+    <string name="settings_denylist_config_title">Настройка на черен списък</string>
+    <string name="settings_denylist_config_summary">Изберете процесите, които да бъдат включени в черния списък</string>
+    <string name="settings_hosts_title">Безсистемни хостове</string>
+    <string name="settings_hosts_summary">Поддръжка на безсистемни хостове, ползвани от приложения за спиране на реклами</string>
+    <string name="settings_hosts_toast">Модулът за безсистемни хостове е добавен</string>
+    <string name="settings_app_name_hint">Ново име</string>
+    <string name="settings_app_name_helper">Приложението ще бъде пакетирано с това име</string>
+    <string name="settings_app_name_error">Форматът е недействителен</string>
     <string name="settings_su_app_adb">Приложения и ADB</string>
     <string name="settings_su_app">Само приложения</string>
     <string name="settings_su_adb">Само ADB</string>
@@ -84,55 +159,83 @@
     <string name="settings_su_request_30">30 секунди</string>
     <string name="settings_su_request_45">45 секунди</string>
     <string name="settings_su_request_60">60 секунди</string>
-    <string name="superuser_access">Superuser достъп</string>
+    <string name="superuser_access">Достъп до суперпотребителя</string>
     <string name="auto_response">Автоматичен отговор</string>
     <string name="request_timeout">Време за запитване</string>
-    <string name="superuser_notification">Superuser известие</string>
-    <string name="settings_su_reauth_title">Повторно запитване след актуализация</string>
-    <string name="settings_su_reauth_summary">Повторно запитване за Superuser достъп след актуализация на приложенията.</string>
+    <string name="superuser_notification">Известие за суперпотребителя</string>
+    <string name="settings_su_reauth_title">Повторно запитване след обновяване</string>
+    <string name="settings_su_reauth_summary">Повторно запитване за достъп до правата на суперпотребителя след обновяване на приложения</string>
+    <string name="settings_su_tapjack_title">Предпазване от измамно докосване</string>
+    <string name="settings_su_tapjack_summary">Прозорецът за достъп до суперпотребителя няма да реагира, докато е покрит от друг прозорец или слой</string>
+    <string name="settings_customization">Приспособяване</string>
+    <string name="setting_add_shortcut_summary">Добавя красив пряк път на началния екран ако името или текущата икона на скритото приложение са трудни за разпознаване</string>
+    <string name="settings_doh_title">DNS през HTTPS</string>
+    <string name="settings_doh_description">Заобикаля „отравянето“ на DNS в някои държави</string>
 
-    <string name="multiuser_mode">Потребителски достъп</string>
-    <string name="settings_owner_only">Само собственик</string>
+    <string name="multiuser_mode">Многопотребителски режим</string>
+    <string name="settings_owner_only">Само собственика</string>
     <string name="settings_owner_manage">Управление от страна на собственика</string>
-    <string name="settings_user_independent">Независими потребители</string>
-    <string name="owner_only_summary">Само собственикът има руут достъп.</string>
-    <string name="owner_manage_summary">Само собственикът може да управлява руут достъпа и да получава запитвания за достъп.</string>
-    <string name="user_independent_summary">Всеки потребител има собствени правила за руут достъп.</string>
+    <string name="settings_user_independent">Независимо от потребителя</string>
+    <string name="owner_only_summary">Само собственикът има достъп до суперпотребителя</string>
+    <string name="owner_manage_summary">Само собственикът може да управлява достъпа до суперпотребителя и да получава запитвания за достъп</string>
+    <string name="user_independent_summary">Всеки потребител има собствени правила за достъп до суперпотребителя</string>
 
-    <string name="mount_namespace_mode">Монтиране по именни пространства</string>
-    <string name="settings_ns_global">Глобално</string>
+    <string name="mount_namespace_mode">Монтиране по пространства от имена</string>
+    <string name="settings_ns_global">Общо</string>
     <string name="settings_ns_requester">Наследено</string>
     <string name="settings_ns_isolate">Изолирано</string>
-    <string name="global_summary">Всички сесии с руут достъп използват глобалното именно пространство.</string>
-    <string name="requester_summary">Всички сесии с руут достъп наследяват именното пространство на запитващото приложение.</string>
-    <string name="isolate_summary">Всички сесии с руут достъп имат собствени именни пространства.</string>
+    <string name="global_summary">Всички сесии с достъп до суперпотребителя използват общото пространство от имена</string>
+    <string name="requester_summary">Всички сесии с достъп до суперпотребителя наследяват пространството от имена на запитващото приложение</string>
+    <string name="isolate_summary">Всички сесии с достъп до суперпотребителя получават изолирани пространства от имена</string>
 
-    <!--Superuser-->
-    <string name="su_request_title">Запитване за Superuser достъп</string>
-    <string name="deny">Отказ</string>
-    <string name="prompt">Запитване</string>
-    <string name="grant">Разрешаване</string>
-    <string name="su_warning">Дава пълен достъп до устройството.\Откажете, ако не сте сигурни.</string>
-    <string name="forever">Завинаги</string>
-    <string name="once">Веднъж</string>
-    <string name="tenmin">10 мин</string>
-    <string name="twentymin">20 мин</string>
-    <string name="thirtymin">30 мин</string>
-    <string name="sixtymin">60 мин</string>
-    <string name="su_allow_toast">На %1$s е разрешен Superuser достъп.</string>
-    <string name="su_deny_toast">На %1$s е отказан Superuser достъп.</string>
-    <string name="su_snack_grant">На %1$s е предоставен Superuser достъп.</string>
-    <string name="su_snack_deny">На %1$s е отказан Superuser достъп.</string>
-    <string name="su_snack_notif_on">Известията за %1$s са включени.</string>
-    <string name="su_snack_notif_off">Известията за %1$s са изключени.</string>
-    <string name="su_snack_log_on">Записването в дневника за %1$s е включено.</string>
-    <string name="su_snack_log_off">Записването в дневника за %1$s е изключено.</string>
-    <string name="su_revoke_title">Оттегляне?</string>
-    <string name="su_revoke_msg">Потвърждавате ли оттегляне на достъпа на %1$s?</string>
-    <string name="toast">Toast</string>
-    <string name="none">Без</string>
+    <!--Notifications-->
+    <string name="update_channel">Обновяване на Magisk</string>
+    <string name="progress_channel">Известия за напредък</string>
+    <string name="updated_channel">Завършено обновяване</string>
+    <string name="download_complete">Завършено изтегляне</string>
+    <string name="download_file_error">Грешка при изтегляне на файл</string>
+    <string name="magisk_update_title">Има обновяване на Magisk!</string>
+    <string name="updated_title">Magisk е обновен</string>
+    <string name="updated_text">За да отворите приложението, докоснете</string>
 
-    <!--Superuser logs-->
-    <string name="target_uid">Целеви UID: %1$d</string>
+    <!--Toasts, Dialogs-->
+    <string name="yes">Да</string>
+    <string name="no">Не</string>
+    <string name="repo_install_title">Инсталиране на %1$s %2$s(%3$d)</string>
+    <string name="download">Изтегляне</string>
+    <string name="reboot">Рестартиране</string>
+    <string name="release_notes">Бележки по изданието</string>
+    <string name="flashing">Инсталиране…</string>
+    <string name="done">Готово!</string>
+    <string name="failure">Грешка!</string>
+    <string name="hide_app_title">Скриване на приложението на Magisk…</string>
+    <string name="open_link_failed_toast">Не е намерено приложение, с което препратката да бъде отворена</string>
+    <string name="complete_uninstall">Премахване</string>
+    <string name="restore_img">Възстановяване на образи</string>
+    <string name="restore_img_msg">Възстановяване…</string>
+    <string name="restore_done">Възстановяването е успешно!</string>
+    <string name="restore_fail">На устройството липсва резервно копие на заводския образ!</string>
+    <string name="setup_fail">Грешка при първоначална настройка</string>
+    <string name="env_fix_title">Необходима е допълнителна настройка</string>
+    <string name="env_fix_msg">За да работи Magisk нормално, устройството се нуждае от допълнителна настройка. Да бъде ли продължено след рестарт?</string>
+    <string name="env_full_fix_msg">За да работи Magisk нормално, е необходимо да бъде инсталиран отново. Преинсталирайте Magisk от приложението, защото режимът за възстановяване не получава необходимата информация за устройството.</string>
+    <string name="setup_msg">Надстройка на средата…</string>
+    <string name="authenticate">Удостоверяване</string>
+    <string name="unsupport_magisk_title">Неподдържано издание на Magisk</string>
+    <string name="unsupport_magisk_msg">Това издание на приложението не поддържа издания на Magisk преди %1$s.\n\nПриложението ще се държи все едно няма инсталиран Magisk. Обновете Magisk възможно най-скоро.</string>
+    <string name="unsupport_general_title">Неочаквано състояние</string>
+    <string name="unsupport_system_app_msg">Приложението не се поддържа да работи като системно. Върнете го като потребителско.</string>
+    <string name="unsupport_other_su_msg">Намерен е двоичен файл „su“, който не е от Magisk. Премахнете всички други решения за достъп до правата на суперпотребителя и/или инсталирайте Magisk отново.</string>
+    <string name="unsupport_external_storage_msg">Magisk е инсталиран във външно хранилище. Преместете приложението във вътрешното хранилище.</string>
+    <string name="unsupport_nonroot_stub_msg">Скритото приложение на Magisk не може да продължи да работи, защото достъпът до правата на суперпотребителя е загубен. Възстановете оригиналното приложение.</string>
+    <string name="unsupport_nonroot_stub_title">@string/settings_restore_app_title</string>
+    <string name="external_rw_permission_denied">За да използвате нази възможност, разрешете достъп до хранилището</string>
+    <string name="post_notifications_denied">За да използвате нази възможност, разрешете достъп до известията</string>
+    <string name="install_unknown_denied">За да използвате тази възможност, разрешете „инсталиране на неизвестни приложения“</string>
+    <string name="add_shortcut_title">Добавяне на пряк път на началния екран</string>
+    <string name="add_shortcut_msg">След скриване на приложението името или икона може да станат трудни за разпознаване. Желаете ли да бъде добаве красив пряк път на началния екран?</string>
+    <string name="app_not_found">Не е намерено приложение, което да извърши действието</string>
+    <string name="reboot_apply_change">Рестартиране за прилагане на промените</string>
+    <string name="restore_app_confirmation">По този начин ще възстановите скритото приложение в първоначалното му състояние. Това ли желаете да бъде направено?</string>
 
 </resources>

app/src/main/res/values-bn/strings.xml

@@ -164,9 +164,6 @@
     <string name="settings_su_reauth_summary">অ্যাপগুলি আপগ্রেড করার পরে আবার সুপার ইউজার অনুমতির জন্য জিজ্ঞাসা করুন</string>
     <string name="settings_su_tapjack_title">ট্যাপজ্যাকিং সুরক্ষা</string>
     <string name="settings_su_tapjack_summary">সুপার ইউজার প্রম্পট ডায়ালগ অন্য কোনো উইন্ডো বা ওভারলে দ্বারা অস্পষ্ট থাকাকালীন ইনপুটটিতে সাড়া দেবে না</string>
-    <string name="settings_su_biometric_title">বায়োমেট্রিক প্রমাণীকরণ</string>
-    <string name="settings_su_biometric_summary">সুপার ইউজার অনুরোধের অনুমতি দিতে বায়োমেট্রিক প্রমাণীকরণ ব্যবহার করুন</string>
-    <string name="no_biometric">অসমর্থিত ডিভাইস বা কোনো বায়োমেট্রিক সেটিংস সক্ষম করা নেই৷</string>
     <string name="settings_customization">কাস্টমাইজেশন</string>
     <string name="setting_add_shortcut_summary">অ্যাপটি লুকানোর পরে নাম এবং আইকন সনাক্ত করা কঠিন হলে হোম স্ক্রিনে একটি সুন্দর শর্টকাট যোগ করুন</string>
     <string name="settings_doh_title">HTTPS এর উপর ডিএনএস</string>

app/src/main/res/values-ca/strings.xml

@@ -152,9 +152,6 @@
     <string name="settings_su_reauth_summary">Demanar permisos de superusuari novament si una aplicació és actualitzada o reinstal·lada</string>
     <string name="settings_su_tapjack_title">Activa la protecció contra \'TapJacking\'</string>
     <string name="settings_su_tapjack_summary">El diàleg per donar permisos de superusuari no respondrà mentre estigui ofuscat per alguna altra finestra o superposició</string>
-    <string name="settings_su_biometric_title">Activar autenticació biomètrica</string>
-    <string name="settings_su_biometric_summary">Utilitza l\'autenticació biomètrica per permetre sol·licituds de superusuari</string>
-    <string name="no_biometric">El dispositiu no suporta o no té establerta configuració biomètrica</string>
     <string name="settings_customization">Personalització</string>
     <string name="setting_add_shortcut_summary">Afegeix una bonica drecera a la pantalla d\'inici en cas que el nom i la icona siguin difícils de reconèixer després d\'amagar l\'aplicació.</string>
     <string name="settings_doh_title">DNS sobre HTTPS</string>

app/src/main/res/values-cs/strings.xml

@@ -7,7 +7,7 @@
     <string name="settings">Nastavení</string>
     <string name="install">Instalovat</string>
     <string name="section_home">Domů</string>
-    <string name="section_theme">Téma</string>
+    <string name="section_theme">Témata</string>
     <string name="denylist">DenyList</string>
 
     <!--Home-->
@@ -52,7 +52,7 @@
 
     <!--Superuser-->
     <string name="su_request_title">Požadavek SuperUser</string>
-    <string name="touch_filtered_warning">Protože aplikace zavírá požadavek SuperUser, Magisk nemůže ověřit Vaši odpověď</string>
+    <string name="touch_filtered_warning">Magisk nemůže ověřit Vaši odpověď, protože aplikace zavírá požadavek SuperUser</string>
     <string name="deny">Zakázat</string>
     <string name="prompt">Zeptat se</string>
     <string name="grant">Povolit</string>
@@ -72,7 +72,7 @@
     <string name="su_snack_log_on">Protokolování %1$s je povoleno</string>
     <string name="su_snack_log_off">Protokolování %1$s je zakázáno</string>
     <string name="su_revoke_title">Smazat?</string>
-    <string name="su_revoke_msg">Chcete smazat protokol k oprávnění pro %1$s?</string>
+    <string name="su_revoke_msg">Potvrzením odeberete %1$s oprávnění SuperUser</string>
     <string name="toast">Text</string>
     <string name="none">Žádné</string>
 
@@ -81,13 +81,16 @@
     <string name="superuser_policy_none">Žádná aplikace nepožádala o oprávnění SuperUser.</string>
 
     <!--Logs-->
-    <string name="log_data_none">Žádné protokoly. Vyzkoušejte nějakou aplikaci vyžadující oprávnění SuperUser.</string>
-    <string name="log_data_magisk_none">Protokoly Magisk jsou prázdné. To je zvláštní!</string>
+    <string name="log_data_none">Nemáte žádné protokoly. Vyzkoušejte nějakou aplikaci vyžadující oprávnění SuperUser</string>
+    <string name="log_data_magisk_none">Protokoly Magisk jsou prázdné. To je zvláštní</string>
     <string name="menuSaveLog">Uložit protokol</string>
     <string name="menuClearLog">Smazat protokol</string>
     <string name="logs_cleared">Protokol byl smazán</string>
     <string name="pid">PID:%1$d</string>
     <string name="target_uid">Cílové UID: %1$d</string>
+    <string name="target_pid">Připojit PID cílového ns: %s</string>
+    <string name="selinux_context">SELinux kontext: %s</string>
+    <string name="supp_group">Sekundární skupina: %s</string>
 
     <!--SafetyNet-->
 
@@ -109,8 +112,8 @@
     <string name="module_state_restore">Obnovit</string>
     <string name="module_action_install_external">Instalace z úložiště</string>
     <string name="update_available">Dostupná aktualizace</string>
-    <string name="suspend_text_riru">Modul pozastaven, protože je povolen %1$s</string>
-    <string name="suspend_text_zygisk">Modul pozastaven, protože %1$s není povoleno</string>
+    <string name="suspend_text_riru">Modul byl pozastaven, protože je povolen %1$s</string>
+    <string name="suspend_text_zygisk">Modul byl pozastaven, protože %1$s není povoleno</string>
     <string name="zygisk_module_unloaded">Modul Zygisk nebyl načten z důvodu nekompatibility</string>
     <string name="module_empty">Není nainstalován žádný modul</string>
     <string name="confirm_install">Instalovat modul %1$s?</string>
@@ -125,29 +128,29 @@
     <string name="settings_download_path_title">Složka pro stahování</string>
     <string name="settings_download_path_message">Soubory budou uloženy do %1$s.</string>
     <string name="settings_hide_app_title">Skrýt aplikaci Magisk</string>
-    <string name="settings_hide_app_summary">Skryjete aplikaci náhodným ID balíčku a vlastním názvem aplikace.</string>
+    <string name="settings_hide_app_summary">Skryje aplikaci náhodným ID balíčku a vlastním názvem aplikace</string>
     <string name="settings_restore_app_title">Obnovit aplikaci Magisk</string>
-    <string name="settings_restore_app_summary">Obnovíte aplikaci zpět do původního APK.</string>
+    <string name="settings_restore_app_summary">Obnoví aplikaci zpět do původního APK</string>
     <string name="language">Jazyk</string>
     <string name="system_default">(výchozí podle systému)</string>
     <string name="settings_check_update_title">Zkontrolovat aktualizace</string>
-    <string name="settings_check_update_summary">Povolíte pravidelnou kontrolu aktualizace na pozadí.</string>
+    <string name="settings_check_update_summary">Povolí pravidelnou kontrolu aktualizace na pozadí</string>
     <string name="settings_update_channel_title">Kanál aktualizace</string>
     <string name="settings_update_stable">Stabilní</string>
     <string name="settings_update_beta">Beta</string>
     <string name="settings_update_custom">Vlastní</string>
     <string name="settings_update_custom_msg">Vložte vlastní URL</string>
-    <string name="settings_zygisk_summary">Spusťte části Magisku v Zygote daemon</string>
+    <string name="settings_zygisk_summary">Spustí části Magisku v démonu Zygote</string>
     <string name="settings_denylist_title">Vynutit DenyList</string>
-    <string name="settings_denylist_summary">Na procesy v DenyListu nebudou aplikovány žádné změny nebo modifikace</string>
+    <string name="settings_denylist_summary">Na procesy v Denylistu nebudou aplikovány žádné změny, nebo modifikace způsobené Magiskem</string>
     <string name="settings_denylist_error">Tato funkce vyžaduje povolení %1$s</string>
     <string name="settings_denylist_config_title">Nastavit DenyList</string>
-    <string name="settings_denylist_config_summary">Vyberte procesy, které mají být zahrnuty do DenyListu</string>
-    <string name="settings_hosts_title">Nesystémový hostitel</string>
-    <string name="settings_hosts_summary">Přidáte modul pro podporu nesystémových hostitelů v aplikaci AdBlock.</string>
-    <string name="settings_hosts_toast">Přidán systémový modul hostitelů</string>
+    <string name="settings_denylist_config_summary">Vyberte procesy, které mají být zahrnuty v DenyListu</string>
+    <string name="settings_hosts_title">Nesystémoví hostitelé</string>
+    <string name="settings_hosts_summary">Přidá modul pro podporu nesystémových hostitelů v aplikaci AdBlock</string>
+    <string name="settings_hosts_toast">Modul nesystémových hostitelů přidán</string>
     <string name="settings_app_name_hint">Nový název</string>
-    <string name="settings_app_name_helper">Název aplikace bude nahrazen tímto názvem.</string>
+    <string name="settings_app_name_helper">Název aplikace bude nahrazen tímto názvem</string>
     <string name="settings_app_name_error">Neplatný formát</string>
     <string name="settings_su_app_adb">Aplikace a ADB</string>
     <string name="settings_su_app">Pouze aplikace</string>
@@ -166,22 +169,19 @@
     <string name="settings_su_reauth_title">Opětovné ověření po aktualizaci</string>
     <string name="settings_su_reauth_summary">Opětovné ověření oprávnění SuperUser po aktualizaci aplikace.</string>
     <string name="settings_su_tapjack_title">Povolit ochranu před TapJack</string>
-    <string name="settings_su_tapjack_summary">Okno dialogu SuperUser nebude reagovat na kliknutí v případě, že je zavřené nebo překryté jiným oknem.</string>
-    <string name="settings_su_biometric_title">Povolit biometrické ověření</string>
-    <string name="settings_su_biometric_summary">Použijte biometrické ověření pro povolení požadavků SuperUser.</string>
-    <string name="no_biometric">Nepodporované zařízení nebo není biometrické ověření povolené</string>
+    <string name="settings_su_tapjack_summary">Okno dialogu SuperUser nebude reagovat na kliknutí v případě, že je zavřené nebo překryté jiným oknem</string>
     <string name="settings_customization">Přizpůsobit</string>
-    <string name="setting_add_shortcut_summary">Přidejte odkaz na domovskou obrazovku v případě, že se po skrytí aplikace její název a ikona těžko rozpoznávají.</string>
-    <string name="settings_doh_title">DNS nebo HTTPS</string>
-    <string name="settings_doh_description">Řešení pro opravy DNS v některých zemích.</string>
+    <string name="setting_add_shortcut_summary">Přidá odkaz na domovskou obrazovku v případě, že se po skrytí aplikace její název a ikona těžko rozpoznávají.</string>
+    <string name="settings_doh_title">DNS přes HTTPS</string>
+    <string name="settings_doh_description">Obejde DNS v některých zemích</string>
 
     <string name="multiuser_mode">Režim více uživatelů</string>
     <string name="settings_owner_only">Vlastník zařízení</string>
     <string name="settings_owner_manage">Správce zařízení</string>
     <string name="settings_user_independent">Všichni uživatelé</string>
-    <string name="owner_only_summary">Pouze vlastník má přístup ROOT.</string>
-    <string name="owner_manage_summary">Přístup ROOT má správce zařízení, který přijímá požadavky k přístupu.</string>
-    <string name="user_independent_summary">Každý uživatel má svá vlastní pravidla přístupu ROOT.</string>
+    <string name="owner_only_summary">Pouze vlastník má přístup ROOT</string>
+    <string name="owner_manage_summary">Přístup ROOT má správce zařízení, který přijímá požadavky k přístupu</string>
+    <string name="user_independent_summary">Každý uživatel má svá vlastní pravidla přístupu ROOT</string>
 
     <string name="mount_namespace_mode">Režim připojení jmenného prostoru</string>
     <string name="settings_ns_global">Globální jmenný prostor</string>
@@ -199,7 +199,7 @@
     <string name="download_file_error">Chyba při stahování souboru</string>
     <string name="magisk_update_title">Aktualizace Magisk je dostupná!</string>
     <string name="updated_title">Magisk aktualizován</string>
-    <string name="updated_text">Ťukněte pro otevření aplikace</string>
+    <string name="updated_text">Klepnutím otevřete aplikaci</string>
 
 <!--Toasts, Dialogs-->
     <string name="yes">Ano</string>
@@ -211,7 +211,7 @@
     <string name="flashing">Flashuji…</string>
     <string name="done">Hotovo!</string>
     <string name="failure">Nepodařilo se!</string>
-    <string name="hide_app_title">Skrývám Magisk aplikaci…</string>
+    <string name="hide_app_title">Skrývám aplikaci Magisk…</string>
     <string name="open_link_failed_toast">Nebyla nalezena žádná aplikace pro otevření odkazu</string>
     <string name="complete_uninstall">Kompletní odinstalace</string>
     <string name="restore_img">Obnovit obrazy</string>
@@ -220,25 +220,25 @@
     <string name="restore_fail">Původní záloha neexistuje!</string>
     <string name="setup_fail">Nastavení selhalo</string>
     <string name="env_fix_title">Vyžadováno dodatečné nastavení</string>
-    <string name="env_fix_msg">Aby Magisk správně fungoval, potřebuje vaše zařízení další nastavení. Chcete pokračovat a restartovat?</string>
-    <string name="env_full_fix_msg">Aby vaše zařízení správně fungovalo, potřebuje se Magisk znovu flashnotu. Znovu nainstalujte Magisk v aplikaci, režim obnovení nemůže získat správné informace o zařízení.</string>
+    <string name="env_fix_msg">Aby mohl Magisk správně fungovat, je třeba zařízení dodatečně nastavit. Chcete pokračovat a restartovat zařízení?</string>
+    <string name="env_full_fix_msg">Aby vaše zařízení správně fungovalo, potřebuje se Magisk znovu flashnout. Nainstalujte znovu Magisk v aplikaci, režim Recovery nemůže získat správné informace o zařízení.</string>
     <string name="setup_msg">Probíhá nastavení prostředí…</string>
     <string name="authenticate">Ověřit</string>
     <string name="unsupport_magisk_title">Nepodporovaná verze Magisk</string>
-    <string name="unsupport_magisk_msg">ato verze aplikace nepodporuje verze Magisk nižší než %1$s.\n\nAplikace se bude chovat, jako by Magisk nebyl nainstalován, aktualizujte prosím Magisk co nejdříve.</string>
+    <string name="unsupport_magisk_msg">Tato verze aplikace nepodporuje Magisk ve verzi nižší než %1$s.\n\nAplikace se bude chovat, jako by žádný Magisk nebyl nainstalován. Aktualizujte prosím Magisk co nejdříve.</string>
     <string name="unsupport_general_title">Abnormální stav</string>
-    <string name="unsupport_system_app_msg">Spuštění této aplikace jako systémové aplikace není podporováno. Vraťte aplikaci zpět na uživatelskou aplikaci.</string>
-    <string name="unsupport_other_su_msg">Byl detekován binární soubor \"su\", který nepochází z Magisk. Odeberte jakékoli konkurenční kořenové řešení a/nebo přeinstalujte Magisk.</string>
-    <string name="unsupport_external_storage_msg">Magisk je nainstalován na externí úložiště. Přesuňte aplikaci do interního úložiště.</string>
-    <string name="unsupport_nonroot_stub_msg">Skrytá aplikace Magisk nemůže pokračovat v práci, protože byl ztracen root. Obnovte prosím původní soubor APK.</string>
+    <string name="unsupport_system_app_msg">Spuštění této aplikace jako systémové, není podporováno. Změňte prosím aplikaci zpět na uživatelskou.</string>
+    <string name="unsupport_other_su_msg">Byl detekován binární soubor \"su\", který nepochází z Magisk. Odeberte jakékoli konkurenční ROOT řešení a/nebo přeinstalujte Magisk.</string>
+    <string name="unsupport_external_storage_msg">Magisk je nainstalován na externím úložišti. Přesuňte prosím aplikaci do interního úložiště.</string>
+    <string name="unsupport_nonroot_stub_msg">Skrytá aplikace Magisk nemůže dále fungovat, protože byl ztracen ROOT. Obnovte prosím původní soubor APK.</string>
     <string name="unsupport_nonroot_stub_title">@string/settings_restore_app_title</string>
-    <string name="external_rw_permission_denied">Chcete-li tuto funkci povolit, udělte oprávnění úložiště</string>
-    <string name="post_notifications_denied">Chcete-li tuto funkci povolit, udělte oprávnění oznámení</string>
-    <string name="install_unknown_denied">Povolte "instalovat aplikace z neznámých zdrojů" pro aktivaci této funkce</string>
+    <string name="external_rw_permission_denied">Pro povolení této funkce, povolte oprávnění pro přístup k úložišti</string>
+    <string name="post_notifications_denied">Pro povolení této funkce, povolte oznámení</string>
+    <string name="install_unknown_denied">Pro povolení této funkce, povolte "instalovat aplikace z neznámých zdrojů"</string>
     <string name="add_shortcut_title">Přidat zástupce na domovskou obrazovku</string>
-    <string name="add_shortcut_msg">Po skrytí této aplikace může být obtížné rozpoznat její název a ikonu. Chcete přidat hezkou zkratku na domovskou obrazovku?</string>
-    <string name="app_not_found">Nebyla nalezena žádná aplikace, která by tuto akci zvládla</string>
-    <string name="reboot_apply_change">Restartujte pro použití změn</string>
-    <string name="restore_app_confirmation">Tím se skrytá aplikace obnoví zpět do původní aplikace. Opravdu to chcete udělat?</string>
+    <string name="add_shortcut_msg">Po skrytí této aplikace může být obtížné rozpoznat její název a ikonu. Chcete přidat na domovskou obrazovku hezkého zástupce?</string>
+    <string name="app_not_found">Nebyla nalezena žádná aplikace, která by tuto akci provedla</string>
+    <string name="reboot_apply_change">Pro použití změn restartujte zařízení</string>
+    <string name="restore_app_confirmation">Tímto skrytou aplikaci obnovíte zpět na původní aplikaci. Opravdu to chcete udělat?</string>
 
 </resources>

app/src/main/res/values-de/strings.xml

@@ -46,7 +46,7 @@
     <string name="install_inactive_slot_msg">Dein Gerät wird gezwungen, nach einem Neustart in den inaktiven Slot zu booten! Diese Option nur verwenden, wenn OTA abgeschlossen ist.\nWeiter?</string>
     <string name="setup_title">Zusätzliche Einstellungen</string>
     <string name="select_patch_file">Eine Datei auswählen und patchen</string>
-    <string name="patch_file_msg">Raw Image (*.img) oder ein ODIN tarfile (*.tar) auswählen</string>
+    <string name="patch_file_msg">Ein Raw Image (*.img), eine ODIN Tar-Datei (*.tar) oder eine Payload.bin (*.bin) auswählen</string>
     <string name="reboot_delay_toast">Neustart in 5 Sekunden …</string>
     <string name="flash_screen_title">Installieren</string>
 
@@ -167,9 +167,6 @@
     <string name="settings_su_reauth_summary">Superuser-Berechtigungen nach App-Aktualisierung erneut authentifizieren</string>
     <string name="settings_su_tapjack_title">Tapjacking-Schutz aktivieren</string>
     <string name="settings_su_tapjack_summary">Das Dialogfeld der Superuser-Eingabeaufforderung reagiert nicht auf Eingaben, wenn es durch ein anderes Fenster oder Überlagerung verdeckt wird</string>
-    <string name="settings_su_biometric_title">Biometrische Authentifizierung aktivieren</string>
-    <string name="settings_su_biometric_summary">Biometrie verwenden, um Superuser-Anfragen zuzulassen</string>
-    <string name="no_biometric">Gerät unterstützt keine biometrischen Daten oder ist nicht mit diesen konfiguriert</string>
     <string name="settings_customization">Personalisierung</string>
     <string name="setting_add_shortcut_summary">Hinzufügen einer hübschen Startbildschirm-Verknüpfung, falls der Name und das Symbol nach dem Ausblenden der App schwer zu erkennen sind</string>
     <string name="settings_doh_title">DNS über HTTPS</string>

app/src/main/res/values-el/strings.xml

@@ -165,9 +165,6 @@
     <string name="settings_su_reauth_summary">Επαναπιστοποίηση αδειών υπερχρήστη μετά την αναβάθμιση μίας εφαρμογής</string>
     <string name="settings_su_tapjack_title">Ενεργοποίηση προστασίας Tapjacking</string>
     <string name="settings_su_tapjack_summary">Το παράθυρο διαλόγου προτροπής του υπερχρήστη δεν αποκρίνεται στην είσοδο ενώ κρύβεται από οποιοδήποτε άλλο παράθυρο</string>
-    <string name="settings_su_biometric_title">Ενεργοποίηση βιομετρικού ελέγχου ταυτότητας</string>
-    <string name="settings_su_biometric_summary">Χρησιμοποιήστε βιομετρικό έλεγχο ταυτότητας για να επιτρέψετε αιτήματα υπερχρηστών</string>
-    <string name="no_biometric">Δεν υποστηρίζεται η συσκευή ή δεν υπάρχει καμία βιομετρική ρύθμιση</string>
     <string name="settings_customization">Προσαρμογή</string>
     <string name="setting_add_shortcut_summary">Προσθέστε μια όμορφη συντόμευση στην αρχική οθόνη σε περίπτωση που το όνομα και το εικονίδιο είναι δύσκολο να αναγνωριστούν αφού κρύψετε την εφαρμογή</string>
     <string name="settings_doh_title">DNS μέσω HTTPS</string>

app/src/main/res/values-es/strings.xml

@@ -1,6 +1,6 @@
 <resources>
 
-    <!--Sections-->
+    <!--Secciones-->
     <string name="modules">Módulos</string>
     <string name="superuser">Superusuario</string>
     <string name="logs">Registros</string>
@@ -8,148 +8,150 @@
     <string name="install">Instalar</string>
     <string name="section_home">Inicio</string>
     <string name="section_theme">Temas</string>
-    <string name="denylist">Lista de Denegacion</string>
+    <string name="denylist">Lista de denegación</string>
 
-    <!--Home-->
-    <string name="no_connection">Conexión no disponible</string>
+    <!--Inicio/Pantalla principal-->
+    <string name="no_connection">Sin conexión disponible</string>
     <string name="app_changelog">Registro de cambios</string>
     <string name="loading">Cargando…</string>
     <string name="update">Actualizar</string>
     <string name="not_available">No disponible</string>
     <string name="hide">Ocultar</string>
-    <string name="home_package">Paquete</string>
+    <string name="home_package">Nombre de paquete:</string>
     <string name="home_app_title">App</string>
 
-    <string name="home_notice_content">Descarga Magisk SÓLO de la página de GitHub oficial. Archivos de fuentes desconocidas pueden resultar maliciosos!</string>
-    <string name="home_support_title">Apóyenos</string>
-    <string name="home_follow_title">Síganos</string>
+    <string name="home_notice_content">Descarga Magisk únicamente desde la página oficial de GitHub. ¡Las descargas desde fuentes desconocidas pueden ser maliciosas!</string>
+    <string name="home_support_title">Apóyanos</string>
+    <string name="home_follow_title">Síguenos</string>
     <string name="home_item_source">Código fuente</string>
-    <string name="home_support_content">Magisk es, y siempre será gratuito y de código abierto. Sin embargo, puede apoyarnos enviando una pequeña donación.</string>
-    <string name="home_installed_version">Instalado</string>
-    <string name="home_latest_version">Última</string>
+    <string name="home_support_content">Magisk es y siempre será gratis y de código abierto. Sin embargo, puedes mostrarnos tu apoyo mediante una donación.</string>
+    <string name="home_installed_version">Versión instalada:</string>
+    <string name="home_latest_version">Última versión disponible:</string>
     <string name="invalid_update_channel">Canal de actualización inválido</string>
     <string name="uninstall_magisk_title">Desinstalar Magisk</string>
-    <string name="uninstall_magisk_msg">¡Todos los módulos serán desactivados/eliminados!\nSe eliminará la raíz!\n¡Sus datos serán potencialmente encriptados si no lo están ya!</string>
+    <string name="uninstall_magisk_msg">Antes de desinstalar Magisk, ten en cuenta lo siguiente:\n• Todos los módulos serán desinstalados\n• Perderás el acceso root\n• Tu almacenamiento interno será reencriptado en caso de que no lo esté</string>
 
-    <!--Install-->
-    <string name="keep_force_encryption">Mantener cifrado forzado</string>
+    <!--Instalación-->
+    <string name="keep_force_encryption">Mantener FDE (Full-Disk Encryption)</string>
     <string name="keep_dm_verity">Mantener AVB 2.0/dm-verity</string>
-    <string name="patch_vbmeta">Parche vbmeta en la imagen de arranque</string>
+    <string name="patch_vbmeta">Parchar vbmeta en el archivo boot.img</string>
     <string name="recovery_mode">Modo recovery</string>
-    <string name="install_options_title">Opciones</string>
-    <string name="install_method_title">Método</string>
+    <string name="install_options_title">Opciones de instalación:</string>
+    <string name="install_method_title">Método de instalación:</string>
     <string name="install_next">Siguiente</string>
-    <string name="install_start">Comencemos</string>
-    <string name="manager_download_install">Pulse para descargar e instalar</string>
+    <string name="install_start">Instalar</string>
+    <string name="manager_download_install">Pulsa para descargar e instalar</string>
     <string name="direct_install">Instalación directa (recomendado)</string>
-    <string name="install_inactive_slot">Instalar en ranura inactiva (después de OTA)</string>
-    <string name="install_inactive_slot_msg">¡Su dispositivo será forzado a arrancar en la ranura inactiva actual después de un reinicio!\nSólo use esta opción después de que OTA haya terminado.\n¿Continuar?</string>
+    <string name="install_inactive_slot">Instalar en el slot inactivo (tras una OTA)</string>
+    <string name="install_inactive_slot_msg">Tu dispositivo será forzado a bootear en el slot inactivo actual después de un reinicio\nUsa esta opción solo después de que la actualización OTA se complete.\n¿Quieres continuar?</string>
     <string name="setup_title">Configuración adicional</string>
     <string name="select_patch_file">Seleccionar y parchar un archivo</string>
-    <string name="patch_file_msg">Seleccione una imagen raw (*.img) o un archivo tar de ODIN (*.tar)</string>
+    <string name="patch_file_msg">Selecciona una imagen raw (.img) o un archivo comprimido que la contenga (.tar), en caso de que quieras usar Odin (Samsung)</string>
     <string name="reboot_delay_toast">Reiniciando en 5 segundos…</string>
     <string name="flash_screen_title">Instalación</string>
 
-    <!--Superuser-->
-    <string name="su_request_title">Petición de superusuario</string>
-    <string name="touch_filtered_warning">Como otra app está escondiendo la solicitud de superusuario, Magisk no puede verificar tu respuesta</string>
+    <!--Superusuario-->
+    <string name="su_request_title">Solicitud de superusuario</string>
+    <string name="touch_filtered_warning">Hay una app superponiéndose a la solicitud de superusuario, por lo que Magisk no puede verificar tu respuesta.</string>
     <string name="deny">Denegar</string>
     <string name="prompt">Preguntar</string>
-    <string name="grant">Permitir</string>
-    <string name="su_warning">Permite acceso total a tu dispositivo.\n¡Denegar si no está seguro!</string>
+    <string name="grant">Conceder</string>
+    <string name="su_warning">Le concedes a esta app acceso completo a tu dispositivo.\n¡Rechaza la solicitud si desconfías de ella!</string>
     <string name="forever">Siempre</string>
     <string name="once">Una vez</string>
-    <string name="tenmin">10 min</string>
-    <string name="twentymin">20 min</string>
-    <string name="thirtymin">30 min</string>
-    <string name="sixtymin">60 min</string>
-    <string name="su_allow_toast">Permitidos derechos de superusuario para %1$s</string>
-    <string name="su_deny_toast">Denegados derechos de superusuario para %1$s</string>
-    <string name="su_snack_grant">Derechos de superusuario para %1$s permitidos</string>
-    <string name="su_snack_deny">Derechos de superusuario para %1$s denegados</string>
+    <string name="tenmin">10 minutos</string>
+    <string name="twentymin">20 minutos</string>
+    <string name="thirtymin">30 minutos</string>
+    <string name="sixtymin">1 hora</string>
+    <string name="su_allow_toast">Le concediste privilegios de superusuario a %1$s</string>
+    <string name="su_deny_toast">Le denegaste privilegios de superusuario a %1$s</string>
+    <string name="su_snack_grant">Privilegios de superusuario para %1$s concedidos</string>
+    <string name="su_snack_deny">Privilegios de superusuario para %1$s denegados</string>
     <string name="su_snack_notif_on">Notificaciones de %1$s habilitadas</string>
     <string name="su_snack_notif_off">Notificaciones de %1$s deshabilitadas</string>
     <string name="su_snack_log_on">Registros de %1$s habilitados</string>
     <string name="su_snack_log_off">Registros de %1$s deshabilitados</string>
-    <string name="su_revoke_title">¿Revocar?</string>
-    <string name="su_revoke_msg">¿Confirmar para revocar derechos de %1$s?</string>
-    <string name="toast">Aviso</string>
-    <string name="none">Nada</string>
+    <string name="su_revoke_title">Revocar privilegios</string>
+    <string name="su_revoke_msg">Confirma para revocarle los privilegios de superusuario a %1$s</string>
+    <string name="toast">Mensaje emergente</string>
+    <string name="none">Ninguno</string>
 
     <string name="superuser_toggle_notification">Notificaciones</string>
     <string name="superuser_toggle_revoke">Revocar</string>
-    <string name="superuser_policy_none">Ninguna aplicación ha pedido permiso de superusuario todavía.</string>
+    <string name="superuser_policy_none">Ninguna app ha solicitado privilegios de superusuario aún.</string>
 
-    <!--Logs-->
-    <string name="log_data_none">No se tiene registro, intente usar más sus aplicaciones habilitadas para SU.</string>
-    <string name="log_data_magisk_none">Los registros de Magisk están vacíos, esto es muy raro.</string>
+    <!--Registros-->
+    <string name="log_data_none">No hay registros de apps disponibles</string>
+    <string name="log_data_magisk_none">No hay registros de Magisk disponibles</string>
     <string name="menuSaveLog">Guardar registro</string>
-    <string name="menuClearLog">Limpiar registro ahora</string>
-    <string name="logs_cleared">Registro limpiado correctamente</string>
+    <string name="menuClearLog">Limpiar registro</string>
+    <string name="logs_cleared">Registros limpiados correctamente</string>
     <string name="pid">PID: %1$d</string>
-    <string name="target_uid">UID de objetivo: %1$d</string>
+    <string name="target_uid">Target UID: %1$d</string>
 
-    <!--SafetyNet-->
+    <!--SafetyNet/PlayIntegrity-->
 
-    <!-- MagiskHide -->
+    <!--Denylist-->
     <string name="show_system_app">Mostrar apps del sistema</string>
-    <string name="show_os_app">Mostrar apps del OS</string>
-    <string name="hide_filter_hint">Filtrar por nombre</string>
+    <string name="show_os_app">Mostrar apps del sistema operativo</string>
+    <string name="hide_filter_hint">Nombre de la app o del paquete</string>
     <string name="hide_search">Buscar</string>
 
-    <!--Module -->
-    <string name="no_info_provided">(No hay información)</string>
+    <!--Módulos-->
+    <string name="no_info_provided">El creador del módulo no proporcionó ninguna descripción.</string>
     <string name="reboot_userspace">Reinicio suave</string>
-    <string name="reboot_recovery">Reiniciar en modo recovery</string>
-    <string name="reboot_bootloader">Reiniciar en modo bootloader</string>
-    <string name="reboot_download">Reiniciar en modo download</string>
-    <string name="reboot_edl">Reiniciar en modo EDL</string>
-    <string name="module_version_author">%1$s por %2$s</string>
-    <string name="module_state_remove">Eliminar</string>
-    <string name="module_state_restore">Restaurar</string>
+    <string name="reboot_recovery">Modo Recovery</string>
+    <string name="reboot_bootloader">Modo Bootloader</string>
+    <string name="reboot_download">Modo Download</string>
+    <string name="reboot_edl">Modo EDL</string>
+    <string name="module_version_author">Versión %1$s, por %2$s</string>
+    <string name="module_state_remove">Desinstalar</string>
+    <string name="module_state_restore">Reinstalar</string>
     <string name="module_action_install_external">Instalar desde almacenamiento</string>
     <string name="update_available">Actualización disponible</string>
-    <string name="suspend_text_riru">Módulo suspendido porque %1$s está habilitado</string>
-    <string name="suspend_text_zygisk">Módulo suspendido porque %1$s no está habilitado</string>
-    <string name="zygisk_module_unloaded">Módulo Zygisk no cargado debido a incompatibilidad</string>
-    <string name="module_empty">Ningún módulo instalado</string>
+    <string name="suspend_text_riru">Módulo suspendido porque %1$s está activado</string>
+    <string name="suspend_text_zygisk">Módulo suspendido porque %1$s está desactivado</string>
+    <string name="zygisk_module_unloaded">El módulo Zygisk no se cargó por problemas de compatibilidad</string>
+    <string name="module_empty">No hay módulos instalados</string>
+    <string name="confirm_install">¿Quieres instalar el módulo %1$s?</string>
+    <string name="confirm_install_title">Confirmar instalación</string>
 
-    <!--Settings -->
-    <string name="settings_dark_mode_title">Elegir modo</string>
-    <string name="settings_dark_mode_message">¡Seleccione el modo que mejor se adapte a su estilo!</string>
+    <!--Ajustes-->
+    <string name="settings_dark_mode_title">Modo del tema</string>
+    <string name="settings_dark_mode_message">¡Elige el modo que más se adapte a tu estilo!</string>
     <string name="settings_dark_mode_light">Claro</string>
-    <string name="settings_dark_mode_system">Seguir al sistema</string>
     <string name="settings_dark_mode_dark">Oscuro</string>
-    <string name="settings_download_path_title">Ruta de Descarga</string>
-    <string name="settings_download_path_message">Los archivos se guardarán en %1$s</string>
-    <string name="settings_hide_app_title">Esconder la app de Magisk</string>
-    <string name="settings_hide_app_summary">Instalar una nueva app proxy con una ID de paquete aleatoria y una etiqueta personalizada</string>
-    <string name="settings_restore_app_title">Restaurar la app de Magisk</string>
-    <string name="settings_restore_app_summary">Descubrir la app y restaurarla al APK original</string>
+    <string name="settings_dark_mode_system">Predeterminado del sistema</string>
+    <string name="settings_download_path_title">Ruta de descarga</string>
+    <string name="settings_download_path_message">Los archivos serán guardados en la siguiente ruta:\n%1$s</string>
+    <string name="settings_hide_app_title">Ocultar la app de Magisk</string>
+    <string name="settings_hide_app_summary">Instalar una versión proxy de la app con un nombre de paquete aleatorio y una etiqueta personalizada</string>
+    <string name="settings_restore_app_title">Restaurar la app</string>
+    <string name="settings_restore_app_summary">Desoculta la app y la reemplaza por la original</string>
     <string name="language">Idioma</string>
-    <string name="system_default">(Idioma del sistema)</string>
-    <string name="settings_check_update_title">Comprobar Actualizaciones</string>
-    <string name="settings_check_update_summary">Buscar periódicamente en segundo plano si existen actualizaciones</string>
+    <string name="system_default">Predeterminado del sistema</string>
+    <string name="settings_check_update_title">Buscar actualizaciones</string>
+    <string name="settings_check_update_summary">Busca actualizaciones periódicamente en segundo plano</string>
     <string name="settings_update_channel_title">Canal de actualización</string>
     <string name="settings_update_stable">Estable</string>
     <string name="settings_update_beta">Beta</string>
     <string name="settings_update_custom">Personalizado</string>
-    <string name="settings_update_custom_msg">Insertar una URL personalizada</string>
-    <string name="settings_zygisk_summary">Corre partes de magisk en zygote</string>
-    <string name="settings_denylist_title">Aplicar lista de denegacion</string>
-    <string name="settings_denylist_summary">Los procesos en la lista de denegacion tandran todas las modificaciones de magisk revertidas</string>
-    <string name="settings_denylist_error">Esta requere de %1$s para ser activada</string>
-    <string name="settings_denylist_config_title">Configurar lista de denegacion</string>
-    <string name="settings_denylist_config_summary">Seleccione los procesos para ser incluidos en la lista de denegacion</string>
-    <string name="settings_hosts_title">Systemless Hosts</string>
-    <string name="settings_hosts_summary">Soporte para bloqueadores de publicidad fuera de la partición system</string>
-    <string name="settings_hosts_toast">Módulo systemless hosts agregado</string>
-    <string name="settings_app_name_hint">Nuevo Nombre</string>
-    <string name="settings_app_name_helper">La app se reempaquetará</string>
-    <string name="settings_app_name_error">Formato inválido</string>
-    <string name="settings_su_app_adb">Aplicaciones y ADB</string>
-    <string name="settings_su_app">Sólo aplicaciones</string>
-    <string name="settings_su_adb">Sólo ADB</string>
+    <string name="settings_update_custom_msg">Ingresa la URL del canal personalizado</string>
+    <string name="settings_zygisk_summary">Ejecuta Magisk en el proceso Zygote de Android</string>
+    <string name="settings_denylist_title">Aplicar lista de denegación</string>
+    <string name="settings_denylist_summary">Las apps en la lista de denegación no serán modificadas por Magisk</string>
+    <string name="settings_denylist_error">Necesitas activar %1$s para usar esta función</string>
+    <string name="settings_denylist_config_title">Configurar lista de denegación</string>
+    <string name="settings_denylist_config_summary">Selecciona los procesos de cada app que se incluirán en la lista</string>
+    <string name="settings_hosts_title">Systemless hosts</string>
+    <string name="settings_hosts_summary">Prepara al archivo hosts para que los bloqueadores de anuncios puedan modificarlo sin alterar el sistema</string>
+    <string name="settings_hosts_toast">El módulo se instaló correctamente, reinicia para aplicar los cambios.</string>
+    <string name="settings_app_name_hint">Nuevo nombre de la app</string>
+    <string name="settings_app_name_helper">La app de Magisk será reempaquetada con este nombre</string>
+    <string name="settings_app_name_error">El nombre es inválido</string>
+    <string name="settings_su_app_adb">Permitir tanto a las apps como a ADB</string>
+    <string name="settings_su_app">Permitir solo a las apps</string>
+    <string name="settings_su_adb">Permitir solo a ADB</string>
     <string name="settings_su_disable">Deshabilitado</string>
     <string name="settings_su_request_10">10 segundos</string>
     <string name="settings_su_request_15">15 segundos</string>
@@ -158,48 +160,45 @@
     <string name="settings_su_request_45">45 segundos</string>
     <string name="settings_su_request_60">60 segundos</string>
     <string name="superuser_access">Acceso de superusuario</string>
-    <string name="auto_response">Respuesta automática</string>
-    <string name="request_timeout">Tiempo de petición</string>
+    <string name="auto_response">Respuesta predeterminada</string>
+    <string name="request_timeout">Duración de la solicitud</string>
     <string name="superuser_notification">Notificación de superusuario</string>
-    <string name="settings_su_reauth_title">Re-autenticación</string>
-    <string name="settings_su_reauth_summary">Pedir permisos de superusuario nuevamente si una aplicación es actualizada o reinstalada</string>
-    <string name="settings_su_tapjack_title">Habilitar Protección contra Tapjacking</string>
-    <string name="settings_su_tapjack_summary">El cuadro de solicitud de superusuario no responderá mientras esté oculto por cualquier otra ventana o superposición</string>
-    <string name="settings_su_biometric_title">Habilitar autenticación biométrica</string>
-    <string name="settings_su_biometric_summary">Usar autenticación biométrica para permitir solicitudes de superusuario</string>
-    <string name="no_biometric">Dispositivo no compatible o las configuraciones biométricas no están habilitadas</string>
+    <string name="settings_su_reauth_title">Reautenticar después de una actualización</string>
+    <string name="settings_su_reauth_summary">Las apps volverán a solicitar privilegios de superusuario tras actualizarse</string>
+    <string name="settings_su_tapjack_title">Protección contra tapjacking</string>
+    <string name="settings_su_tapjack_summary">No podrás interactuar con las solicitudes de superusuario mientras estén tapadas por cualquier otra ventana o superposición</string>
     <string name="settings_customization">Personalización</string>
-    <string name="setting_add_shortcut_summary">Añade un bonito atajo en la pantalla de inicio en caso de que el nombre y el icono sean difíciles de reconocer después de ocultar la aplicación</string>
+    <string name="setting_add_shortcut_summary">Añade un atajo a la app con el ícono de Magisk a la pantalla de inicio en caso de que te resulte difícil reconocerla tras haberle cambiado el nombre y el ícono</string>
     <string name="settings_doh_title">DNS sobre HTTPS</string>
-    <string name="settings_doh_description">Evitar envenenamiento de DNS en algunos países</string>
+    <string name="settings_doh_description">Proporciona una solución alternativa (workaround) contra el envenenamiento de DNS en algunos países</string>
 
     <string name="multiuser_mode">Modo multiusuario</string>
-    <string name="settings_owner_only">Sólo administrador del dispositivo</string>
-    <string name="settings_owner_manage">Administrador del dispositivo</string>
-    <string name="settings_user_independent">Usuario independiente</string>
-    <string name="owner_only_summary">Sólo el administrador tiene acceso root</string>
-    <string name="owner_manage_summary">Sólo el administrador puede supervisar el acceso root y recibir solicitudes de otros usuarios</string>
-    <string name="user_independent_summary">Cada usuario tiene separadas sus propias reglas de root </string>
+    <string name="settings_owner_only">Propietario del dispositivo</string>
+    <string name="settings_owner_manage">Administrado por el propietario del dispositivo</string>
+    <string name="settings_user_independent">Acceso independiente</string>
+    <string name="owner_only_summary">Solo el administrador tiene acceso root</string>
+    <string name="owner_manage_summary">Solo el administrador puede manipular y recibir solicitudes de superusuario</string>
+    <string name="user_independent_summary">Cada usuario tiene sus propias reglas y acceso al root</string>
 
-    <string name="mount_namespace_mode">Montar Namespace </string>
-    <string name="settings_ns_global">Global Namespace</string>
-    <string name="settings_ns_requester">Heredar Namespace</string>
-    <string name="settings_ns_isolate">Aislar Namespace</string>
-    <string name="global_summary">Todas las sesiones de root utilizan el soporte Global Namespace</string>
-    <string name="requester_summary">Las sesiones de root heredarán las peticiones Namespace</string>
-    <string name="isolate_summary">Cada sesión root tendrá su propia Namespace</string>
+    <string name="mount_namespace_mode">Modo del namespace de montaje</string>
+    <string name="settings_ns_global">Namespace global</string>
+    <string name="settings_ns_requester">Namespace heredado</string>
+    <string name="settings_ns_isolate">Namespace aislado</string>
+    <string name="global_summary">Todas las sesiones de superusuario usarán el namespace de montaje global</string>
+    <string name="requester_summary">Las sesiones de superusuario heredarán el namespace de montaje de quien las solicita</string>
+    <string name="isolate_summary">Cada sesión de superusuario tendrá su propio namespace de montaje aislado</string>
 
-    <!--Notifications-->
-    <string name="update_channel">Actualización de Magisk</string>
+    <!--Notificaciones-->
+    <string name="update_channel">Actualizaciones de Magisk</string>
     <string name="progress_channel">Notificaciones de progreso</string>
-    <string name="updated_channel">Actualización completa</string>
-    <string name="download_complete">Descarga Completa</string>
-    <string name="download_file_error">Error descargando archivo</string>
+    <string name="updated_channel">Actualización finalizada</string>
+    <string name="download_complete">Descarga finalizada</string>
+    <string name="download_file_error">Ocurrió un error en la descarga</string>
     <string name="magisk_update_title">¡Actualización de Magisk disponible!</string>
-    <string name="updated_title">Magisk Actualizado</string>
-    <string name="updated_text">Toca para abrir la aplicación</string>
+    <string name="updated_title">Se actualizó Magisk</string>
+    <string name="updated_text">Pulsa para abrir la app</string>
 
-    <!--Toasts, Dialogs-->
+    <!--Alertas y diálogos-->
     <string name="yes">Sí</string>
     <string name="no">No</string>
     <string name="repo_install_title">Instalar %1$s %2$s(%3$d)</string>
@@ -207,34 +206,36 @@
     <string name="reboot">Reiniciar</string>
     <string name="release_notes">Notas de lanzamiento</string>
     <string name="flashing">Flasheando…</string>
-    <string name="done">¡Hecho!</string>
-    <string name="failure">Ha fallado</string>
-    <string name="hide_app_title">Escondiendo la app de Magisk…</string>
-    <string name="open_link_failed_toast">No se encontró ninguna aplicación para abrir el enlace…</string>
+    <string name="done">¡Listo!</string>
+    <string name="failure">¡Ocurrió un error!</string>
+    <string name="hide_app_title">Ocultando la app de Magisk…</string>
+    <string name="open_link_failed_toast">No se encontró ninguna app que pueda abrir este enlace</string>
     <string name="complete_uninstall">Desinstalación completa</string>
-    <string name="restore_img">Restaurar imágenes</string>
+    <string name="restore_img">Solo restaurar las imágenes</string>
     <string name="restore_img_msg">Restaurando…</string>
-    <string name="restore_done">¡Restauración Terminada!</string>
-    <string name="restore_fail">¡El respaldo de la imagen boot Stock no existe!</string>
-    <string name="setup_fail">Instalación fallida</string>
-    <string name="env_fix_title">Se requiere una instalación adicional</string>
-    <string name="env_fix_msg">Tu dispositivo necesita configuración adicional para el correcto funcionamiento de Magisk. ¿Quieres proceder y reiniciar?</string>
+    <string name="restore_done">¡Restauración completa!</string>
+    <string name="restore_fail">Oops... no se encontró una copia de seguridad de las imágenes originales</string>
+    <string name="setup_fail">Ocurrió un error en la configuración</string>
+    <string name="env_fix_title">Configuración adicional</string>
+    <string name="env_fix_msg">Tu dispositivo necesita una configuración adicional para que Magisk funcione correctamente. ¿Quieres continuar y reiniciar?</string>
+    <string name="env_full_fix_msg">Tu dispositivo necesita reinstalar Magisk para que este funcione correctamente. Por favor, reinstala Magisk desde la app, el modo recovery no puede obtener la información correcta del dispositivo.</string>
     <string name="setup_msg">Ejecutando configuración de entorno…</string>
     <string name="authenticate">Autenticar</string>
     <string name="unsupport_magisk_title">Versión de Magisk no soportada</string>
-    <string name="unsupport_magisk_msg">Esta versión de la app no soporta versiones de Magisk inferiores a la %1$s.\n\nLa aplicación se comportará como si no tuvieses Magisk instalado, por favor actualiza Magisk tan pronto como sea posible.</string>
+    <string name="unsupport_magisk_msg">La versión actual de la app no soporta versiones de Magisk inferiores a la %1$s.\n\nLa app se comportará como si Magisk no estuviese instalado, por favor, actualízalo tan pronto como puedas</string>
     <string name="unsupport_general_title">Estado anormal</string>
-    <string name="unsupport_system_app_msg">No se admite la ejecución de esta aplicación como una aplicación del sistema. Revierta la aplicación a una aplicación de usuario.</string>
-    <string name="unsupport_other_su_msg">Se ha detectado un binario \"su\" que no es de Magisk. Elimine cualquier solución raíz de la competencia y/o reinstale Magisk.</string>
-    <string name="unsupport_external_storage_msg">Magisk está instalado en el almacenamiento externo. Mueva la aplicación al almacenamiento interno.</string>
-    <string name="unsupport_nonroot_stub_msg">La aplicación Magisk oculta no puede seguir funcionando porque se perdió la raíz. Restaura el APK original.</string>
+    <string name="unsupport_system_app_msg">La ejecución de esta app como app del sistema no está soportada. Por favor, vuelve a instalarla como usuario</string>
+    <string name="unsupport_other_su_msg">Se detectó un binario \"su\" ajeno a Magisk. Por favor, desinstala cualquier solución root de la competencia y/o reinstala Magisk</string>
+    <string name="unsupport_external_storage_msg">La app de Magisk está instalada en un almacenamiento externo, por favor, muévela al almacenamiento interno.</string>
+    <string name="unsupport_nonroot_stub_msg">La app de Magisk oculta no puede seguir funcionando porque se perdió el acceso root. Por favor, restaura el APK original</string>
     <string name="unsupport_nonroot_stub_title">@string/settings_restore_app_title</string>
-    <string name="external_rw_permission_denied">Conceder permiso de almacenamiento para habilitar esta funcionalidad</string>
-    <string name="install_unknown_denied">Permitir "instalar aplicaciones desconocidas" para habilitar esta funcionalidad</string>
+    <string name="external_rw_permission_denied">Permite el acceso al almacenamiento para activar esta funcionalidad</string>
+    <string name="post_notifications_denied">Permite mostrar notificaciones para activar esta funcionalidad</string>
+    <string name="install_unknown_denied">Permite la instalación de apps desconocidas para activar esta funcionalidad</string>
     <string name="add_shortcut_title">Añadir un atajo a la pantalla de inicio</string>
-    <string name="add_shortcut_msg">Tras esconder la app, su nombre e icono pueden resultar difíciles de reconocer. ¿Quieres añadir un acceso directo más bonito a la pantalla principal?</string>
-    <string name="app_not_found">No se ha encontrado ninguna app para manejar esta acción</string>
-    <string name="reboot_apply_change">Reiniciar para aplicar cambios</string>
-    <string name="restore_app_confirmation">Esto restaurará la aplicación oculta a la aplicación original. ¿Realmente quieres hacer esto?</string>
+    <string name="add_shortcut_msg">Añade un atajo a la app con el ícono de Magisk a la pantalla de inicio en caso de que te resulte difícil reconocerla tras haberle cambiado el nombre y el ícono</string>
+    <string name="app_not_found">No se encontró ninguna app que pueda realizar esta acción</string>
+    <string name="reboot_apply_change">Reinicia para aplicar los cambios</string>
+    <string name="restore_app_confirmation">Se restaurará la app oculta de vuelta a la original. ¿Quieres continuar?</string>
 
 </resources>

app/src/main/res/values-et/strings.xml

@@ -163,9 +163,6 @@
     <string name="settings_su_reauth_summary">Pärast rakenduste uuendamist küsi superkasutaja luba uuesti</string>
     <string name="settings_su_tapjack_title">Nupu varjamise kaitse</string>
     <string name="settings_su_tapjack_summary">Superkasutaja taotluse hüpik ei reageeri vajutusele, kui seda katab mõni teine aken või ülekate</string>
-    <string name="settings_su_biometric_title">Luba biomeetriaga autentimine</string>
-    <string name="settings_su_biometric_summary">Kasuta superkasutaja taotluste kinnitamiseks biomeetrilist autentimist</string>
-    <string name="no_biometric">Mittetoetatud seade või ükski biomeetriaseadistus pole lubatud</string>
     <string name="settings_customization">Kohandamine</string>
     <string name="setting_add_shortcut_summary">Lisa avakuvale ilus otsetee juhuks, kui nime ja ikooni on pärast rakenduse peitmist raske tuvastada</string>
     <string name="settings_doh_title">DNS üle HTTPSi</string>

app/src/main/res/values-fa/strings.xml

@@ -112,9 +112,9 @@
     <string name="settings_check_update_title">چک کردن بروز رسانی ها</string>
     <string name="settings_check_update_summary"> برسی کردن به صورت دوره ای برای به روزرسانی در پس زمینه</string>
     <string name="settings_update_channel_title">کانال بروزرسانی</string>
-    <string name="settings_update_stable">Stable</string>
-    <string name="settings_update_beta">Beta</string>
-    <string name="settings_update_custom">Custom Channel</string>
+    <string name="settings_update_stable">پایدار</string>
+    <string name="settings_update_beta">آزمایشی</string>
+    <string name="settings_update_custom">شخصی سازی شده</string>
     <string name="settings_update_custom_msg">اضافه کردن یک URL سفارشی</string>
     <string name="settings_hosts_title">نصب بدون حذف یا تغییر در فایل ها</string>
     <string name="settings_hosts_summary">نصب بدون حذف یا تغییر در فایل ها رای ساپورت از برنامه های Adblock</string>
@@ -138,9 +138,6 @@
     <string name="superuser_notification">اعلان روت</string>
     <string name="settings_su_reauth_title">احراز هویت دوباره پس از بروز رسانی</string>
     <string name="settings_su_reauth_summary">تأیید کردندوباره مجوزهای روت پس از ارتقاء برنامه</string>
-    <string name="settings_su_biometric_title">فعال کردن احراز هویت بیومتریک</string>
-    <string name="settings_su_biometric_summary">استفاده کردن از احراز هویت بیومتریک برای تأیید درخواست های روت</string>
-    <string name="no_biometric">دستگاه پشتیبانی نمی شود یا تنظیمات بیومتریک فعال نیست</string>
     <string name="settings_customization">سفارشی سازی</string>
     <string name="setting_add_shortcut_summary">اضافه کردن یک میانبر زیبا را در صفحه اصلی در صورت شناسایی نام و نماد پس از پنهان کردن برنامه</string>
 
@@ -153,16 +150,16 @@
     <string name="user_independent_summary">هر کاربر قوانین روت جداگانه خود را دارد</string>
 
     <string name="mount_namespace_mode">نصب کردن Namespace Mode</string>
-    <string name="settings_ns_global">Global Namespace</string>
-    <string name="settings_ns_requester">Inherit Namespace</string>
-    <string name="settings_ns_isolate">Isolated Namespace</string>
+    <string name="settings_ns_global">سراسری Namespace</string>
+    <string name="settings_ns_requester">وراثتی Namespace</string>
+    <string name="settings_ns_isolate">منزوی Namespace</string>
     <string name="global_summary">همه سشن های روت از global namespace نصب شده استفاده میکنند</string>
     <string name="requester_summary">سشن های روت namespace دراخواست کننده را به ارث می برند</string>
     <string name="isolate_summary">هر سشن روت namespace جداگانه خود را دارد</string>
 
     <!--Notifications-->
     <string name="update_channel">Magisk بروزرسانی های</string>
-    <string name="progress_channel">Progress اعلان</string>
+    <string name="progress_channel">اعلان پیشرفت</string>
     <string name="download_complete">دانلود کامل شد</string>
     <string name="download_file_error">خطا در دانلود فایل</string>
     <string name="magisk_update_title">بروزرسانی Magisk در دسترس است!</string>

app/src/main/res/values-fr/strings.xml

@@ -46,7 +46,7 @@
     <string name="install_inactive_slot_msg">Votre appareil sera obligatoirement réamorcé à partir de l’espace (slot) actuellement inactif après son redémarrage !\nN’utilisez uniquement cette option qu’après que la mise à jour OTA a été effectuée.\nVoulez‑vous continuer ?</string>
     <string name="setup_title">Configuration supplémentaire</string>
     <string name="select_patch_file">Sélectionnez le fichier cible du correctif</string>
-    <string name="patch_file_msg">Sélectionnez une image brute (*.img) ou une archive TAR ODIN (*.tar)</string>
+    <string name="patch_file_msg">Sélectionnez une image brute (*.img) ou une archive TAR ODIN (*.tar) ou un fichier payload.bin (*.bin)</string>
     <string name="reboot_delay_toast">Redémarrage dans 5 secondes…</string>
     <string name="flash_screen_title">Installation</string>
 
@@ -88,6 +88,9 @@
     <string name="logs_cleared">Le journal a été effacé.</string>
     <string name="pid">PID : %1$d</string>
     <string name="target_uid">UID cible : %1$d</string>
+    <string name="target_pid">Montage ns PID cible: %s</string>
+    <string name="selinux_context">Contexte SELinux: %s</string>
+    <string name="supp_group">Groupe supplémentaire: %s</string>
 
     <!--SafetyNet-->
 
@@ -167,9 +170,9 @@
     <string name="settings_su_reauth_summary">Redemander une authentification pour autoriser l’accès en super‑utilisateur après une mise à jour de l’application</string>
     <string name="settings_su_tapjack_title">Activer la protection contre le détournement du tapotement</string>
     <string name="settings_su_tapjack_summary">Le dialogue d’invite du super‑utilisateur ne répondra pas à la saisie lorsqu’il est masqué par une autre fenêtre ou une surcouche</string>
-    <string name="settings_su_biometric_title">Activer l’authentification biométrique</string>
-    <string name="settings_su_biometric_summary">Utiliser l’authentification biométrique pour autoriser les accès en super‑utilisateur</string>
-    <string name="no_biometric">L’appareil n’est pas pris en charge ou alors aucun paramètre biométrique n’est activé</string>
+    <string name="settings_su_auth_title">Authentification utilisateur</string>
+    <string name="settings_su_auth_summary">Demander l’authentification utilisateur lors de la requête super-utilisateur</string>
+    <string name="settings_su_auth_insecure">Aucun méthode d’authentification utilisateur n’est configurée sur le périphérique</string>
     <string name="settings_customization">Personnalisation</string>
     <string name="setting_add_shortcut_summary">Ajouter un joli raccourci dans l’écran d’accueil au cas où le nom et l’icône seraient difficiles à reconnaître après avoir masqué l’application</string>
     <string name="settings_doh_title">DNS sur HTTPS</string>

app/src/main/res/values-hi/strings.xml

@@ -165,9 +165,6 @@
     <string name="settings_su_reauth_summary">एक ऐप अपडेट होने के बाद सुपरयूज़र अनुमति प्रमाणित करें</string>
     <string name="settings_su_tapjack_title">टैपजैकिंग सुरक्षा</string>
     <string name="settings_su_tapjack_summary">सुपरयुसर प्रॉम्प्ट डायलॉग किसी अन्य विंडो या ओवरले द्वारा अस्पष्ट होने पर इनपुट का जवाब नहीं देगा</string>
-    <string name="settings_su_biometric_title">बायोमेट्रिक प्रमाणीकरण सक्षम करें</string>
-    <string name="settings_su_biometric_summary">सुपरयूज़र अनुरोधों की अनुमति देने के लिए बायोमेट्रिक प्रमाणीकरण का उपयोग करें</string>
-    <string name="no_biometric">असमर्थित डिवाइस या कोई बायोमेट्रिक सेटिंग सक्षम नहीं हैं</string>
     <string name="settings_customization">कस्टमाईजेशन</string>
     <string name="setting_add_shortcut_summary">ऐप को छिपाने के बाद नाम और आइकन को पहचानना मुश्किल है, तो होम स्क्रीन में एक सुंदर शॉर्टकट जोड़ें</string>
     <string name="settings_doh_title">HTTPS पर DNS</string>

app/src/main/res/values-hr/strings.xml

@@ -142,9 +142,6 @@
     <string name="superuser_notification">Superuser obavijest</string>
     <string name="settings_su_reauth_title">Ponovno provjerite autentičnost nakon ažuriranja</string>
     <string name="settings_su_reauth_summary">Ponovno provjerite autentičnost Superuser-a dopuštenja nakon ažuriranja aplikacije</string>
-    <string name="settings_su_biometric_title">Omogući biometrijsku provjeru autentičnosti</string>
-    <string name="settings_su_biometric_summary">Koristi biometrijsku provjeru autentičnosti da biste omogućili zahtjeve Superuser-a</string>
-    <string name="no_biometric">Nepodržani uređaj ili nije omogućena biometrijska provjera autentičnosti</string>
     <string name="settings_customization">Prilagodba</string>
     <string name="setting_add_shortcut_summary">Dodajte lijepi prečac na početni zaslon u slučaju da je naziv i ikonu teško prepoznati nakon skrivanja aplikacije</string>
     <string name="settings_doh_title">DNS preko HTTPS-a</string>

app/src/main/res/values-hu/strings.xml

@@ -165,9 +165,6 @@
     <string name="settings_su_reauth_summary">Az appok frissítés után kérjenek ismét Superuser engedélyeket</string>
     <string name="settings_su_tapjack_title">Tapjacking védelem</string>
     <string name="settings_su_tapjack_summary">A Superuser kérés párbeszédpanel nem válaszol a bevitelre, ha más ablak vagy átfedés eltakarja</string>
-    <string name="settings_su_biometric_title">Biometrikus azonosítás</string>
-    <string name="settings_su_biometric_summary">Használjon biometrikus hitelesítést a Superuser kérések engedélyezéséhez</string>
-    <string name="no_biometric">Nem támogatott eszköz, vagy nincsenek engedélyezve a biometrikus beállítások</string>
     <string name="settings_customization">Testreszabás</string>
     <string name="setting_add_shortcut_summary">Adjon hozzá egy szép parancsikont a kezdőképernyőhöz arra az esetre, ha a nevet és az ikont nehéz felismerni az alkalmazás elrejtése után</string>
     <string name="settings_doh_title">DNS HTTPS-en keresztül</string>

app/src/main/res/values-in/strings.xml

@@ -20,7 +20,7 @@
     <string name="home_package">Paket</string>
     <string name="home_app_title">Aplikasi</string>
 
-    <string name="home_notice_content">Unduh Magisk HANYA dari halaman GitHub resmi kami. File dari sumber yang tidak dikenal bisa berbahaya!</string>
+    <string name="home_notice_content">Unduh Magisk HANYA dari halaman GitHub resmi kami. File dari sumber yang tidak dikenal dapat berbahaya!</string>
     <string name="home_support_title">Dukung kami</string>
     <string name="home_follow_title">Ikuti Kami</string>
     <string name="home_item_source">Sumber</string>
@@ -113,6 +113,8 @@
     <string name="suspend_text_zygisk">Modul ditangguhkan karena %1$s tidak diaktifkan</string>
     <string name="zygisk_module_unloaded">Modul Zygisk tidak dimuat karena ketidakcocokan</string>
     <string name="module_empty">Tidak ada modul terpasang</string>
+    <string name="confirm_install">Pasang modul %1$s?</string>
+    <string name="confirm_install_title">Konfirmasi Pasang</string>
 
     <!--Settings-->
     <string name="settings_dark_mode_title">Mode tema</string>
@@ -165,9 +167,6 @@
     <string name="settings_su_reauth_summary">Autentikasi ulang izin akses superuser setelah aplikasi ditingkatkan</string>
     <string name="settings_su_tapjack_title">Aktifkan perlindungan tapjacking</string>
     <string name="settings_su_tapjack_summary">Dialog permintaan superuser tidak akan menanggapi masukan saat terhalangi oleh lapisan atau jendela lainnya</string>
-    <string name="settings_su_biometric_title">Aktifkan autentikasi biometrik</string>
-    <string name="settings_su_biometric_summary">Gunakan autentikasi biometrik untuk mengizinkan permintaan superuser</string>
-    <string name="no_biometric">Perangkat tidak mendukung atau setelan biometrik tidak diaktifkan</string>
     <string name="settings_customization">Personalisasi</string>
     <string name="setting_add_shortcut_summary">Tambahkan pintasan yang menarik pada layar utama seandainya nama dan ikon sulit untuk dikenali setelah menyembunyikan aplikasi</string>
     <string name="settings_doh_title">DNS melalui HTTPS</string>
@@ -219,6 +218,7 @@
     <string name="setup_fail">Penyiapan gagal</string>
     <string name="env_fix_title">Perlu penyiapan tambahan</string>
     <string name="env_fix_msg">Perangkat Anda membutuhkan pengaturan tambahan untuk Magisk agar berfungsi dengan benar. Apakah Anda ingin melanjutkan dan Menyalakan ulang?</string>
+    <string name="env_full_fix_msg">Perangkat Anda membutuhkan pemasangan ulang Magisk agar berfungsi dengan baik. Silakan pasang ulang Magisk dalam aplikasi, mode recovery tidak dapat memperoleh info perangkat yang benar.</string>
     <string name="setup_msg">Memproses penyiapan lingkungan…</string>
     <string name="authenticate">Autentikasi</string>
     <string name="unsupport_magisk_title">Versi Magisk tidak didukung</string>

app/src/main/res/values-it/strings.xml

@@ -16,7 +16,7 @@
     <string name="loading">Caricamento…</string>
     <string name="update">Aggiorna</string>
     <string name="not_available">N/D</string>
-    <string name="hide">Hide</string>
+    <string name="hide">Nascondi</string>
     <string name="home_package">Pacchetto</string>
     <string name="home_app_title">App</string>
 
@@ -46,7 +46,7 @@
     <string name="install_inactive_slot_msg">Questo dispositivo verrà FORZATO ad avviarsi usando lo slot inattivo!\nUsa questo metodo solo dopo che un aggiornamento OTA è stato installato.\nVuoi continuare?</string>
     <string name="setup_title">Configurazione aggiuntiva</string>
     <string name="select_patch_file">Seleziona e aggiorna un file</string>
-    <string name="patch_file_msg">Seleziona un\'immagine in formato .img o un file ODIN .tar</string>
+    <string name="patch_file_msg">Seleziona un\'immagine in formato .img, un file .tar di ODIN o un file payload.bin</string>
     <string name="reboot_delay_toast">Riavvio fra 5 secondi…</string>
     <string name="flash_screen_title">Installazione</string>
 
@@ -113,6 +113,8 @@
     <string name="module_empty">Nessun modulo installato</string>
 
     <!--Settings -->
+    <string name="confirm_install">Vuoi installare il modulo %1$s?</string>
+    <string name="confirm_install_title">Conferma installazione</string>
     <string name="settings_dark_mode_title">Impostazioni tema</string>
     <string name="settings_dark_mode_message">Seleziona il tema che si adatta meglio al tuo stile!</string>
     <string name="settings_dark_mode_light">Chiaro</string>
@@ -163,9 +165,6 @@
     <string name="settings_su_reauth_summary">Richiedi nuovamente i permessi di root dopo l\'aggiornamento di un\'app</string>
     <string name="settings_su_tapjack_title">Protezione anti-tapjacking</string>
     <string name="settings_su_tapjack_summary">La schermata di richiesta dei permessi di root non risponderà al tocco mentre è oscurata da altre finestre o elementi in sovraimpressione</string>
-    <string name="settings_su_biometric_title">Autenticazione biometrica</string>
-    <string name="settings_su_biometric_summary">Utilizza l\'autenticazione biometrica per accettare le richieste di accesso root</string>
-    <string name="no_biometric">Il dispositivo non è supportato o le impostazioni biometriche sono disattivate</string>
     <string name="settings_customization">Personalizzazione</string>
     <string name="setting_add_shortcut_summary">Aggiungi un collegamento alla schermata iniziale se il nome e l\'icona sono difficili da riconoscere dopo aver nascosto l\'app</string>
     <string name="settings_doh_title">DNS over HTTPS</string>
@@ -217,6 +216,7 @@
     <string name="setup_fail">Configurazione fallita</string>
     <string name="env_fix_title">Configurazione aggiuntiva richiesta</string>
     <string name="env_fix_msg">Il tuo dispositivo necessita di una configurazione aggiuntiva per far funzionare Magisk correttamente. Vuoi procedere e riavviare il dispositivo?</string>
+    <string name="env_full_fix_msg">È necessario eseguire di nuovo il flash di Magisk per farlo funzionare correttamente. Reinstalla Magisk utilizzando l\'app, in modalità recovery non è possibile ottenere informazioni corrette sul dispositivo.</string>
     <string name="setup_msg">Configurazione dell\'ambiente in corso…</string>
     <string name="authenticate">Autentica</string>
     <string name="unsupport_magisk_title">Versione di Magisk non supportata</string>
@@ -228,6 +228,7 @@
     <string name="unsupport_nonroot_stub_msg">Dal momento che i permessi di root sono stati persi, l\'app di Magisk nascosta non può più funzionare. Ripristina l\'APK originale.</string>
     <string name="unsupport_nonroot_stub_title">@string/settings_restore_app_title</string>
     <string name="external_rw_permission_denied">Consenti l\'accesso alla memoria del dispositivo per abilitare questa opzione</string>
+    <string name="post_notifications_denied">Consenti l\'invio di notifiche per abilitare questa opzione</string>
     <string name="install_unknown_denied">Consenti l\'installazione di app sconosciute per abilitare questa funzionalità</string>
     <string name="add_shortcut_title">Aggiungi collegamento alla schermata iniziale</string>
     <string name="add_shortcut_msg">Dopo aver nascosto quest\'app, il suo nome e la sua icona potrebbero diventare difficili da riconoscere. Vuoi aggiungere una scorciatoia alla schermata principale?</string>

app/src/main/res/values-iw/strings.xml

@@ -8,6 +8,8 @@
     <string name="install">התקנה</string>
     <string name="section_home">בית</string>
     <string name="section_theme">עיצוב</string>
+    <string name="denylist">רשימת דחייה</string>
+
 
     <!--Home-->
     <string name="no_connection">אין חיבור זמין</string>
@@ -18,10 +20,11 @@
     <string name="hide">הסתרה</string>
     <string name="home_package">חבילה</string>
     <string name="home_app_title">יישום</string>
-	<string name="home_notice_content">הורד את Magisk רק מהדף הרשמי של GitHub. קבצים ממקורות לא ידועים יכולים להיות זדוניים!</string>
-	<string name="home_support_title">תמיכה בנו</string>
+    <string name="home_notice_content">יש להוריד את Magisk רק מהדף הרשמי של GitHub. קבצים ממקורות לא ידועים יכולים להיות זדוניים!</string>
+    <string name="home_support_title">תמיכה בנו</string>
+    <string name="home_follow_title">עקבו אחרינו</string>
     <string name="home_item_source">מקור</string>
-    <string name="home_support_content">Magisk היה ותמיד יהיה בעל קוד מקור פתוח. עם זאת אתה יכול להראות לנו שאכפת לך על ידי שליחת תרומה קטנה.</string>
+    <string name="home_support_content">Magisk היה ותמיד יהיה בעל קוד מקור פתוח. עם זאת באפשרותך להראות לנו שאכפת לך על ידי שליחת תרומה קטנה.</string>
     <string name="home_installed_version">מותקנת</string>
     <string name="home_latest_version">אחרונה</string>
     <string name="invalid_update_channel">ערוץ עדכון לא חוקי</string>
@@ -31,18 +34,19 @@
     <!--Install-->
     <string name="keep_force_encryption">שמירה על הצפנה בכח</string>
     <string name="keep_dm_verity">שמירה על AVB 2.0/dm-verity</string>
+    <string name="patch_vbmeta">תיקון vbmeta בתמונת האתחול</string>
     <string name="recovery_mode">מצב שחזור</string>
     <string name="install_options_title">אפשרויות</string>
     <string name="install_method_title">שיטה</string>
     <string name="install_next">הבא</string>
     <string name="install_start">צא לדרך</string>
-    <string name="manager_download_install">לחץ להורדה והתקנה</string>
+    <string name="manager_download_install">לחיצה להורדה והתקנה</string>
     <string name="direct_install">התקנה ישירה (מומלץ)</string>
-    <string name="install_inactive_slot">התקן לחריץ לא פעיל (לאחר OTA)</string>
+    <string name="install_inactive_slot">התקנה לחריץ לא פעיל (לאחר OTA)</string>
     <string name="install_inactive_slot_msg">ההתקן שלך ייאלץ אתחול לחריץ הלא פעיל הנוכחי שלך לאחר הפעלה מחדש!\nיש להשתמש באפשרות זו רק לאחר ביצוע OTA בלבד.\nלהמשיך?</string>
     <string name="setup_title">התקנה נוספת</string>
-    <string name="select_patch_file">בחר והתקן קובץ</string>
-    <string name="patch_file_msg">בחר תמונה גולמית (*.img) או ODIN קובץ tar (*.tar)</string>
+    <string name="select_patch_file">בחירה והתקנת קובץ</string>
+    <string name="patch_file_msg">בחירת תמונה גולמית (*.img) או ODIN קובץ tar (*.tar)</string>
     <string name="reboot_delay_toast">מאתחל בעוד 5 שניות…</string>
     <string name="flash_screen_title">התקנה</string>
 
@@ -52,7 +56,7 @@
     <string name="deny">דחה</string>
     <string name="prompt">מיידי</string>
     <string name="grant">הענק</string>
-    <string name="su_warning">מעניק גישה מלאה להתקן שלך.\nדחה באם אינך בטוח!</string>
+    <string name="su_warning">מעניק גישה מלאה להתקן שלך.\nיש לדחות באי וודאות!</string>
     <string name="forever">לצמיתות</string>
     <string name="once">פעם אחת</string>
     <string name="tenmin">10 דקות</string>
@@ -76,13 +80,16 @@
     <string name="superuser_policy_none">לא נתבקשו הרשאות משתמש על על ידי שום יישום</string>
 
     <!--Logs-->
-    <string name="log_data_none">הינך ללא יומן רישום, נסה להשתמש ביישומים מותאמים יותר למשתמש העל שלך</string>
+    <string name="log_data_none">הינך ללא יומן רישום, יש לנסות להשתמש ביישומים מותאמים יותר למשתמש העל שלך</string>
     <string name="log_data_magisk_none">יומני רישום Magisk ריקים, זה מוזר</string>
-    <string name="menuSaveLog">שמור יומן רישום</string>
-    <string name="menuClearLog">נקה יומן רישום כעת</string>
+    <string name="menuSaveLog">שמירת יומן רישום</string>
+    <string name="menuClearLog">ניקוי יומן רישום כעת</string>
     <string name="logs_cleared">יומני רישום נוקו בהצלחה</string>
     <string name="pid">PID: %1$d</string>
     <string name="target_uid">יעד UID: %1$d</string>
+    <string name="target_pid">מציב ns יעד PID: %s</string>
+    <string name="selinux_context">הקשר SELinux: %s</string>
+    <string name="supp_group">קבוצה משלימה: %s</string>
 
     <!--SafetyNet-->
 
@@ -100,35 +107,47 @@
     <string name="reboot_download">אתחול מצב הורדה</string>
     <string name="reboot_edl">אתחול למצב EDL</string>
     <string name="module_version_author">%1$s מאת %2$s</string>
-    <string name="module_state_remove">הסר</string>
-    <string name="module_state_restore">שחזר</string>
-    <string name="module_action_install_external">התקן מהאחסון</string>
+    <string name="module_state_remove">הסרה</string>
+    <string name="module_state_restore">שיחזור</string>
+    <string name="module_action_install_external">התקנה מהאחסון</string>
     <string name="update_available">עדכונים זמינים</string>
+    <string name="suspend_text_riru">מודול מושעה כי %1$s מופעל</string>
+    <string name="suspend_text_zygisk">המודול הושעה כי %1$s אינו מופעל</string>
+    <string name="zygisk_module_unloaded">מודול Zygisk לא נטען עקב חוסר תאימות</string>
+    <string name="module_empty">לא מותקן מודול</string>
+    <string name="confirm_install">להתקין מודול %1$s?</string>
+    <string name="confirm_install_title">אישור התקנה</string>
 
     <!--Settings -->
     <string name="settings_dark_mode_title">מצב עיצוב</string>
-    <string name="settings_dark_mode_message">בחר מצב המתאים ביותר לסגנון שלך!</string>
+    <string name="settings_dark_mode_message">נא לבחור מצב המתאים ביותר לסגנון שלך!</string>
     <string name="settings_dark_mode_light">תמיד בהיר</string>
     <string name="settings_dark_mode_system">בהתאם למערכת</string>
     <string name="settings_dark_mode_dark">תמיד כהה</string>
     <string name="settings_download_path_title">נתיב הורדה</string>
     <string name="settings_download_path_message">הקבצים ישמרו אל %1$s</string>
-    <string name="settings_hide_app_title">הסתר את היישום Magisk</string>
-    <string name="settings_hide_app_summary">התקן יישום מתווך עם מזהה חבילה אקראי ותווית שם מותאמת אישית</string>
-    <string name="settings_restore_app_title">שחזר את יישום Magisk</string>
-    <string name="settings_restore_app_summary">בטל את הסתרת היישום ושחזר אותה ל-APK המקורי</string>
-	<string name="language">שפה</string>
+    <string name="settings_hide_app_title">הסתרת היישום Magisk</string>
+    <string name="settings_hide_app_summary">התקנת יישום מתווך עם מזהה חבילה אקראי ותווית שם מותאמת אישית</string>
+    <string name="settings_restore_app_title">שיחזור היישום Magisk</string>
+    <string name="settings_restore_app_summary">יש לבטל את הסתרת היישום ולשחזור אותו ל-APK המקורי</string>
+    <string name="language">שפה</string>
     <string name="system_default">(ברירת מחדל מערכת)</string>
-    <string name="settings_check_update_title">בדוק עדכונים</string>
+    <string name="settings_check_update_title">בדיקת עדכונים</string>
     <string name="settings_check_update_summary">בדוק מעת לעת ברקע אם יש עדכונים</string>
     <string name="settings_update_channel_title">ערוץ עדכון</string>
     <string name="settings_update_stable">יציב</string>
     <string name="settings_update_beta">בטא</string>
-    <string name="settings_update_custom">ערוץ מותאם אישית</string>
-    <string name="settings_update_custom_msg">הזן כתובת מותאמת אישית</string>
+    <string name="settings_update_custom">מותאם אישית</string>
+    <string name="settings_update_custom_msg">הזנת כתובת מותאמת אישית</string>
+    <string name="settings_zygisk_summary">הפעל חלקים של Magisk בדמון zygote</string>
+    <string name="settings_denylist_title">אכיפת רשימת דחייה</string>
+    <string name="settings_denylist_summary">כל השינויים של Magisk יוחזרו לתהליכים ברשימת הדחייה</string>
+    <string name="settings_denylist_error">תכונה זו דורשת הפעלה של %1$s</string>
+    <string name="settings_denylist_config_title">הגדרת רשימת הדחייה</string>
+    <string name="settings_denylist_config_summary">בחירת התהליכים שייכללו ברשימת הדחייה</string>
     <string name="settings_hosts_title">מארחים חסרי מערכת</string>
     <string name="settings_hosts_summary">מארחים חסרי מערכת תומכים ביישומים חוסמי פרסומות</string>
-    <string name="settings_hosts_toast">הוסף מודול מארחים חסרי מערכת</string>
+    <string name="settings_hosts_toast">הוספת מודול מארחים חסרי מערכת</string>
     <string name="settings_app_name_hint">שם חדש</string>
     <string name="settings_app_name_helper">היישום יארז מחדש בשם זה</string>
     <string name="settings_app_name_error">פורמט לא חוקי</string>
@@ -146,15 +165,15 @@
     <string name="auto_response">תגובה אוטומטית</string>
     <string name="request_timeout">בקש פסק זמן</string>
     <string name="superuser_notification">התראות משתמש על</string>
-    <string name="settings_su_reauth_title">אמת מחדש לאחר שדרוג</string>
+    <string name="settings_su_reauth_title">אימות מחדש לאחר שדרוג</string>
     <string name="settings_su_reauth_summary">אימות מחדש הרשאות של משתמש על לאחר שדרוג יישום</string>
     <string name="settings_su_tapjack_title">הפעלת הגנת Tapjacking</string>
     <string name="settings_su_tapjack_summary">תיבת הדו שיח של משתמש העל לא תגיב לקלט כשהיא מוסתרת על ידי חלון או כיסוי אחר</string>
-	<string name="settings_su_biometric_title">אפשר אימות ביומטרי</string>
-	<string name="settings_su_biometric_summary">השתמש באימות ביומטרי כדי לאפשר בקשות לשימוש במשתמש על</string>
-    <string name="no_biometric">התקן לא נתמך או הגדרות ביומטריות אינן מאופשרות</string>
+    <string name="settings_su_auth_title">אימות משתמש</string>
+    <string name="settings_su_auth_summary">בקשת אימות משתמש במהלך בקשות משתמש על</string>
+    <string name="settings_su_auth_insecure">לא מוגדרת שיטת אימות בהתקן</string>
     <string name="settings_customization">התאמה אישית</string>
-    <string name="setting_add_shortcut_summary">הוסף קיצור דרך יפה במסך הבית למקרה שקשה לזהות את השם ואת הסמל לאחר הסתרת היישום</string>
+    <string name="setting_add_shortcut_summary">הוספת קיצור דרך יפה במסך הבית למקרה שקשה לזהות את השם ואת הסמל לאחר הסתרת היישום</string>
     <string name="settings_doh_title">DNS על HTTPS</string>
     <string name="settings_doh_description">עקיפת DNS מורעל במדינות מסוימות</string>
     <string name="multiuser_mode">מצב מרובה משתמשים</string>
@@ -175,13 +194,17 @@
     <!--Notifications-->
     <string name="update_channel">עדכוני Magisk</string>
     <string name="progress_channel">התראות התקדמות</string>
+    <string name="updated_channel">העדכון הושלם</string>
     <string name="download_complete">ההורדה הושלמה</string>
     <string name="download_file_error">שגיאה בהורדת קובץ</string>
     <string name="magisk_update_title">עדכון Magisk זמין!</string>
+    <string name="updated_title">עדכון Magisk</string>
+    <string name="updated_text">הקשה כדי לפתוח יישום</string>
 
     <!--Toasts, Dialogs-->
     <string name="yes">כן</string>
     <string name="no">לא</string>
+    <string name="repo_install_title">מתקין %1$s %2$s(%3$d)</string>
     <string name="download">הורדה</string>
     <string name="reboot">הפעלה מחדש</string>
     <string name="release_notes">הערות שחרור</string>
@@ -189,7 +212,7 @@
     <string name="done">בוצע!</string>
     <string name="failure">נכשל</string>
     <string name="hide_app_title">מסתיר את יישום Magisk…</string>
-	<string name="open_link_failed_toast">לא נמצאו יישומים לפתיחת קישור זה</string>
+    <string name="open_link_failed_toast">לא נמצאו יישומים לפתיחת קישור זה</string>
     <string name="complete_uninstall">הסרה מלאה</string>
     <string name="restore_img">שיחזור תמונות</string>
     <string name="restore_img_msg">משחזר…</string>
@@ -197,8 +220,9 @@
     <string name="restore_fail">גיבוי מקורי אינו קיים!</string>
     <string name="setup_fail">ההתקנה כשלה</string>
     <string name="env_fix_title">דורש התקנה נוספת</string>
-    <string name="env_fix_msg">המכשיר שלך זקוק להתקנה נוספת כדי ש-Magisk יפעל כראוי. האם ברצונך להמשיך ולהפעיל מחדש?</string>
-	<string name="setup_msg">הגדרת סביבת ריצה…</string>
+    <string name="env_fix_msg">ההתקן שלך זקוק להתקנה נוספת כדי ש-Magisk יפעל כראוי. האם ברצונך להמשיך ולהפעיל מחדש?</string>
+    <string name="env_full_fix_msg">ההתקן שלך זקוק לצריבה מחדש של Magisk כדי לעבוד כראוי. נא להתקין מחדש את Magisk בתוך היישום, מצב השחזור אינו יכול לקבל מידע נכון על ההתקן.</string>
+    <string name="setup_msg">הגדרת סביבת ריצה…</string>
     <string name="authenticate">אימות</string>
     <string name="unsupport_magisk_title">גרסת Magisk אינה נתמכת</string>
     <string name="unsupport_magisk_msg">גרסה זו של היישום אינה תומכת ביישום  Magisk הנמוך מ- %1$s.\n\nהיישום יתנהג כאילו Magisk אינו מותקן,יש לשדרג את Magisk במהירות האפשריות.</string>
@@ -208,8 +232,12 @@
     <string name="unsupport_external_storage_msg">Magisk מותקן באחסון החיצוני. נא להעביר את היישום לאחסון הפנימי.</string>
     <string name="unsupport_nonroot_stub_msg">היישום אינו יכול להמשיך לעבוד במצב הנסתר מכיוון שגישת השורש אבדה. נא לשחזר אותו חזרה ל-APK המקורי.</string>
     <string name="unsupport_nonroot_stub_title">@string/settings_restore_app_title</string>
-	<string name="external_rw_permission_denied">הענק הרשאת אחסון להפעלת פונקציונליות זו</string>
-    <string name="add_shortcut_title">הוסף קיצור דרך למסך הבית</string>
+    <string name="external_rw_permission_denied">הענת הרשאת אחסון להפעלת פונקציה זו</string>
+    <string name="post_notifications_denied">הענקת הרשאה להתראות כדי להפעיל פונקציה זו</string>
+    <string name="install_unknown_denied">יש לאפשר "התקנה ממקורות לא ידועים" בכדי להפעיל פונקציה זו</string>
+    <string name="add_shortcut_title">הוספת קיצור דרך למסך הבית</string>
     <string name="add_shortcut_msg">לאחר הסתרת היישום הזה, השם והסמליל שלה עשויים להיות קשים לזיהוי. האם ברצונך להוסיף קיצור דרך יפה למסך הבית?</string>
-	<string name="app_not_found">לא נמצא יישום לטיפול בפעולה זו</string>
+    <string name="app_not_found">לא נמצא יישום לטיפול בפעולה זו</string>
+    <string name="reboot_apply_change">ייש להפעיל מחדש כדי להחיל שינויים</string>
+    <string name="restore_app_confirmation">פעולה זו תשחזר את היישום המוסתר חזרה ליישום המקורי. האם בוודאות ברצונך לעשות את זה?</string>
 </resources>

app/src/main/res/values-ja/strings.xml

@@ -165,9 +165,6 @@
     <string name="settings_su_reauth_summary">アプリのアップグレード後にスーパーユーザー権限を再認証します</string>
     <string name="settings_su_tapjack_title">タップジャッキング保護を有効にする</string>
     <string name="settings_su_tapjack_summary">他のウィンドウやオーバーレイで表示されている間は、スーパーユーザー権限の要求ダイアログが入力に応答しないようにします</string>
-    <string name="settings_su_biometric_title">生体認証の有効化</string>
-    <string name="settings_su_biometric_summary">スーパーユーザー権限の要求時に生体認証を使用します</string>
-    <string name="no_biometric">生体認証に対応していないか、有効化されていません</string>
     <string name="settings_customization">カスタマイズ</string>
     <string name="setting_add_shortcut_summary">アプリを隠した後に見つけられなくなったときは、ここでホーム画面にショートカットを追加できます</string>
     <string name="settings_doh_title">DNS over HTTPS</string>

app/src/main/res/values-ka/strings.xml

@@ -152,9 +152,6 @@
     <string name="settings_su_reauth_summary">სუპერმომხმარებლის ნებართვის რეაუტენთიფიკაცია აპის განახლების შემდეგ</string>
     <string name="settings_su_tapjack_title">Tapjacking-სგან თავის დაცვა</string> <!-- TODO: tapjacking has no direct translation; must make something up later -->
     <string name="settings_su_tapjack_summary">superuser-ის დიალოგის ღილაკებზე დაჭერა არ იქნება შესაძლებელი თუ სხვა აპი არის მასზე გადახურული</string>
-    <string name="settings_su_biometric_title">ბიომეტრიკული აუტენთიფიკაციის ჩართვა</string>
-    <string name="settings_su_biometric_summary">ბიომეტრიკული აუტენთიფიკაციის გამოყენება სუპერმომხმარებლის ნებართვის გასაცემად</string>
-    <string name="no_biometric">შეუთავსებელი მოწყობილობა ან არასწორად დაყენებული ბიომეტრიკული პარამეტრები</string>
     <string name="settings_customization">პერსონალიზაცია</string>
     <string name="setting_add_shortcut_summary">ლამაზი ხატულის დამატება საწყისს ეკრანზე, იმ შემთხვევაში თუ აპის ამოცნობა არის რთული დამალვის შემდეგ</string>
     <string name="settings_doh_title">DNS HTTPS-ზე</string>

app/src/main/res/values-ko/strings.xml

@@ -11,7 +11,7 @@
     <string name="denylist">거부목록</string>
 
     <!--Home-->
-    <string name="no_connection">사용 가능한 연결 없음</string>
+    <string name="no_connection">인터넷 연결 없음</string>
     <string name="app_changelog">앱 변경 사항</string>
     <string name="loading">로딩중…</string>
     <string name="update">업데이트</string>
@@ -33,7 +33,7 @@
     <!--Install-->
     <string name="keep_force_encryption">강제 암호화 유지</string>
     <string name="keep_dm_verity">AVB 2.0/dm-verity 유지</string>
-    <string name="patch_vbmeta">부트 이미지에 vbmeta 패치</string>
+    <string name="patch_vbmeta">부트 이미지의 vbmeta 패치</string>
     <string name="recovery_mode">리커버리 모드</string>
     <string name="install_options_title">옵션</string>
     <string name="install_method_title">설치 방법</string>
@@ -80,7 +80,7 @@
     <string name="superuser_policy_none">슈퍼유저 권한을 요청한 앱이 없습니다.</string>
 
     <!--Logs-->
-    <string name="log_data_none">로그가 없습니다. SU 권한을 필요로 하는 앱을 사용하십시오.</string>
+    <string name="log_data_none">로그가 없습니다. 슈퍼유저 권한을 필요로 하는 앱을 사용하십시오.</string>
     <string name="log_data_magisk_none">Magisk 로그가 없습니다.</string>
     <string name="menuSaveLog">로그 저장</string>
     <string name="menuClearLog">지금 로그 삭제</string>
@@ -108,8 +108,8 @@
     <string name="module_state_restore">복구</string>
     <string name="module_action_install_external">저장소에서 설치</string>
     <string name="update_available">업데이트 가능</string>
-    <string name="suspend_text_riru">%1$s 가 활성화 되어있기 때문에 모듈이 중단되었습니다</string>
-    <string name="suspend_text_zygisk">%1$s 가 비활성화 되어있기 때문에 모듈이 중단되었습니다</string>
+    <string name="suspend_text_riru">%1$s 가 활성화 되어있어 모듈 로드가 일시정지 되었습니다.</string>
+    <string name="suspend_text_zygisk">%1$s 가 비활성화 되어있어 모듈이 로드되지 않았습니다.</string>
     <string name="zygisk_module_unloaded">호환성 문제로 인해 Zygisk 모듈이 로드되지 않았습니다.</string>
 
     <!--Settings-->
@@ -121,8 +121,8 @@
     <string name="settings_download_path_title">다운로드 경로</string>
     <string name="settings_download_path_message">파일이 %1$s에 저장됩니다</string>
     <string name="settings_hide_app_title">Magisk 앱 숨기기</string>
-    <string name="settings_hide_app_summary">랜덤 패키지 ID와 커스텀 앱 라벨을 사용하여 프록시 앱을 설치합니다.</string>
-    <string name="settings_restore_app_title">Magisk 앱 복구</string>
+    <string name="settings_hide_app_summary">랜덤 패키지 ID와 커스텀 앱 이름으로 Magisk 프록시 앱을 설치합니다.</string>
+    <string name="settings_restore_app_title">Magisk 앱 복원</string>
     <string name="settings_restore_app_summary">앱 숨기기를 해제하고 원래 APK로 복원합니다.</string>
     <string name="language">언어</string>
     <string name="system_default">(시스템 기본값)</string>
@@ -135,10 +135,10 @@
     <string name="settings_update_custom_msg">사용자 지정 URL 입력</string>
     <string name="settings_zygisk_summary">zygote 데몬에서 Magisk 부분 실행</string>
     <string name="settings_denylist_title">DenyList 적용</string>
-    <string name="settings_denylist_summary">DenyList의 프로세스는 Magisk의 모든 수정사항을 되돌립니다</string>
+    <string name="settings_denylist_summary">DenyList에 있는 프로세스를 실행할때 Magisk의 모든 수정사항을 되돌리고 실행합니다.</string>
     <string name="settings_denylist_error">이 기능을 사용하려면 %1$s 활성화가 필요합니다</string>
     <string name="settings_denylist_config_title">DenyList 구성</string>
-    <string name="settings_denylist_config_summary">denylist에 포함할 프로세스를 선택합니다.</string>
+    <string name="settings_denylist_config_summary">Denylist에 포함할 프로세스를 선택합니다.</string>
     <string name="settings_hosts_title">Systemless hosts</string>
     <string name="settings_hosts_summary">광고 차단 앱에서 사용하는 systemless hosts를 지원합니다.</string>
     <string name="settings_hosts_toast">Systemless hosts 모듈 추가됨</string>
@@ -160,12 +160,9 @@
     <string name="request_timeout">요청 시간 제한</string>
     <string name="superuser_notification">슈퍼유저 알림</string>
     <string name="settings_su_reauth_title">업데이트 후 다시 승인</string>
-    <string name="settings_su_reauth_summary">앱이 업데이트되면 슈퍼유저 권한을 다시 승인합니다.</string>
+    <string name="settings_su_reauth_summary">앱이 업데이트되면 권한 승인 요청을 다시 합니다.</string>
     <string name="settings_su_tapjack_title">탭재킹 보호 활성화</string>
-    <string name="settings_su_tapjack_summary">슈퍼유저 프롬프트 대화 상자가 다른 창이나 오버레이로 가려지는 동안 입력에 응답하지 않습니다.</string>
-    <string name="settings_su_biometric_title">생체 인증 활성화</string>
-    <string name="settings_su_biometric_summary">슈퍼유저 요청 허용에 생체 인증을 사용합니다.</string>
-    <string name="no_biometric">지원되지 않는 기기이거나 등록된 생체 정보가 없습니다.</string>
+    <string name="settings_su_tapjack_summary">슈퍼유저 프롬프트가 다른 창이나 오버레이로 가려지는 동안의 입력을 무시합니다.</string>
     <string name="settings_customization">커스터마이즈</string>
     <string name="setting_add_shortcut_summary">앱을 숨긴 후 아이콘과 이름을 알아보기 힘들 경우를 위해 알아보기 쉬운 바로가기를 홈 화면에 추가합니다.</string>
     <string name="settings_doh_title">DNS over HTTPS</string>
@@ -176,16 +173,16 @@
     <string name="settings_owner_manage">기기 소유자에 의해 관리됨</string>
     <string name="settings_user_independent">사용자별</string>
     <string name="owner_only_summary">소유자만 루트 액세스를 갖습니다.</string>
-    <string name="owner_manage_summary">소유자만 루트 액세스를 관리하고 요청 시도를 받을 수 있습니다.</string>
-    <string name="user_independent_summary">각각의 사용자가 개별적인 루트 규칙을 갖습니다.</string>
+    <string name="owner_manage_summary">소유자만 루트 액세스를 관리하고 요청을 받을 수 있습니다.</string>
+    <string name="user_independent_summary">각각의 사용자가 개별적인 권한을 갖습니다.</string>
 
-    <string name="mount_namespace_mode">이름공간 마운트 모드</string>
-    <string name="settings_ns_global">전역 이름공간</string>
-    <string name="settings_ns_requester">이름공간 상속</string>
-    <string name="settings_ns_isolate">격리된 이름공간</string>
-    <string name="global_summary">모든 루트 세션이 전역 마운트 이름공간을 사용합니다.</string>
-    <string name="requester_summary">루트 세션은 요청자의 이름공간을 상속합니다.</string>
-    <string name="isolate_summary">각각의 루트 세션은 자신만의 독립된 이름공간을 사용합니다.</string>
+    <string name="mount_namespace_mode">네임스페이스 마운트 모드</string>
+    <string name="settings_ns_global">전역 네임스페이스</string>
+    <string name="settings_ns_requester">네임스페이스 상속</string>
+    <string name="settings_ns_isolate">격리된 네임스페이스</string>
+    <string name="global_summary">모든 루트 세션이 전역 마운트 네임스페이스를 사용합니다.</string>
+    <string name="requester_summary">루트 세션은 요청자의 네임스페이스를 상속합니다.</string>
+    <string name="isolate_summary">각각의 루트 세션은 자신만의 독립된 네임스페이를를 사용합니다.</string>
 
     <!--Notifications-->
     <string name="update_channel">Magisk 업데이트</string>
@@ -194,7 +191,7 @@
     <string name="download_complete">다운로드 완료</string>
     <string name="download_file_error">파일 다운로드 오류</string>
     <string name="magisk_update_title">새 버전의 Magisk를 사용할 수 있습니다!</string>
-    <string name="updated_title">업데이트 된 Magisk</string>
+    <string name="updated_title">Magisk가 업데이트 되었습니다!</string>
     <string name="updated_text">터치하여 앱 열기</string>
 
     <!--Toasts, Dialogs-->
@@ -203,8 +200,8 @@
     <string name="repo_install_title">%1$s %2$s(%3$d) 설치</string>
     <string name="download">다운로드</string>
     <string name="reboot">다시 시작</string>
-    <string name="release_notes">릴리즈 노트</string>
-    <string name="flashing">플래싱 중…</string>
+    <string name="release_notes">수정사항</string>
+    <string name="flashing">설치 중…</string>
     <string name="done">완료!</string>
     <string name="failure">실패!</string>
     <string name="hide_app_title">Magisk 앱 숨기는 중…</string>
@@ -213,22 +210,22 @@
     <string name="restore_img">이미지 복구</string>
     <string name="restore_img_msg">복구하는 중…</string>
     <string name="restore_done">복구 완료!</string>
-    <string name="restore_fail">순정 백업이 존재하지 않습니다!</string>
+    <string name="restore_fail">원 백업이 존재하지 않습니다!</string>
     <string name="setup_fail">설치 실패</string>
     <string name="env_fix_title">추가 설정 필요</string>
-    <string name="env_fix_msg">기기가 제대로 작동하려면 추가 설정이 필요합니다. 다시 시작 하시겠습니까?</string>
+    <string name="env_fix_msg">Magisk가 제대로 작동하려면 추가 설정이 필요합니다. 다시 시작 하시겠습니까?</string>
     <string name="setup_msg">환경 설정 진행 중…</string>
     <string name="authenticate">인증</string>
     <string name="unsupport_magisk_title">지원되지 않는 Magisk 버전</string>
     <string name="unsupport_magisk_msg">이 버전의 앱은 %1$s 미만의 Magisk 버전을 지원하지 않습니다.\n\n해당앱은 Magisk가 설치되지 않은것처럼 동작할것입니다. 가능한 빨리 Magisk 를 업데이트 하세요.</string>
     <string name="unsupport_general_title">비정상적인 상태</string>
-    <string name="unsupport_system_app_msg">해당 앱을 시스템 앱으로 실행하는 것은 지원하지 않습니다. 앱을 일반사용자 앱으로 실행해 주세요.</string>
-    <string name="unsupport_other_su_msg">Magisk 로 부터 설치되지 않은 \"su\" 바이너리가 감지되었습니다. 다른 루팅 솔루션을 제거하거나, Magisk 를 다시 설치해주세요.</string>
+    <string name="unsupport_system_app_msg">해당 앱을 시스템 앱으로 실행하는 것은 지원되지 않습니다. 앱을 일반 사용자 앱으로 실행해 주세요.</string>
+    <string name="unsupport_other_su_msg">Magisk으로 부터 설치되지 않은 \"su\" 바이너리가 감지되었습니다. 다른 루팅 방법을 제거하거나, Magisk 를 다시 설치해주세요.</string>
     <string name="unsupport_external_storage_msg">Magisk 가 외부 저장소에 설치되어 있습니다. Magisk 를 내부 저장소에 설치 해주세요.</string>
-    <string name="unsupport_nonroot_stub_msg">숨겨진 Magisk 앱은 루팅이 풀려 더이상 동작하지 않습니다. 원본 APK 를 복원하거나 재설치 해주세요.</string>
+    <string name="unsupport_nonroot_stub_msg">숨겨진 Magisk 앱은 루팅이 풀려 더이상 작동하지 못합니다. 본래 APK 를 복원하거나 재설치 해주세요.</string>
     <string name="unsupport_nonroot_stub_title">@string/settings_restore_app_title</string>
     <string name="external_rw_permission_denied">해당 기능을 사용하려면 저장소 권한을 허용해 주십시오.</string>
-    <string name="install_unknown_denied">이 기능을 활성화 하려면 "알수 없는 앱 설치"를 허용해주세요.</string>
+    <string name="install_unknown_denied">이 기능을 활성화 하려면 "알 수 없는 앱 설치"를 허용해주세요.</string>
     <string name="add_shortcut_title">홈 화면에 바로가기 추가</string>
     <string name="add_shortcut_msg">앱을 숨긴 후 아이콘과 이름을 알아보기 힘들 경우를 위해 알아보기 쉬운 바로가기를 홈 화면에 추가합니다.</string>
     <string name="app_not_found">해당 작업을 처리할 어플리케이션이 없습니다.</string>

app/src/main/res/values-lt/strings.xml

@@ -1,133 +1,241 @@
 <resources>
 
-    <!--Welcome Activity-->
-    <string name="modules">Papildiniai</string>
-    <string name="superuser">Supervartotojas</string>
-    <string name="logs">Įvykių sąrašas</string>
+    <!--Sections-->
+    <string name="modules">Moduliai</string>
+    <string name="superuser">Supernaudotojas</string>
+    <string name="logs">Žurnalas</string>
     <string name="settings">Nustatymai</string>
-    <string name="install">Instaliuoti</string>
+    <string name="install">Įdiegti</string>
+    <string name="section_home">Pagrindinis</string>
+    <string name="section_theme">Temos</string>
+    <string name="denylist">DenyList</string>
 
-    <!--Status Fragment-->
-    <string name="invalid_update_channel">Neteisingas atnaujinimų nustatymas</string>
+    <!--Home-->
+    <string name="no_connection">Nėra ryšio</string>
+    <string name="app_changelog">Keitimų sąrašas</string>
+    <string name="loading">Įkeliama…</string>
+    <string name="update">Naujinti</string>
+    <string name="not_available">Neįdiegta</string>
+    <string name="hide">Slėpti</string>
+    <string name="home_package">Paketas</string>
+    <string name="home_app_title">Programėlė</string>
 
-    <!--Install Fragment-->
-    <string name="keep_force_encryption">Palikti priverstinį šifravimą</string>
-    <string name="keep_dm_verity">Palikti dm-verity</string>
+    <string name="home_notice_content">Magisk siųskites TIK iš oficialiojo GitHub puslapio. Failai iš nežinomų šaltinių gali būti kenkėjiški!</string>
+    <string name="home_support_title">Palaikykite mus</string>
+    <string name="home_follow_title">Sekite mus</string>
+    <string name="home_item_source">Pirminis kodas</string>
+    <string name="home_support_content">Magisk yra ir visada bus nemokamas, atvirojo kodo. Tačiau galite paaukoti pinigų, jei norite parodyti, kad jums rūpi.</string>
+    <string name="home_installed_version">Įdiegta versija</string>
+    <string name="home_latest_version">Naujausia versija</string>
+    <string name="invalid_update_channel">Neteisingas naujinimų kanalas</string>
     <string name="uninstall_magisk_title">Pašalinti Magisk</string>
-    <string name="uninstall_magisk_msg">Visi papildiniai bus išjungti/pašalinti. Root bus panaikintas. Yra galimybė, kad duomenys bus užšifruoti…</string>
-    <string name="update">Atnaujinti</string>
+    <string name="uninstall_magisk_msg">Visi moduliai bus išjungti/pašalinti!\nRoot prieiga bus pašalinta!\nVidinė atmintis, iššifruota su Magisk, bus iš naujo užšifruota!</string>
 
-    <!--Module Fragment-->
+    <!--Install-->
+    <string name="keep_force_encryption">Neišjungti priverstinio šifravimo</string>
+    <string name="keep_dm_verity">Neišjungti AVB 2.0/dm-verity</string>
+    <string name="patch_vbmeta">Taisyti vbmeta boot vaizdą</string>
+    <string name="recovery_mode">Atkūrimo režimas</string>
+    <string name="install_options_title">Parinktys</string>
+    <string name="install_method_title">Būdas</string>
+    <string name="install_next">Toliau</string>
+    <string name="install_start">Įdiegti</string>
+    <string name="manager_download_install">Spustelėkite, kad atsisiųstumėte ir įdiegtumėte</string>
+    <string name="direct_install">Tiesioginis įdiegimas (rekomenduojama)</string>
+    <string name="install_inactive_slot">Įdiegti į antrąją vietą (po OTA naujinimo)</string>
+    <string name="install_inactive_slot_msg">Jūsų įremginys bus PRIVERSTAS pasileisti į dabartinę neaktyvią vietą po paleidimo iš naujo!\nNaudokite šią parinktį, kai OTA naujinimas yra baigtas.\nTęsti?</string>
+    <string name="setup_title">Išplėstinė sąranka</string>
+    <string name="select_patch_file">Pasirinkite ir taisykite failą</string>
+    <string name="patch_file_msg">Pasirinkite vaizdo failą (*.img) arba ODIN archyvą (*.tar)</string>
+    <string name="reboot_delay_toast">Paleidžiama iš naujo po 5 sekundžių…</string>
+    <string name="flash_screen_title">Įdiegimas</string>
+
+    <!--Superuser-->
+    <string name="su_request_title">Supernaudotojo užklausa</string>
+    <string name="touch_filtered_warning">Programėlė užstoja supernaudotojo užklausą, todėl Magisk negali patvirtinti jūsų atsakymo</string>
+    <string name="deny">Atmesti</string>
+    <string name="prompt">Klausti</string>
+    <string name="grant">Leisti</string>
+    <string name="su_warning">Suteikia prieigą prie jūsų įrenginio.\nAtmeskite, jei nesate tikri!</string>
+    <string name="forever">Amžinai</string>
+    <string name="once">Kartą</string>
+    <string name="tenmin">10 minučių</string>
+    <string name="twentymin">20 minučių</string>
+    <string name="thirtymin">30 minučių</string>
+    <string name="sixtymin">60 minučių</string>
+    <string name="su_allow_toast">%1$s suteiktos supernaudotojo teisės</string>
+    <string name="su_deny_toast">%1$s atmestos supernaudotojo teisės</string>
+    <string name="su_snack_grant">%1$s supernaudotojo teisės yra suteiktos</string>
+    <string name="su_snack_deny">%1$s supernaudotojo teisės yra atmestos</string>
+    <string name="su_snack_notif_on">%1$s pranešimai yra įjungti</string>
+    <string name="su_snack_notif_off">%1$s pranešimai yra išjungti</string>
+    <string name="su_snack_log_on">%1$s registravimas yra įjungtas</string>
+    <string name="su_snack_log_off">%1$s registravimas yra išjungtas</string>
+    <string name="su_revoke_title">Atšaukti?</string>
+    <string name="su_revoke_msg">Patvirtinkite %1$s supernaudotojo teisių atšaukimą</string>
+    <string name="toast">Iššokantys pranešimai</string>
+    <string name="none">Nėra</string>
+
+    <string name="superuser_toggle_notification">Pranešimai</string>
+    <string name="superuser_toggle_revoke">Atšaukti</string>
+    <string name="superuser_policy_none">Kol kas jokia programėlė neprašė supernaudotojo teisių.</string>
+
+    <!--Logs-->
+    <string name="log_data_none">Žurnalas tuščias</string>
+    <string name="log_data_magisk_none">Magisk žurnalas yra tuščias, keistoka</string>
+    <string name="menuSaveLog">Išsaugoti žurnalą</string>
+    <string name="menuClearLog">Valyti žurnalą</string>
+    <string name="logs_cleared">Žurnalas išvalytas</string>
+    <string name="pid">PID: %1$d</string>
+    <string name="target_uid">Tikslinis UID: %1$d</string>
+
+    <!--SafetyNet-->
+
+    <!--MagiskHide-->
+    <string name="show_system_app">Rodyti sistemos programėles</string>
+    <string name="show_os_app">Rodyti OS programėles</string>
+    <string name="hide_filter_hint">Filtruoti pagal pavadinimą</string>
+    <string name="hide_search">Ieškoti</string>
+
+    <!--Module-->
     <string name="no_info_provided">(Nėra informacijos)</string>
-    <string name="reboot_recovery">Perkrauti į Recovery</string>
-    <string name="reboot_bootloader">Perkrauti į Bootloader</string>
-    <string name="reboot_download">Perkrauti į Download režimą</string>
+    <string name="reboot_userspace">Paleidimas neišjungus</string>
+    <string name="reboot_recovery">Paleidimas į Recovery</string>
+    <string name="reboot_bootloader">Paleidimas į Bootloader</string>
+    <string name="reboot_download">Paleidimas į Download</string>
+    <string name="reboot_edl">Paleidimas į EDL</string>
+    <string name="module_version_author">%1$s nuo %2$s</string>
+    <string name="module_state_remove">Šalinti</string>
+    <string name="module_state_restore">Atkurti</string>
+    <string name="module_action_install_external">Įdiegti iš saugyklos</string>
+    <string name="update_available">Prieinamas naujinimas</string>
+    <string name="suspend_text_riru">Modulis išjungtas, nes %1$s yra įjungtas</string>
+    <string name="suspend_text_zygisk">Modulis išjungtas, nes %1$s nėra įjungtas</string>
+    <string name="zygisk_module_unloaded">Zygisk moduis neįkeltas dėl nesuderinamumo</string>
+    <string name="module_empty">Modulių nėra</string>
+    <string name="confirm_install">Įdiegti modulį %1$s?</string>
+    <string name="confirm_install_title">Įdiegimo patvirtinimas</string>
 
-    <!--Repo Fragment-->
-    <string name="update_available">Galimas atnaujinimas</string>
-    <string name="home_installed_version">Instaliuota</string>
-
-    <!--Log Fragment-->
-    <string name="menuSaveLog">Išsaugoti įvykių sąrašą</string>
-    <string name="menuClearLog">Išvalyti įvykių sąrašą</string>
-    <string name="logs_cleared">Įvykių sąrašas pašalintas</string>
-
-    <!--About Activity-->
-    <string name="app_changelog">Pakeitimų sąrašas</string>
-
-    <!--Toasts, Dialogs-->
-    <string name="repo_install_title">Instaliuoti %1$s %2$s(%3$d)</string>
-    <string name="download">Atsisiųsti</string>
-    <string name="reboot">Perkrauti</string>
-    <string name="magisk_update_title">Atsirado nauja Magisk versija!</string>
-    <string name="release_notes">Pakeitimai</string>
-    <string name="manager_download_install">Paspauskite, kad atsisiųstumėte ir instaliuotumėte</string>
-    <string name="update_channel">Magisk Atnaujinimai</string>
-    <string name="flashing">Instaliuojama</string>
-    <string name="direct_install">Tiesioginis instaliavimas (Rekomenduojamas)</string>
-    <string name="complete_uninstall">Pilnas pašalinimas</string>
-    <string name="restore_img">Atstatyti boot failą</string>
-    <string name="restore_img_msg">Atstatome…</string>
-    <string name="restore_done">Atstatymas įvykdytas!</string>
-    <string name="restore_fail">Gamyklinis atstatymo failas neegzistuoja!</string>
-    <string name="setup_fail">Pasiruošimas nesėkmingas</string>
-    <string name="env_fix_title">Reikalingas papildomas pasiruošimas</string>
-    <string name="setup_title">Papildomas pasiruošimas</string>
-    <string name="setup_msg">Paruošiama aplinka…</string>
-    <string name="download_file_error">Atsisiunčiant failą įvyko klaida</string>
-
-    <!--Settings Activity -->
+    <!--Settings-->
+    <string name="settings_dark_mode_title">Temos režimas</string>
+    <string name="settings_dark_mode_message">Pasirinkite režimą, kuris geriausiai atitinka jūsų stilių!</string>
+    <string name="settings_dark_mode_light">Visada šviesi</string>
+    <string name="settings_dark_mode_system">Sistemos</string>
+    <string name="settings_dark_mode_dark">Visada tamsi</string>
+    <string name="settings_download_path_title">Atsisiuntimo kelias</string>
+    <string name="settings_download_path_message">Failai bus išsaugoti %1$s</string>
+    <string name="settings_hide_app_title">Slėpti Magisk programėlę</string>
+    <string name="settings_hide_app_summary">Įdiegti įgaliotąją programėlę su atsitiktiniu paketo ID ir kitu pavadinimu</string>
+    <string name="settings_restore_app_title">Atkurti Magisk programėlę</string>
+    <string name="settings_restore_app_summary">Atkurti programėlę ir originalų APK</string>
     <string name="language">Kalba</string>
-    <string name="system_default">(Sistemos)</string>
-    <string name="settings_check_update_title">Automatiškas atnaujinimų ieškojimas</string>
-    <string name="settings_check_update_summary">Automatiškai ieškoti Magisk ir Magisk Manager atnaujinimų</string>
-    <string name="settings_update_channel_title">Atnaujinimų tipai</string>
-    <string name="settings_update_stable">Stabilūs</string>
+    <string name="system_default">(Sistemos numatytoji)</string>
+    <string name="settings_check_update_title">Naujinimų tikrinimas</string>
+    <string name="settings_check_update_summary">Periodiškai fone tikrinti, ar nėra naujinimų</string>
+    <string name="settings_update_channel_title">Naujinimų kanalas</string>
+    <string name="settings_update_stable">Stabilus</string>
     <string name="settings_update_beta">Beta</string>
-    <string name="settings_update_custom">Pasirinktiniai</string>
-    <string name="settings_update_custom_msg">Įvesti pasirinktinį URL</string>
-    <string name="settings_hosts_title">Sistemos padejėjai</string>
-    <string name="settings_hosts_summary">Įgalinti sistemos padejėjus Adblock programėlėms</string>
-
-    <string name="settings_su_app_adb">Programėlėms ir ADB</string>
-    <string name="settings_su_app">Tik programėlėms</string>
+    <string name="settings_update_custom">Tinkintas</string>
+    <string name="settings_update_custom_msg">Įdėkite tinkinto kanalo URL</string>
+    <string name="settings_zygisk_summary">Vykdyti Magisk dalis zygote tarnyboje</string>
+    <string name="settings_denylist_title">Aktyvinti DenyList</string>
+    <string name="settings_denylist_summary">Visos procesų, esančių denylist, Magisk modifikacijos bus atkurtos</string>
+    <string name="settings_denylist_error">Šiai funkcijai reikia, kad būtų įjungta %1$s</string>
+    <string name="settings_denylist_config_title">Konfigūruoti DenyList</string>
+    <string name="settings_denylist_config_summary">Pasirinkite procesus, kuriuos norite įtraukti į denylist</string>
+    <string name="settings_hosts_title">Basisteminis hosts</string>
+    <string name="settings_hosts_summary">Basisteminis hosts palaiko reklamų blokatorių programėlėms</string>
+    <string name="settings_hosts_toast">Pridėtas besisteminio hosts modulis</string>
+    <string name="settings_app_name_hint">Naujas pavadinimas</string>
+    <string name="settings_app_name_helper">Programėlė bus perpakuota su šiuo pavadinimu</string>
+    <string name="settings_app_name_error">Netinkamas formatas</string>
+    <string name="settings_su_app_adb">Programėlės ir ADB</string>
+    <string name="settings_su_app">Tik programėlės</string>
     <string name="settings_su_adb">Tik ADB</string>
     <string name="settings_su_disable">Išjungta</string>
     <string name="settings_su_request_10">10 sekundžių</string>
     <string name="settings_su_request_15">15 sekundžių</string>
     <string name="settings_su_request_20">20 sekundžių</string>
     <string name="settings_su_request_30">30 sekundžių</string>
-    <string name="settings_su_request_45">45 sekundžių</string>
+    <string name="settings_su_request_45">45 sekundės</string>
     <string name="settings_su_request_60">60 sekundžių</string>
-    <string name="superuser_access">Supervartotojo prieiga</string>
+    <string name="superuser_access">Prieigos lygis</string>
     <string name="auto_response">Automatinis atsakymas</string>
-    <string name="request_timeout">Prašymo laikas baigiasi po</string>
-    <string name="superuser_notification">Supervartotojo pranešimai</string>
-    <string name="settings_su_reauth_title">Pakartotinai patvirtinti po atnaujinimo</string>
-    <string name="settings_su_reauth_summary">Pakartotinai patvirtinti supervartotojo leidimus po programėlės atnaujinimo</string>
+    <string name="request_timeout">Atsakymo laukimas</string>
+    <string name="superuser_notification">Supernaudotojo pranešimas</string>
+    <string name="settings_su_reauth_title">Pakartotinis autentifikavimas</string>
+    <string name="settings_su_reauth_summary">Iš naujo prašyti supernaudotojo teisių po programėlių naujinimo</string>
+    <string name="settings_su_tapjack_title">Bakstelėjimų perėmimo apsauga</string>
+    <string name="settings_su_tapjack_summary">Supernaudotojo užklausos langas bus neaktyvus, kol jis yra užstotas kito lango</string>
+    <string name="settings_customization">Tinkinimas</string>
+    <string name="setting_add_shortcut_summary">Pridėti nuorodą į pagrindinį ekraną, jei po programėlės paslėpimo yra sunku atpažinti jos pavadinimą ir piktogramą</string>
+    <string name="settings_doh_title">DNS virš HTTPS</string>
+    <string name="settings_doh_description">Aktyvinti DoH (naudokite, jei kyla problemų jungiantis prie tinklo</string>
 
-    <string name="multiuser_mode">Daugialypio vartotojo režimas</string>
+    <string name="multiuser_mode">Daugelio naudotojų režimas</string>
     <string name="settings_owner_only">Tik įrenginio savininkas</string>
-    <string name="settings_owner_manage">Įrenginio savininko valdomas</string>
-    <string name="settings_user_independent">Visų</string>
-    <string name="owner_only_summary">Tik įrenginio savininkas turi root prieigą</string>
-    <string name="owner_manage_summary">Tik įrenginio savinkas gali tvarkyti root prieigą ir gauti lenteles prašančias root prieigos</string>
-    <string name="user_independent_summary">Kiekvienas vartotojas turi savo atskiras root taisykles</string>
+    <string name="settings_owner_manage">Valdoma įrenginio savininko</string>
+    <string name="settings_user_independent">Naudotojų taisyklės</string>
+    <string name="owner_only_summary">Tik savininkas turi root prieigą</string>
+    <string name="owner_manage_summary">Tik savininkas gali tvarkyti root prieigą ir gauti užklausas</string>
+    <string name="user_independent_summary">Kiekvienas naudotojas turi savo atskiras root taisykles</string>
 
-    <string name="mount_namespace_mode">Root sesijos vardų srities režimas</string>
-    <string name="settings_ns_global">Globali vardų sritis</string>
-    <string name="settings_ns_requester">Paveldima vardų sritis</string>
-    <string name="settings_ns_isolate">Izoliuota vardų sritis</string>
-    <string name="global_summary">Visos root sesijos naudoja globalią vardų sritį</string>
-    <string name="requester_summary">Root sesijos paveldi jos išprašytojo/s vardų sritį</string>
-    <string name="isolate_summary">Kiekviena root sesija turi savo izoliuotą vardų sritį</string>
+    <string name="mount_namespace_mode">Pavadinimų erdvės režimas</string>
+    <string name="settings_ns_global">Bendra pavadinimų erdvė</string>
+    <string name="settings_ns_requester">Paveldima pavadinimų erdvė</string>
+    <string name="settings_ns_isolate">Izoliuota pavadinimų erdvė</string>
+    <string name="global_summary">Visos root sesijos naudos bendrą pavainimų erdvę</string>
+    <string name="requester_summary">Root sesijos paveldės prašytojų pavadinimų erdvę</string>
+    <string name="isolate_summary">Kiekviena root sesija turės savo izoliuotą pavadinimų erdvę</string>
 
-    <!--Superuser-->
-    <string name="su_request_title">Supervartotojo prašymas</string>
-    <string name="deny">Atmesti</string>
-    <string name="prompt">Klausti</string>
-    <string name="grant">Suteikti(a)</string>
-    <string name="su_warning">Supervartotojo prieiga suteikia pilną prieigą prie jūsų įrenginio\nAtmeskite jei neesate tikri dėl programėlės patikimumo!</string>
-    <string name="forever">Visados</string>
-    <string name="once">Vieną kartą</string>
-    <string name="tenmin">10 min</string>
-    <string name="twentymin">20 min</string>
-    <string name="thirtymin">30 min</string>
-    <string name="sixtymin">60 min</string>
-    <string name="su_allow_toast">%1$s gavo supervartotojo teises</string>
-    <string name="su_deny_toast">%1$s negavo supervartotojo teisių</string>
-    <string name="su_snack_grant">%1$s supervartotojo teisių prašymas buvo atsakytas teigiamai</string>
-    <string name="su_snack_deny">%1$s supervartotojo teisių prašymas buvo atmestas</string>
-    <string name="su_snack_notif_on">Buvo įjungta %1$s pranešimai</string>
-    <string name="su_snack_notif_off">Buvo išjungta %1$s pranešimai</string>
-    <string name="su_snack_log_on">%1$s įvykių surašymas yra įgalintas</string>
-    <string name="su_snack_log_off">%1$s įvykių surašymas yra išjungtas</string>
-    <string name="su_revoke_title">Neleisti?</string>
-    <string name="su_revoke_msg">Neleisti %1$s naudotis supervartotojo teisėmis?</string>
-    <string name="toast">Išmesti</string>
-    <string name="none">Nėra</string>
+    <!--Notifications-->
+    <string name="update_channel">Magisk naujinimai</string>
+    <string name="progress_channel">Progreso pranešimai</string>
+    <string name="updated_channel">Naujinimas baigtas</string>
+    <string name="download_complete">Atsisiuntimas baigtas</string>
+    <string name="download_file_error">Klaida atsisiunčiant failą</string>
+    <string name="magisk_update_title">Prieinamas Magisk naujinimas!</string>
+    <string name="updated_title">Magisk atnaujintas</string>
+    <string name="updated_text">Bakstelėkite, kad atidarytumėte programėlę</string>
 
-    <!--Superuser logs-->
-    <string name="target_uid">Target UID: %1$d</string>
+    <!--Toasts, Dialogs-->
+    <string name="yes">Taip</string>
+    <string name="no">Ne</string>
+    <string name="repo_install_title">Įdiegimas %1$s %2$s(%3$d)</string>
+    <string name="download">Atsisiųsti</string>
+    <string name="reboot">Paleisti iš naujo</string>
+    <string name="release_notes">Laidos informacija</string>
+    <string name="flashing">Diegiama…</string>
+    <string name="done">Baigta!</string>
+    <string name="failure">Nepavyko!</string>
+    <string name="hide_app_title">Slepiama Magisk programėlė…</string>
+    <string name="open_link_failed_toast">Nerasta programėlių nuorodos atidarymui</string>
+    <string name="complete_uninstall">Visiškas pašalinimas</string>
+    <string name="restore_img">Atkurti vaizdą</string>
+    <string name="restore_img_msg">Atkuriama…</string>
+    <string name="restore_done">Atkūrimas baigtas!</string>
+    <string name="restore_fail">Nėra atsarginės kopijos!</string>
+    <string name="setup_fail">Sąranka nepavyko</string>
+    <string name="env_fix_title">Reikalinga išplėstinė sąranka</string>
+    <string name="env_fix_msg">Jūsų įrenginiui reikalinga išplėstinė sąranka, kad Magisk veiktų tinkamai. Norite tęsti ir įrenginį paleisti iš naujo?</string>
+    <string name="env_full_fix_msg">Jūsų įrenginiui reikia iš naujo įdiegti Magisk, kad jis veiktų tinkamai. Iš naujo įdiekite Magisk su programėle, atkūrimo režimas negali gauti teisingos įrenginio informacijos.</string>
+    <string name="setup_msg">Vykdoma Running aplinkos sąranka…</string>
+    <string name="authenticate">Autentifikavimas</string>
+    <string name="unsupport_magisk_title">Nepalaikoma Magisk versija</string>
+    <string name="unsupport_magisk_msg">Ši programėlės versija nepalaiko Magisk versijų, žemesnių už %1$s.\n\nProgramėlė veiks taip, lyg Magisk yra neįdiegtas. Kuo greičiau atnaujinkite Magisk.</string>
+    <string name="unsupport_general_title">Nenormali būsena</string>
+    <string name="unsupport_system_app_msg">Šios programėlės vykdymas kaip sistemos programėlės yra nepalaikomas. Nustatykite ją atgal į naudotojo programėlę.</string>
+    <string name="unsupport_other_su_msg">Aptiktas dvejetainis failas \"su\" ne iš Magisk. Pašalinkite pašalinį root teisių tiekėją ir/arba iš naujo įdiekite Magisk.</string>
+    <string name="unsupport_external_storage_msg">Magisk yra įdiegtas išorinėje saugykloje. Perkelkite programėlę į vidinę saugyklą.</string>
+    <string name="unsupport_nonroot_stub_msg">Paslėpta Magisk programėlė negali tęsti darbo, nes root teisės buvo prarastos. Atkurkite originalų APk.</string>
+    <string name="unsupport_nonroot_stub_title">@string/settings_restore_app_title</string>
+    <string name="external_rw_permission_denied">Suteikti prieigą prie saugyklos</string>
+    <string name="post_notifications_denied">Suteikti prieigą prie pranešimų</string>
+    <string name="install_unknown_denied">Suteikti prieigą prie įdiegimo iš nežinomų šaltinių</string>
+    <string name="add_shortcut_title">Pridėti nuorodą į pagrindinį ekraną</string>
+    <string name="add_shortcut_msg">Po šios programėlės paslėpimo jos pavadinimas, piktograma gali būti sunkiai atpažįstamos. Norite pridėti nuorodą į pagrindinį ekraną?</string>
+    <string name="app_not_found">Nerasta programėlė, galinti atlikti šį veiksmą</string>
+    <string name="reboot_apply_change">Paleiskite iš naujo, kad pritaikytumėte pakeitimus</string>
+    <string name="restore_app_confirmation">Šis veiksmas atkurs paslėptą programėlę į originalią būseną. Tikrai norite tai padaryti?</string>
 
 </resources>

app/src/main/res/values-ml/strings.xml

@@ -165,10 +165,7 @@
     <string name="settings_su_reauth_summary">ആപ്പുകൾ അപ്‌ഗ്രേഡ് ചെയ്‌തതിന് ശേഷം സൂപ്പർയൂസർ അനുമതികൾക്കായി വീണ്ടും ആവശ്യപ്പെടുക</string>
     <string name="settings_su_tapjack_title">ടാപ്പ്ജാക്കിംഗ് സംരക്ഷണം</string>
     <string name="settings_su_tapjack_summary">സൂപ്പർയൂസർ പ്രോംപ്റ്റ് ഡയലോഗ് മറ്റേതെങ്കിലും വിൻഡോയോ ഓവർലേയോ മറയ്ക്കുമ്പോൾ ഇൻപുട്ടിനോട് പ്രതികരിക്കില്</string>
-    <string name="settings_su_biometric_title">ബയോമെട്രിക് പ്രാമാണീകരണം</string>
-    <string name="settings_su_biometric_summary">സൂപ്പർയൂസർ അഭ്യർത്ഥനകൾ അനുവദിക്കുന്നതിന് ബയോമെട്രിക് പ്രാമാണീകരണം ഉപയോഗിക്കുക</string>
     <string name="settings_customization">Customization</string>
-    <string name="no_biometric">പിന്തുണയ്‌ക്കാത്ത ഉപകരണം അല്ലെങ്കിൽ ബയോമെട്രിക് ഒന്നും പ്രവർത്തനക്ഷമമാക്കിയിട്ടില്ല</string>
     <string name="setting_add_shortcut_summary">ആപ്പ് മറച്ചതിന് ശേഷം പേരും ഐക്കണും തിരിച്ചറിയാൻ പ്രയാസമാണെങ്കിൽ ഹോം സ്‌ക്രീനിലേക്ക് മനോഹരമായ ഒരു ഷോർട്ട്ക്കട് ചേർക്കുക</string>
     <string name="settings_doh_title">DNS ഓവർ HTTPS</string>
     <string name="settings_doh_description">ചില രാജ്യങ്ങളിൽ DNS പോയ്സണിങിന് പരിഹാരം</string>

app/src/main/res/values-nb/strings.xml

@@ -152,9 +152,6 @@
     <string name="settings_su_reauth_summary">Identitetsbekreft superbrukertilganger etter programoppgraderinger</string>
     <string name="settings_su_tapjack_title">Trykkstjelingsbeskyttelse</string>
     <string name="settings_su_tapjack_summary">Superbrukings-forespørselsdialogen vil ikke svare på inndata mens den dekkes av et annet vindu eller lag</string>
-    <string name="settings_su_biometric_title">Biometrisk identitetsbekreftelse</string>
-    <string name="settings_su_biometric_summary">Bruk biometrisk identitetsbekreftelse for å tillate superbruker-forespørsler</string>
-    <string name="no_biometric">Ustøttet enhet, eller mangel på biometrisk oppsett</string>
     <string name="settings_customization">Tilpasning</string>
     <string name="setting_add_shortcut_summary">Legg til fin snarvei på hjemmeskjermen i fall navnet og ikonet er vanskelig å gjenkjenne etter skjuling av programmet</string>
     <string name="settings_doh_title">DNS over HTTPS</string>

app/src/main/res/values-nl/strings.xml

@@ -141,9 +141,6 @@
     <string name="superuser_notification">Superusermelding</string>
     <string name="settings_su_reauth_title">Opnieuw goedkeuren na update</string>
     <string name="settings_su_reauth_summary">Superuserrechten opnieuw goedkeuren na app-updates.</string>
-    <string name="settings_su_biometric_title">Biometrische authenticatie gebruiken</string>
-    <string name="settings_su_biometric_summary">Gebruik biometrische authenticatie om superuserverzoeken goed te keuren.</string>
-    <string name="no_biometric">Niet-ondersteund apparaat of geen biometrische authenticatie ingesteld</string>
     <string name="settings_customization">Aanpassingen</string>
 
     <string name="multiuser_mode">Meerdere gebruikers</string>

app/src/main/res/values-pa/strings.xml

@@ -143,9 +143,6 @@
     <string name="superuser_notification">ਸੁਪਰਯੂਜ਼ਰ ਸੂਚਨਾ</string>
     <string name="settings_su_reauth_title">ਅਪਗ੍ਰੇਡ ਹੋਣ ਤੋਂ ਬਾਅਦ ਪ੍ਰਮਾਣਿਕਤਾ</string>
     <string name="settings_su_reauth_summary">ਇੱਕ ਐਪ ਦੇ ਅਪਡੇਟ ਹੋਣ ਤੋਂ ਬਾਅਦ ਸੁਪਰਯੂਜ਼ਰ ਆਗਿਆ ਪ੍ਰਮਾਣਿਤ ਕਰੋ</string>
-    <string name="settings_su_biometric_title">ਬਾਇਓਮੈਟ੍ਰਿਕ ਪ੍ਰਮਾਣਿਕਤਾ ਦਾ ਯੋਗ ਕਰੋ</string>
-    <string name="settings_su_biometric_summary">ਸੁਪਰਯੂਜ਼ਰ ਦੀ ਆਗਿਆ ਦੇਣ ਲਈ ਬਾਇਓਮੈਟ੍ਰਿਕ ਪ੍ਰਮਾਣੀਕਰਣ ਦੀ ਵਰਤੋਂ ਕਰੋ</string>
-    <string name="no_biometric">ਅਸਮਰਥਿਤ ਡਿਵਾਈਸ ਜਾਂ ਕੋਈ ਬਾਇਓਮੈਟ੍ਰਿਕ ਸੈਟਿੰਗ ਸਮਰਥਿਤ ਨਹੀਂ ਹੈ</string>
     <string name="settings_customization">ਕਸਟਮਾਈਜੇਸ਼ਨ</string>
     <string name="setting_add_shortcut_summary">ਐਪ ਨੂੰ ਲੁਕਾਉਣ ਤੋਂ ਬਾਅਦ ਨਾਮ ਅਤੇ ਆਈਕਾਨ ਨੂੰ ਪਛਾਣਨਾ ਮੁਸ਼ਕਲ ਹੈ, ਤਾਂ ਹੋਮ ਸਕ੍ਰੀਨ ਵਿਚ ਇਕ ਸੁੰਦਰ ਸ਼ਾਰਟਕੱਟ ਸ਼ਾਮਲ ਕਰੋ</string>
     <string name="settings_doh_title">DNS ਉੱਤੇ HTTPS</string>

app/src/main/res/values-pl/strings.xml

@@ -167,9 +167,6 @@
     <string name="settings_su_reauth_summary">Ponowienie dostępu do uprawnień Superusera po uaktualnieniu aplikacji</string>
     <string name="settings_su_tapjack_title">Włącz ochronę przed Tapjacking (niezamierzone kliknięcie)</string>
     <string name="settings_su_tapjack_summary">Pytanie o Superuser nie będzie reagować na odpowiedź jeżeli będzie zasłonięte lub przyćmione.</string>
-    <string name="settings_su_biometric_title">Uwierzytelnianie biometryczne</string>
-    <string name="settings_su_biometric_summary">Używaj uwierzytelniania biometrycznego (np. odcisku palca) aby przyznać uprawnienia Superusera</string>
-    <string name="no_biometric">Urządzenie jest nieobsługiwane lub ustawienia biometryczne nie są włączone</string>
     <string name="settings_customization">Personalizacja</string>
     <string name="setting_add_shortcut_summary">Dodaj ładny skrót na ekranie głównym na wypadek, gdyby nazwa i ikona były trudne do rozpoznania po ukryciu aplikacji</string>
     <string name="settings_doh_title">DNS over HTTPS</string>

app/src/main/res/values-pt-rBR/strings.xml

@@ -45,7 +45,7 @@
     <string name="install_inactive_slot_msg">Seu dispositivo será FORÇADO a inicializar no slot inativo atual após uma reinicialização!\nSó use esta opção após a conclusão do OTA.\nDeseja continuar?</string>
     <string name="setup_title">Configuração adicional</string>
     <string name="select_patch_file">Selecione e corrija um arquivo</string>
-    <string name="patch_file_msg">Selecione um arquivo imagem (*.img) ou um arquivo tar (*.tar)</string>
+    <string name="patch_file_msg">Selecione um arquivo imagem (*.img) ou um arquivo tar (*.tar) ou um arquivo payload.bin (*.bin)</string>
     <string name="reboot_delay_toast">Reiniciando em 5 segundos…</string>
     <string name="flash_screen_title">Instalação</string>
 
@@ -86,6 +86,9 @@
     <string name="logs_cleared">Registro limpo com sucesso.</string>
     <string name="pid">PID: %1$d</string>
     <string name="target_uid">Alvo UID: %1$d</string>
+    <string name="target_pid">Alvo PID: %s</string>
+    <string name="selinux_context">Contexto SELinux: %s</string>
+    <string name="supp_group">Grupo suplementar: %s</string>
 
     <!--MagiskHide-->
     <string name="show_system_app">Mostrar apps do Sistema</string>
@@ -109,6 +112,8 @@
     <string name="suspend_text_zygisk">Módulo suspenso porque %1$s não está ativo</string>
     <string name="zygisk_module_unloaded">Modulo Zygisk não carregado devido a incompatibilidade</string>
     <string name="module_empty">Nenhum módulo instalado</string>
+    <string name="confirm_install">Instalar módulo %1$s?</string>
+    <string name="confirm_install_title">Confirmação de Instalação</string>
 
     <!--Settings-->
     <string name="settings_dark_mode_title">Modo de tema</string>
@@ -161,9 +166,6 @@
     <string name="settings_su_reauth_summary">Reautenticar permissões de SuperUsuário após atualizar aplicativo</string>
     <string name="settings_su_tapjack_title">Ativar Proteção Contra Atividades Sobrepostas</string>
     <string name="settings_su_tapjack_summary">A caixa de diálogo do SuperUsuário não responderá à entrada enquanto estiver obscurecida por qualquer outra janela ou sobreposição</string>
-    <string name="settings_su_biometric_title">Ativar Autenticação Biométrica</string>
-    <string name="settings_su_biometric_summary">Use a autenticação biométrica para permitir solicitações de SuperUsuário</string>
-    <string name="no_biometric">Dispositivo não suportado ou nenhuma configuração biométrica está ativada</string>
     <string name="settings_customization">Personalizações</string>
     <string name="setting_add_shortcut_summary">Adicione um atalho na tela inicial, caso o nome e o ícone sejam difíceis de reconhecer logo após ocultar o aplicativo</string>
     <string name="settings_doh_title">Ativar DNS sobre HTTPS</string>
@@ -213,6 +215,7 @@
     <string name="setup_fail">Falha na instalação</string>
     <string name="env_fix_title">Configuração adicional exigida</string>
     <string name="env_fix_msg">Seu dispositivo exige uma configuração adicional para o Magisk funcionar corretamente. Deseja continuar e reiniciar?</string>
+    <string name="env_full_fix_msg">Seu dispositivo precisa refazer o flash do Magisk para funcionar corretamente. Reinstale o Magisk no aplicativo, o modo de recuperação não pode obter as devidas informações do dispositivo.</string>
     <string name="setup_msg">Executando a configuração do ambiente…</string>
     <string name="authenticate">Autenticar</string>
     <string name="unsupport_magisk_title">Versão do Magisk não suportada</string>

app/src/main/res/values-pt-rPT/strings.xml

@@ -45,7 +45,7 @@
     <string name="install_inactive_slot_msg">Seu dispositivo será FORÇADO a inicializar no slot inativo atual após uma reinicialização!\nSó use esta opção após a conclusão do OTA.\nDeseja continuar?</string>
     <string name="setup_title">Configuração adicional</string>
     <string name="select_patch_file">Selecione e corrija um arquivo</string>
-    <string name="patch_file_msg">Selecione um arquivo imagem (*.img) ou um arquivo tar (*.tar)</string>
+    <string name="patch_file_msg">Selecione um arquivo imagem (*.img) ou um arquivo tar (*.tar) ou um arquivo payload.bin (*.bin)</string>
     <string name="reboot_delay_toast">Reiniciando em 5 segundos…</string>
     <string name="flash_screen_title">Instalação</string>
 
@@ -86,6 +86,9 @@
     <string name="logs_cleared">Registro limpo com sucesso.</string>
     <string name="pid">PID: %1$d</string>
     <string name="target_uid">Alvo UID: %1$d</string>
+    <string name="target_pid">Alvo PID: %s</string>
+    <string name="selinux_context">Contexto SELinux: %s</string>
+    <string name="supp_group">Grupo suplementar: %s</string>
 
     <!--MagiskHide-->
     <string name="show_system_app">Mostrar apps do Sistema</string>
@@ -109,6 +112,8 @@
     <string name="suspend_text_zygisk">Módulo suspenso porque %1$s não está ativo</string>
     <string name="zygisk_module_unloaded">Modulo Zygisk não carregado devido a incompatibilidade</string>
     <string name="module_empty">Nenhum módulo instalado</string>
+    <string name="confirm_install">Instalar módulo %1$s?</string>
+    <string name="confirm_install_title">Confirmação de Instalação</string>
 
     <!--Settings-->
     <string name="settings_dark_mode_title">Modo de tema</string>
@@ -161,9 +166,6 @@
     <string name="settings_su_reauth_summary">Reautenticar permissões de SuperUsuário após atualizar aplicativo</string>
     <string name="settings_su_tapjack_title">Ativar Proteção Contra Atividades Sobrepostas</string>
     <string name="settings_su_tapjack_summary">A caixa de diálogo do SuperUsuário não responderá à entrada enquanto estiver obscurecida por qualquer outra janela ou sobreposição</string>
-    <string name="settings_su_biometric_title">Ativar Autenticação Biométrica</string>
-    <string name="settings_su_biometric_summary">Use a autenticação biométrica para permitir solicitações de SuperUsuário</string>
-    <string name="no_biometric">Dispositivo não suportado ou nenhuma configuração biométrica está ativada</string>
     <string name="settings_customization">Personalizações</string>
     <string name="setting_add_shortcut_summary">Adicione um atalho na tela inicial, caso o nome e o ícone sejam difíceis de reconhecer logo após ocultar o aplicativo</string>
     <string name="settings_doh_title">Ativar DNS sobre HTTPS</string>
@@ -213,6 +215,7 @@
     <string name="setup_fail">Falha na instalação</string>
     <string name="env_fix_title">Configuração adicional exigida</string>
     <string name="env_fix_msg">Seu dispositivo exige uma configuração adicional para o Magisk funcionar corretamente. Deseja continuar e reiniciar?</string>
+    <string name="env_full_fix_msg">Seu dispositivo precisa refazer o flash do Magisk para funcionar corretamente. Reinstale o Magisk no aplicativo, o modo de recuperação não pode obter as devidas informações do dispositivo.</string>
     <string name="setup_msg">Executando a configuração do ambiente…</string>
     <string name="authenticate">Autenticar</string>
     <string name="unsupport_magisk_title">Versão do Magisk não suportada</string>

app/src/main/res/values-ro/strings.xml

@@ -167,9 +167,6 @@
     <string name="settings_su_reauth_summary">Cere din nou permisiunile de superutilizator după actualizarea aplicațiilor</string>
     <string name="settings_su_tapjack_title">Protecție față de tapjacking</string>
     <string name="settings_su_tapjack_summary">Caseta de dialog pentru solicitarea permisiunilor de superutilizator nu va răspunde la input cât timp este ascunsă de orice altă fereastră sau suprapunere</string>
-    <string name="settings_su_biometric_title">Autentificare biometrică</string>
-    <string name="settings_su_biometric_summary">Folosește autentificarea biometrică pentru a permite cereri de superutilizator</string>
-    <string name="no_biometric">Dispozitiv nesuportat sau nu sunt activate setări biometrice</string>
     <string name="settings_customization">Personalizare</string>
     <string name="setting_add_shortcut_summary">Adaugă o comandă rapidă frumoasă în ecranul de pornire în cazul în care numele și pictograma sunt dificil de recunoscut după ascunderea aplicației</string>
     <string name="settings_doh_title">DNS prin HTTPS</string>

app/src/main/res/values-ru/strings.xml

@@ -167,9 +167,6 @@
     <string name="settings_su_reauth_summary">Повторный запрос прав суперпользователя после обновления приложений</string>
     <string name="settings_su_tapjack_title">Защита от перехвата нажатий</string>
     <string name="settings_su_tapjack_summary">Окно запроса прав суперпользователя будет неактивно пока активированы наложения экрана</string>
-    <string name="settings_su_biometric_title">Биометрическая аутентификация</string>
-    <string name="settings_su_biometric_summary">Принимать запросы прав суперпользователя только после биометрической аутентификации</string>
-    <string name="no_biometric">Функция не поддерживается устройством или не заданы настройки блокировки экрана</string>
     <string name="settings_customization">Персонализация</string>
     <string name="setting_add_shortcut_summary">Добавить ярлык на рабочий стол для удобного восприятия приложения после его скрытия</string>
     <string name="settings_doh_title">DNS поверх HTTPS</string>

app/src/main/res/values-sk/strings.xml

@@ -46,7 +46,7 @@
     <string name="install_inactive_slot_msg">Vaše zariadenie bude po reštarte PRINÚTENÉ nabootovať do aktuálne neaktívneho slotu!\nTúto voľbu použite iba po skončení OTA.\nPokračovať?</string>
     <string name="setup_title">Ďalšie nastavenia</string>
     <string name="select_patch_file">Vybrať a zaplátať súbor</string>
-    <string name="patch_file_msg">Vyberte raw súbor (*.img) alebo tar súbor ODIN (*.tar)</string>
+    <string name="patch_file_msg">Vyberte raw súbor (*.img) alebo tar súbor ODIN (*.tar) alebo payload.bin (*.bin)</string>
     <string name="reboot_delay_toast">Reštart o 5 sekúnd…</string>
     <string name="flash_screen_title">Inštalácia</string>
 
@@ -87,7 +87,10 @@
     <string name="menuClearLog">Odstrániť záznam</string>
     <string name="logs_cleared">Záznam úspešne odstránený</string>
     <string name="pid">PID:%1$d</string>
-    <string name="target_uid">Cieľový UID: %1$d</string>
+    <string name="target_uid">Cieľové UID: %1$d</string>
+    <string name="target_pid">Pripojiť ns cieľový PID: %s</string>
+    <string name="selinux_context">SELinux kontext: %s</string>
+    <string name="supp_group">Doplnková skupina: %s</string>
 
     <!--SafetyNet-->
 
@@ -167,9 +170,9 @@
     <string name="settings_su_reauth_summary">Opätovne vyzve na udelenie oprávnení Superužívateľa po upgrade aplikácie</string>
     <string name="settings_su_tapjack_title">Ochrana pred tapjackingom</string>
     <string name="settings_su_tapjack_summary">Dialógové okno superužívateľa nebude reagovať na zadanie, ak je zakryté alebo prekryté iným oknom</string>
-    <string name="settings_su_biometric_title">Biometrické overenie</string>
-    <string name="settings_su_biometric_summary">Použije biometrickú autentifikáciu na povolenie žiadostí superužívateľa</string>
-    <string name="no_biometric">Nepodporované zariadenie alebo žiadne biometrické nastavenia nie sú povolené</string>
+    <string name="settings_su_auth_title">Overenie používateľa</string>
+    <string name="settings_su_auth_summary">Žiadosť o overenie používateľa počas požiadaviek Superužívateľa</string>
+    <string name="settings_su_auth_insecure">V zariadení nie je nakonfigurovaná žiadna metóda overovania</string>
     <string name="settings_customization">Prispôsobenie</string>
     <string name="setting_add_shortcut_summary">V prípade, že sa po skrytí apky názov a ikona ťažko rozpoznávajú, pridať na domovskú obrazovku odkaz</string>
     <string name="settings_doh_title">DNS over HTTPS</string>

app/src/main/res/values-sq/strings.xml

@@ -46,7 +46,7 @@
     <string name="install_inactive_slot_msg">Pajisja juaj do të detyrohet të fillojë në folenë aktuale joaktive pas një rindezje!\nPërdoreni këtë opsion vetëm pasi të keni përfunduar OTA.\nVazhdo?</string>
     <string name="setup_title">Konfigurimet shtesë</string>
     <string name="select_patch_file">Zgjidhni dhe Patch një skader</string>
-    <string name="patch_file_msg">Zgjidhni një imazh të papërpunuar (*.img) ose një ODIN tar skader (*.tar)</string>
+    <string name="patch_file_msg">Zgjidhni një imazh të papërpunuar (*.img) ose një skedar ODIN (*.tar) ose një payload.bin (*.bin)</string>
     <string name="reboot_delay_toast">Rinisje pas 5 sekondash…</string>
     <string name="flash_screen_title">Instalimi</string>
 
@@ -88,6 +88,9 @@
     <string name="logs_cleared">Regjistrat u pastuan me sukses</string>
     <string name="pid">PID: %1$d</string>
     <string name="target_uid">Target UID: %1$d</string>
+    <string name="target_pid">Montoni PID të synuar ns: %s</string>
+    <string name="selinux_context">Konteksti SELinux: %s</string>
+    <string name="supp_group">Grupi suplementar: %s</string>
 
     <!--SafetyNet-->
 
@@ -167,9 +170,6 @@
     <string name="settings_su_reauth_summary">Ri-vërtetoni lejet e super-përdoruesit pas azhurnimit të aplikacionit</string>
     <string name="settings_su_tapjack_title">Aktivizo mbrojtjen tapjacking</string>
     <string name="settings_su_tapjack_summary">Dialogu i menjëhershëm i super-përdoruesit nuk do ti përgjigjet hyrjes ndërsa është i errësuar nga ndonjë dritare ose mbivendosje tjetër</string>
-    <string name="settings_su_biometric_title">Aktivizo vërtetimin biometrik</string>
-    <string name="settings_su_biometric_summary">Përdorni vërtetimin biometrik për të lejuar kërkesat e super-përdoruesit</string>
-    <string name="no_biometric">Pajisja e pambështetur ose cilësimet biometrike nuk janë të aktivizuara</string>
     <string name="settings_customization">Personalizimi</string>
     <string name="setting_add_shortcut_summary">Shtoni një shkurtore mjaft të mirë në ekranin fillestar në rast se emri dhe ikona janë të vështira për tu njohur pasi keni fshehur aplikacionin</string>
     <string name="settings_doh_title">DNS mbi HTTPS</string>
@@ -188,7 +188,10 @@
     <string name="global_summary">Të gjitha sesionet rrënjë përdorin hapësirën globale të emrave të montimit</string>
     <string name="requester_summary">Seancat rrënjësore do të trashëgojnë hapësirën e emrave të kërkuesit të tyre</string>
     <string name="isolate_summary">Çdo sesion rrënjë do të ketë hapësirën e vet të izoluar të emrave</string>
-
+    <string name="settings_su_auth_title">Vërtetimi i përdoruesit</string>
+    <string name="settings_su_auth_summary">Kërkoni vërtetimin e përdoruesit gjatë kërkesave të Superpërdoruesit</string>
+    <string name="settings_su_auth_insecure">Asnjë metodë vërtetimi nuk është konfiguruar në pajisje</string>
+    
     <!--Notifications-->
     <string name="update_channel">Përditësimet e magisk</string>
     <string name="updated_channel">Përditësimi përfundoi</string>

app/src/main/res/values-sv/strings.xml

@@ -151,9 +151,6 @@
     <string name="settings_su_reauth_summary">Återautentisera superuser-rättigheter efter en applikationsuppdatering</string>
     <string name="settings_su_tapjack_title">Aktivera Tapjacking-skydd</string>
     <string name="settings_su_tapjack_summary">Superuser-dialogrutan kommer inte att lyssna på någon input om den är dold eller övertäckt utav något annat fönster.</string>
-    <string name="settings_su_biometric_title">Aktivera biometriskt autentisering</string>
-    <string name="settings_su_biometric_summary">Använd biometriskt autentisering för att tillåta förfrågan om superuser-tillgång</string>
-    <string name="no_biometric">Denna enhet stöds ej eller så är inte biometrisk autentisering aktiverad</string>
     <string name="settings_customization">Anpassning</string>
     <string name="setting_add_shortcut_summary">Lägg till en snygg genväg på startskärmen om namnet och ikonen är svåra att känna igen efter att appen har döljts</string>
     <string name="settings_doh_title">DNS över HTTPS</string>

app/src/main/res/values-sw/strings.xml

@@ -163,9 +163,6 @@
     <string name="settings_su_reauth_summary">Ask for Superuser permissions again after upgrading apps</string>
     <string name="settings_su_tapjack_title">Tapjacking Protection</string>
     <string name="settings_su_tapjack_summary">The Superuser prompt dialog will not respond to input while obscured by any other window or overlay</string>
-    <string name="settings_su_biometric_title">Biometric Authentication</string>
-    <string name="settings_su_biometric_summary">Use biometric authentication to allow Superuser requests</string>
-    <string name="no_biometric">Unsupported device or no biometric settings are enabled</string>
     <string name="settings_customization">Customization</string>
     <string name="setting_add_shortcut_summary">Add a pretty shortcut to the home screen in case the name and icon are difficult to recognize after hiding the app</string>
     <string name="settings_doh_title">DNS over HTTPS</string>

app/src/main/res/values-ta/strings.xml

@@ -152,9 +152,6 @@
     <string name="settings_su_reauth_summary">பயன்பாட்டு மேம்படுத்தல்களுக்குப் பிறகு சூப்பர் யூசர் அனுமதிகளை மீண்டும் அங்கீகரிக்கவும்</string>
     <string name="settings_su_tapjack_title">டாப்ஜாகிங் பாதுகாப்பை இயக்கு</string>
     <string name="settings_su_tapjack_summary">வேறு எந்த சாளரத்தாலும் அல்லது மேலடுக்கினாலும் மறைக்கப்படும்போது சூப்பர் யூசர் வரியில் உரையாடல் உள்ளீட்டிற்கு பதிலளிக்காது</string>
-    <string name="settings_su_biometric_title">பயோமெட்ரிக் அங்கீகாரத்தை இயக்கு</string>
-    <string name="settings_su_biometric_summary">சூப்பர் யூசர் கோரிக்கைகளை அனுமதிக்க பயோமெட்ரிக் அங்கீகாரத்தைப் பயன்படுத்தவும்</string>
-    <string name="no_biometric">ஆதரிக்கப்படாத சாதனம் அல்லது பயோமெட்ரிக் அமைப்புகள் எதுவும் செயல்படுத்தப்படவில்லை</string>
     <string name="settings_customization">தனிப்பயனாக்கம்</string>
     <string name="setting_add_shortcut_summary">பயன்பாட்டை மறைத்தபின் பெயர் மற்றும் ஐகான் அடையாளம் காண கடினமாக இருந்தால் முகப்புத் திரையில் அழகான குறுக்குவழியைச் சேர்க்கவும்</string>
     <string name="settings_doh_title">HTTPS வழியாக டி.என்.எஸ்</string>

app/src/main/res/values-tr/strings.xml

@@ -26,7 +26,7 @@
     <string name="home_item_source">Kaynak</string>
     <string name="home_support_content">Magisk ücretsiz ve açık kaynaktır ve her zaman öyle kalacaktır. Ancak bağış yaparak bize değer verdiğinizi gösterebilirsiniz.</string>
     <string name="home_installed_version">Yüklendi</string>
-    <string name="home_latest_version">En sonuncu</string>
+    <string name="home_latest_version">En son sürüm</string>
     <string name="invalid_update_channel">Geçersiz Güncelleme Kanalı</string>
     <string name="uninstall_magisk_title">Magisk\'i Kaldırın</string>
     <string name="uninstall_magisk_msg">Tüm modüller devre dışı bırakılacak/kaldırılacak!\nKök kaldırılacak!\nMagisk kullanılarak şifrelenmemiş herhangi bir dahili depolama yeniden şifrelenecek!</string>
@@ -34,7 +34,7 @@
     <!--Install-->
     <string name="keep_force_encryption">Zorla şifrelemeyi koru</string>
     <string name="keep_dm_verity">AVB 2.0/dm-verity\'yi koruyun</string>
-    <string name="patch_vbmeta">Önyükleme görüntüsünde vbmeta yaması</string>
+    <string name="patch_vbmeta">Önyükleme görüntüsünde vbmeta yamasını uygula</string>
     <string name="recovery_mode">Kurtarma Modu</string>
     <string name="install_options_title">Seçenekler</string>
     <string name="install_method_title">Yöntem</string>
@@ -55,24 +55,24 @@
     <string name="touch_filtered_warning">Bir uygulama bir Süper Kullanıcı isteğini engellediği için Magisk yanıtınızı doğrulayamıyor</string>
     <string name="deny">Reddet</string>
     <string name="prompt">Hemen</string>
-    <string name="grant">İzin</string>
-    <string name="su_warning">Cihazınıza tam erişim sağlar.\nEmin değilseniz reddedin!</string>
+    <string name="grant">İzin ver</string>
+    <string name="su_warning">Cihazınıza tam erişim sağlar.\nEğer emin değilseniz reddedin!</string>
     <string name="forever">Daima</string>
     <string name="once">Bir kere</string>
     <string name="tenmin">10 dakika</string>
     <string name="twentymin">20 dakika</string>
     <string name="thirtymin">30 dakika</string>
     <string name="sixtymin">60 dakika</string>
-    <string name="su_allow_toast">%1$s Süper Kullanıcı hakları verildi</string>
-    <string name="su_deny_toast">%1$s Süper Kullanıcı hakları reddedildi</string>
-    <string name="su_snack_grant">%1$s Süper Kullanıcı hakları verildi</string>
-    <string name="su_snack_deny">%1$s Süper Kullanıcı hakları reddedildi</string>
-    <string name="su_snack_notif_on">%1$s bildirimleri etkinleştirildi</string>
-    <string name="su_snack_notif_off">%1$s bildirimleri devre dışı bırakıldı</string>
-    <string name="su_snack_log_on">%1$s günlüğü etkinleştirildi</string>
-    <string name="su_snack_log_off">%1$s günlüğü devre dışı bırakıldı</string>
+    <string name="su_allow_toast">%1$s uygulamasının Süper Kullanıcı izni verildi</string>
+    <string name="su_deny_toast">%1$s uygulamasının Süper Kullanıcı izni reddedildi</string>
+    <string name="su_snack_grant">%1$s uygulamasının Süper Kullanıcı izni verildi</string>
+    <string name="su_snack_deny">%1$s uygulamasının Süper Kullanıcı izni reddedildi</string>
+    <string name="su_snack_notif_on">%1$s uygulamasının bildirimleri etkinleştirildi</string>
+    <string name="su_snack_notif_off">%1$s uygulamasının bildirimleri devre dışı bırakıldı</string>
+    <string name="su_snack_log_on">%1$s uygulamasının günlüğü etkinleştirildi</string>
+    <string name="su_snack_log_off">%1$s uygulamasının günlüğü devre dışı bırakıldı</string>
     <string name="su_revoke_title">İptal et?</string>
-    <string name="su_revoke_msg">%1$s Süper Kullanıcı haklarını iptal etmeyi onaylayın</string>
+    <string name="su_revoke_msg">%1$s uygulamasının Süper Kullanıcı haklarını iptal etmeyi onaylayın</string>
     <string name="toast">Tost</string>
     <string name="none">Hiçbiri</string>
 
@@ -99,11 +99,11 @@
 
     <!--Module-->
     <string name="no_info_provided">(Bilgi verilmedi)</string>
-    <string name="reboot_userspace">Yumuşak yeniden başlatma</string>
-    <string name="reboot_recovery">Kurtarma için Yeniden Başlatın</string>
-    <string name="reboot_bootloader">Bootloader için Yeniden Başlatın</string>
-    <string name="reboot_download">İndirmek için Yeniden Başlatın</string>
-    <string name="reboot_edl">EDL için Yeniden Başlatın</string>
+    <string name="reboot_userspace">Yazılımsal olarak yeniden başlat</string>
+    <string name="reboot_recovery">Kurtarma modunda Yeniden Başlat</string>
+    <string name="reboot_bootloader">Önyükleyici modunda Yeniden Başlat</string>
+    <string name="reboot_download">Download modu için Yeniden Başlat</string>
+    <string name="reboot_edl">EDL modunda Yeniden Başlat</string>
     <string name="module_version_author">%1$s / %2$s</string>
     <string name="module_state_remove">Kaldır</string>
     <string name="module_state_restore">Geri yükle</string>
@@ -119,9 +119,9 @@
     <!--Settings-->
     <string name="settings_dark_mode_title">Tema Modu</string>
     <string name="settings_dark_mode_message">Tarzınıza en uygun modu seçin!</string>
-    <string name="settings_dark_mode_light">Daima Açık</string>
+    <string name="settings_dark_mode_light">Her zaman Açık</string>
     <string name="settings_dark_mode_system">Sistemi Takip Et</string>
-    <string name="settings_dark_mode_dark">Daima Koyu</string>
+    <string name="settings_dark_mode_dark">Her zaman Koyu</string>
     <string name="settings_download_path_title">İndirme yolu</string>
     <string name="settings_download_path_message">Dosyalar %1$s konumuna kaydedilecek</string>
     <string name="settings_hide_app_title">Magisk uygulamasını gizleyin</string>
@@ -131,13 +131,13 @@
     <string name="language">Dil</string>
     <string name="system_default">(Sistem Varsayılanı)</string>
     <string name="settings_check_update_title">Güncellemeleri Kontrol Et</string>
-    <string name="settings_check_update_summary">Arka planda güncellemeleri periyodik olarak kontrol edin</string>
+    <string name="settings_check_update_summary">Arka planda güncellemeleri düzenli olarak kontrol edin</string>
     <string name="settings_update_channel_title">Güncelleme Kanalı</string>
     <string name="settings_update_stable">Stabil</string>
     <string name="settings_update_beta">Beta</string>
     <string name="settings_update_custom">Özel</string>
     <string name="settings_update_custom_msg">Özel bir kanal URL\'si ekleyin</string>
-    <string name="settings_zygisk_summary">Zygote arka plan programında Magisk\'in bazı bölümlerini çalıştırın</string>
+    <string name="settings_zygisk_summary">Zygisk arka plan programında Magisk\'in bazı bölümlerini çalıştırın</string>
     <string name="settings_denylist_title">Reddetme Listesini Zorla</string>
     <string name="settings_denylist_summary">Reddetme listesindeki işlemlerde tüm Magisk değişiklikleri geri alınır</string>
     <string name="settings_denylist_error">Bu özelliğin etkinleştirilmesi için %1$s gerekir</string>
@@ -165,11 +165,8 @@
     <string name="superuser_notification">Süper Kullanıcı Bildirimi</string>
     <string name="settings_su_reauth_title">Yükseltmeden sonra yeniden kimlik doğrulaması yapın</string>
     <string name="settings_su_reauth_summary">Uygulamaları yükselttikten sonra Süper Kullanıcı izinlerini tekrar isteyin</string>
-    <string name="settings_su_tapjack_title">Tapjacking Koruması</string>
+    <string name="settings_su_tapjack_title">Sahte Ekran (Tapjacking) Koruması</string>
     <string name="settings_su_tapjack_summary">Süper Kullanıcı bilgi istemi iletişim kutusu, herhangi bir başka pencere veya yer paylaşımı tarafından engellendiğinde girişe yanıt vermeyecektir.</string>
-    <string name="settings_su_biometric_title">Biyometrik Kimlik Doğrulama</string>
-    <string name="settings_su_biometric_summary">Süper Kullanıcı isteklerine izin vermek için biyometrik kimlik doğrulamayı kullanın</string>
-    <string name="no_biometric">Desteklenmeyen cihaz veya hiçbir biyometrik ayar etkin değil</string>
     <string name="settings_customization">Özelleştir</string>
     <string name="setting_add_shortcut_summary">Uygulamayı gizledikten sonra adın ve simgenin tanınmasının zor olması durumunda ana ekrana güzel bir kısayol ekleyin</string>
     <string name="settings_doh_title">HTTPS üzerinden DNS</string>
@@ -219,7 +216,7 @@
     <string name="restore_done">Geri yükleme tamamlandı!</string>
     <string name="restore_fail">Stok yedeği mevcut değil!</string>
     <string name="setup_fail">Kurulum başarısız oldu</string>
-    <string name="env_fix_title">Ek Kurulum Gerektirir</string>
+    <string name="env_fix_title">Ek Kurulum Gerekiyor</string>
     <string name="env_fix_msg">Magisk\'in düzgün çalışması için cihazınızın ek kuruluma ihtiyacı var. Devam etmek ve yeniden başlatmak istiyor musunuz?</string>
     <string name="env_full_fix_msg">Cihazınızın düzgün çalışması için Magisk\'in yeniden yüklenmeye ihtiyacı var. Lütfen Magisk\'i uygulama içinde yeniden yükleyin, kurtarma modu doğru cihaz bilgilerini alamıyor.</string>
     <string name="setup_msg">Ortam kurulumu çalıştırılıyor…</string>
@@ -227,18 +224,18 @@
     <string name="unsupport_magisk_title">Desteklenmeyen Magisk Sürümü</string>
     <string name="unsupport_magisk_msg">Uygulamanın bu sürümü, %1$s\'den daha düşük Magisk sürümlerini desteklemiyor.\n\nUygulama, Magisk kurulu değilmiş gibi davranacak, lütfen Magisk\'i mümkün olan en kısa sürede yükseltin.</string>
     <string name="unsupport_general_title">Anormal Durum</string>
-    <string name="unsupport_system_app_msg">Bu uygulamayı bir sistem uygulaması olarak çalıştırmak desteklenmiyor. Lütfen uygulamayı bir kullanıcı uygulamasına geri döndürün.</string>
-    <string name="unsupport_other_su_msg">Magisk\'ten olmayan bir \"su\" ikili dosyası algılandı. Lütfen rakip kök çözümlerini kaldırın ve/veya Magisk\'i yeniden yükleyin.</string>
+    <string name="unsupport_system_app_msg">Bu uygulamayı bir sistem uygulaması olarak çalıştırma desteklenmiyor. Lütfen uygulamayı bir kullanıcı uygulamasına geri döndürün.</string>
+    <string name="unsupport_other_su_msg">Magisk\'ten olmayan bir \"su\" ikili dosyası algılandı. Lütfen başka kök çözümlerini kaldırın ve/veya Magisk\'i yeniden yükleyin.</string>
     <string name="unsupport_external_storage_msg">Magisk, harici depolama birimine kurulur. Lütfen uygulamayı dahili depolamaya taşıyın.</string>
     <string name="unsupport_nonroot_stub_msg">Kök kaybolduğu için gizli Magisk uygulaması çalışmaya devam edemiyor. Lütfen orijinal APK\'yı geri yükleyin.</string>
     <string name="unsupport_nonroot_stub_title">@string/settings_restore_app_title</string>
-    <string name="external_rw_permission_denied">Bu işlevi etkinleştirmek için depolama izni verin</string>
-    <string name="post_notifications_denied">Bu işlevi etkinleştirmek için bildirim izni verin</string>
-    <string name="install_unknown_denied">Bu işlevi etkinleştirmek için "bilinmeyen uygulamaları yükle"ye izin verin</string>
+    <string name="external_rw_permission_denied">Bu işlevi etkinleştirmek için depolama izni veriniz.</string>
+    <string name="post_notifications_denied">Bu işlevi etkinleştirmek için bildirim izni veriniz.</string>
+    <string name="install_unknown_denied">Bu işlevi etkinleştirmek için "Bilinmeyen uygulamaları yükle" ayarına izin veriniz.</string>
     <string name="add_shortcut_title">Ana ekrana kısayol ekle</string>
     <string name="add_shortcut_msg">Bu uygulamayı gizledikten sonra adını ve simgesini tanımak zorlaşabilir. Ana ekrana hoş bir kısayol eklemek ister misiniz?</string>
     <string name="app_not_found">Bu eylemi gerçekleştirecek uygulama bulunamadı</string>
     <string name="reboot_apply_change">Değişiklikleri uygulamak için yeniden başlatın</string>
-    <string name="restore_app_confirmation">Bu, gizli uygulamayı orijinal uygulamaya geri yükleyecektir. Gerçekten bunu yapmak istiyor musun?</string>
+    <string name="restore_app_confirmation">Bu işlem, gizli uygulamayı orijinal uygulama ile değiştirecektir. Bu işlemi yapmak istediğinizden emin misiniz?</string>
 
 </resources>

app/src/main/res/values-uk/strings.xml

@@ -159,9 +159,6 @@
     <string name="settings_su_reauth_summary">Перевидача прав суперкористувача після оновлення застосунку</string>
     <string name="settings_su_tapjack_title">Увімкнути захист від Tapjack</string>
     <string name="settings_su_tapjack_summary">Діалогове вікно суперкористувача не буде отримувати ввід від користувача, коли вікно перекрито іншим застосунком чи вікном</string>
-    <string name="settings_su_biometric_title">Біометрична автентифікація</string>
-    <string name="settings_su_biometric_summary">Використовувати біометричну автентифікацію, щоб підтверджувати запити суперкористувача</string>
-    <string name="no_biometric">Пристрій не підтримується, або не налаштовано біометрику</string>
     <string name="settings_customization">Оформлення</string>
     <string name="setting_add_shortcut_summary">Додати ярлик на домашній екран для зручного сприйняття застосунку після його приховування</string>
     <string name="settings_doh_title">DNS поверх HTTPS</string>

app/src/main/res/values-vi/strings.xml

@@ -165,9 +165,6 @@
     <string name="settings_su_reauth_summary">Xác thực lại quyền Superuser sau khi nâng cấp ứng dụng</string>
     <string name="settings_su_tapjack_title">Bảo vệ khỏi Tapjacking</string>
     <string name="settings_su_tapjack_summary">Hộp thoại nhắc Superuser sẽ không trả lời đầu vào khi bị che khuất bởi bất kỳ cửa sổ hoặc lớp phủ nào khác</string>
-    <string name="settings_su_biometric_title">Bật xác thực sinh trắc học</string>
-    <string name="settings_su_biometric_summary">Sử dụng xác thực sinh trắc học để xác nhận yêu cầu Superuser</string>
-    <string name="no_biometric">Thiết bị của bạn không được hỗ trợ hoặc không có phương pháp xác thực sinh trắc học nào được kích hoạt</string>
     <string name="settings_customization">Tùy biến</string>
     <string name="setting_add_shortcut_summary">Thêm một phím tắt đẹp vào màn hình trong trường hợp khó tìm ra tên và biểu tượng sau khi ẩn ứng dụng</string>
     <string name="settings_doh_title">DNS over HTTPS</string>

app/src/main/res/values-zh-rCN/strings.xml

@@ -46,7 +46,7 @@
     <string name="install_inactive_slot_msg">将在重启后强制切换到另一个槽位！注意只能在 OTA 更新完成后的重启之前使用。</string>
     <string name="setup_title">修复安装</string>
     <string name="select_patch_file">选择并修补一个文件</string>
-    <string name="patch_file_msg">选择一个原始映像文件（*.img）或一个 Odin 包（*.tar）</string>
+    <string name="patch_file_msg">选择一个原始映像文件（*.img）、Odin 包（*.tar）或 payload.bin（*.bin）</string>
     <string name="reboot_delay_toast">设备将在 5 秒后重启</string>
     <string name="flash_screen_title">安装</string>
 
@@ -88,6 +88,9 @@
     <string name="logs_cleared">日志已清空</string>
     <string name="pid">PID: %1$d</string>
     <string name="target_uid">目标 UID: %1$d</string>
+    <string name="target_pid">挂载命名空间目标 PID: %s</string>
+    <string name="selinux_context">SELinux 上下文: %s</string>
+    <string name="supp_group">补充组: %s</string>
 
     <!--SafetyNet-->
 
@@ -167,9 +170,9 @@
     <string name="settings_su_reauth_summary">应用更新后重新认证超级用户权限</string>
     <string name="settings_su_tapjack_title">点按劫持保护</string>
     <string name="settings_su_tapjack_summary">存在屏幕叠加层时，超级用户请求弹窗不响应允许操作</string>
-    <string name="settings_su_biometric_title">生物识别验证</string>
-    <string name="settings_su_biometric_summary">使用生物识别来允许超级用户请求</string>
-    <string name="no_biometric">设备不支持或未配置生物识别功能</string>
+    <string name="settings_su_auth_title">身份验证</string>
+    <string name="settings_su_auth_summary">对超级用户请求验证身份</string>
+    <string name="settings_su_auth_insecure">设备未配置验证方式</string>
     <string name="settings_customization">个性化</string>
     <string name="setting_add_shortcut_summary">在隐藏后难以识别名称和图标的情况下，添加快捷方式到桌面</string>
     <string name="settings_doh_title">安全 DNS（DoH）</string>

app/src/main/res/values-zh-rTW/strings.xml

@@ -46,7 +46,7 @@
     <string name="install_inactive_slot_msg">您的裝置將在下次重新啟動後強制切換到非使用中的槽位！\n這個選項僅在 OTA 更新完畢後使用。\n請問是否繼續？</string>
     <string name="setup_title">修復安裝</string>
     <string name="select_patch_file">選擇並修補檔案</string>
-    <string name="patch_file_msg">請選取未修改過的映像檔 (*.img) 或 Odin 的 TAR 檔案 (*.tar)</string>
+    <string name="patch_file_msg">請選取未修改過的映像檔 (*.img) 或 Odin 的 TAR 檔案 (*.tar) 或 payload.bin (*.bin)</string>
     <string name="reboot_delay_toast">將在 5 秒後重新啟動……</string>
     <string name="flash_screen_title">安裝</string>
 
@@ -167,9 +167,6 @@
     <string name="settings_su_reauth_summary">應用程式更新後，重新驗證超級使用者的要求</string>
     <string name="settings_su_tapjack_title">啟用點選攔截保護</string>
     <string name="settings_su_tapjack_summary">發現有其他應用程式重疊在超級使用者視窗上面時，不回應允許操作</string>
-    <string name="settings_su_biometric_title">生物特徵辨識驗證</string>
-    <string name="settings_su_biometric_summary">使用生物特徵辨識驗證來允許超級使用者的要求</string>
-    <string name="no_biometric">不支援的裝置或是未啟用生物特徵辨識設定</string>
     <string name="settings_customization">客製化</string>
     <string name="setting_add_shortcut_summary">在主螢幕中新增一個精緻的捷徑。防止隱藏 Magisk 以後，其名稱與圖示將難以辨識</string>
     <string name="settings_doh_title">安全化的網域解析(DoH)</string>

app/src/main/res/values/strings.xml

@@ -46,7 +46,7 @@
     <string name="install_inactive_slot_msg">Your device will be FORCED to boot to the current inactive slot after a reboot!\nOnly use this option after OTA is done.\nContinue?</string>
     <string name="setup_title">Additional Setup</string>
     <string name="select_patch_file">Select and Patch a File</string>
-    <string name="patch_file_msg">Select a raw image (*.img) or an ODIN tarfile (*.tar)</string>
+    <string name="patch_file_msg">Select a raw image (*.img) or an ODIN tarfile (*.tar) or a payload.bin (*.bin)</string>
     <string name="reboot_delay_toast">Rebooting in 5 seconds…</string>
     <string name="flash_screen_title">Installation</string>
 
@@ -88,6 +88,9 @@
     <string name="logs_cleared">Log successfully cleared</string>
     <string name="pid">PID: %1$d</string>
     <string name="target_uid">Target UID: %1$d</string>
+    <string name="target_pid">Mount ns target PID: %s</string>
+    <string name="selinux_context">SELinux context: %s</string>
+    <string name="supp_group">Supplementary group: %s</string>
 
     <!--SafetyNet-->
 
@@ -167,9 +170,9 @@
     <string name="settings_su_reauth_summary">Ask for Superuser permissions again after upgrading apps</string>
     <string name="settings_su_tapjack_title">Tapjacking Protection</string>
     <string name="settings_su_tapjack_summary">The Superuser prompt dialog will not respond to input while obscured by any other window or overlay</string>
-    <string name="settings_su_biometric_title">Biometric Authentication</string>
-    <string name="settings_su_biometric_summary">Use biometric authentication to allow Superuser requests</string>
-    <string name="no_biometric">Unsupported device or no biometric settings are enabled</string>
+    <string name="settings_su_auth_title">User Authentication</string>
+    <string name="settings_su_auth_summary">Ask for user authentication during Superuser requests</string>
+    <string name="settings_su_auth_insecure">No authentication method is configured on the device</string>
     <string name="settings_customization">Customization</string>
     <string name="setting_add_shortcut_summary">Add a pretty shortcut to the home screen in case the name and icon are difficult to recognize after hiding the app</string>
     <string name="settings_doh_title">DNS over HTTPS</string>

build.gradle.kts

@@ -3,5 +3,5 @@ plugins {
 }
 
 tasks.register("clean", Delete::class) {
-    delete(rootProject.buildDir)
+    delete(rootProject.layout.buildDirectory)
 }

build.py

@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 import argparse
-import errno
+import glob
 import lzma
 import multiprocessing
 import os
@@ -10,24 +10,27 @@ import shutil
 import stat
 import subprocess
 import sys
+import tarfile
 import textwrap
 import urllib.request
-import tarfile
+from zipfile import ZipFile
+
+
+def color_print(code, str):
+    if no_color:
+        print(str)
+    else:
+        str = str.replace("\n", f"\033[0m\n{code}")
+        print(f"{code}{str}\033[0m")
 
 
 def error(str):
-    if no_color:
-        print(f'\n! {str}\n')
-    else:
-        print(f'\n\033[41m{str}\033[0m\n')
+    color_print("\033[41;39m", f"\n! {str}\n")
     sys.exit(1)
 
 
 def header(str):
-    if no_color:
-        print(f'\n{str}\n')
-    else:
-        print(f'\n\033[44m{str}\033[0m\n')
+    color_print("\033[44;39m", f"\n{str}\n")
 
 
 def vprint(str):
@@ -35,13 +38,14 @@ def vprint(str):
         print(str)
 
 
-is_windows = os.name == 'nt'
-EXE_EXT = '.exe' if is_windows else ''
+is_windows = os.name == "nt"
+EXE_EXT = ".exe" if is_windows else ""
 
-no_color = 'CI' in os.environ and os.environ['CI'] == 'true'
-if not no_color and is_windows:
+no_color = False
+if is_windows:
     try:
         import colorama
+
         colorama.init()
     except ImportError:
         # We can't do ANSI color codes in terminal on Windows without colorama
@@ -49,33 +53,44 @@ if not no_color and is_windows:
 
 # Environment checks
 if not sys.version_info >= (3, 8):
-    error('Requires Python 3.8+')
+    error("Requires Python 3.8+")
 
-if 'ANDROID_SDK_ROOT' not in os.environ:
-    error('Please add Android SDK path to ANDROID_SDK_ROOT environment variable!')
+if "ANDROID_SDK_ROOT" not in os.environ:
+    error("Please set Android SDK path to environment variable ANDROID_SDK_ROOT!")
 
-try:
-    subprocess.run(['javac', '-version'],
-                   stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
-except FileNotFoundError:
-    error('Please install JDK and make sure \'javac\' is available in PATH')
+if shutil.which("sccache") is not None:
+    os.environ["RUSTC_WRAPPER"] = "sccache"
+    os.environ["NDK_CCACHE"] = "sccache"
+    os.environ["CARGO_INCREMENTAL"] = "0"
+if shutil.which("ccache") is not None:
+    os.environ["NDK_CCACHE"] = "ccache"
 
 cpu_count = multiprocessing.cpu_count()
-archs = ['armeabi-v7a', 'x86', 'arm64-v8a', 'x86_64']
-triples = ['armv7a-linux-androideabi', 'i686-linux-android', 'aarch64-linux-android', 'x86_64-linux-android']
-default_targets = ['magisk', 'magiskinit', 'magiskboot', 'magiskpolicy', 'busybox']
-support_targets = default_targets + ['resetprop']
-rust_targets = ['magisk', 'magiskinit', 'magiskboot', 'magiskpolicy']
+os_name = platform.system().lower()
 
-sdk_path = os.environ['ANDROID_SDK_ROOT']
-ndk_root = op.join(sdk_path, 'ndk')
-ndk_path = op.join(ndk_root, 'magisk')
-ndk_build = op.join(ndk_path, 'ndk-build')
-rust_bin = op.join(ndk_path, 'toolchains', 'rust', 'bin')
-cargo = op.join(rust_bin, 'cargo' + EXE_EXT)
-gradlew = op.join('.', 'gradlew' + ('.bat' if is_windows else ''))
-adb_path = op.join(sdk_path, 'platform-tools', 'adb' + EXE_EXT)
-native_gen_path = op.realpath(op.join('native', 'out', 'generated'))
+archs = ["armeabi-v7a", "x86", "arm64-v8a", "x86_64"]
+triples = [
+    "armv7a-linux-androideabi",
+    "i686-linux-android",
+    "aarch64-linux-android",
+    "x86_64-linux-android",
+]
+default_targets = ["magisk", "magiskinit", "magiskboot", "magiskpolicy", "busybox"]
+support_targets = default_targets + ["resetprop"]
+rust_targets = ["magisk", "magiskinit", "magiskboot", "magiskpolicy"]
+
+sdk_path = os.environ["ANDROID_SDK_ROOT"]
+ndk_root = op.join(sdk_path, "ndk")
+ndk_path = op.join(ndk_root, "magisk")
+ndk_build = op.join(ndk_path, "ndk-build")
+rust_bin = op.join(ndk_path, "toolchains", "rust", "bin")
+llvm_bin = op.join(
+    ndk_path, "toolchains", "llvm", "prebuilt", f"{os_name}-x86_64", "bin"
+)
+cargo = op.join(rust_bin, "cargo" + EXE_EXT)
+gradlew = op.join(".", "gradlew" + (".bat" if is_windows else ""))
+adb_path = op.join(sdk_path, "platform-tools", "adb" + EXE_EXT)
+native_gen_path = op.realpath(op.join("native", "out", "generated"))
 
 # Global vars
 config = {}
@@ -86,7 +101,7 @@ build_tools = None
 def mv(source, target):
     try:
         shutil.move(source, target)
-        vprint(f'mv {source} -> {target}')
+        vprint(f"mv {source} -> {target}")
     except:
         pass
 
@@ -94,7 +109,7 @@ def mv(source, target):
 def cp(source, target):
     try:
         shutil.copyfile(source, target)
-        vprint(f'cp {source} -> {target}')
+        vprint(f"cp {source} -> {target}")
     except:
         pass
 
@@ -102,22 +117,24 @@ def cp(source, target):
 def rm(file):
     try:
         os.remove(file)
-        vprint(f'rm {file}')
-    except OSError as e:
-        if e.errno != errno.ENOENT:
-            raise
+        vprint(f"rm {file}")
+    except FileNotFoundError as e:
+        pass
 
 
 def rm_on_error(func, path, _):
-    # Remove a read-only file on Windows will get "WindowsError: [Error 5] Access is denied"
-    # Clear the "read-only" and retry
-    os.chmod(path, stat.S_IWRITE)
-    os.unlink(path)
+    # Removing a read-only file on Windows will get "WindowsError: [Error 5] Access is denied"
+    # Clear the "read-only" bit and retry
+    try:
+        os.chmod(path, stat.S_IWRITE)
+        os.unlink(path)
+    except FileNotFoundError as e:
+        pass
 
 
 def rm_rf(path):
-    vprint(f'rm -rf {path}')
-    shutil.rmtree(path, ignore_errors=True, onerror=rm_on_error)
+    vprint(f"rm -rf {path}")
+    shutil.rmtree(path, ignore_errors=False, onerror=rm_on_error)
 
 
 def mkdir(path, mode=0o755):
@@ -140,8 +157,11 @@ def system(cmd):
 
 
 def cmd_out(cmd, env=None):
-    return subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, env=env) \
-                     .stdout.strip().decode('utf-8')
+    return (
+        subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, env=env)
+        .stdout.strip()
+        .decode("utf-8")
+    )
 
 
 def xz(data):
@@ -150,205 +170,212 @@ def xz(data):
 
 def parse_props(file):
     props = {}
-    with open(file, 'r') as f:
-        for line in [l.strip(' \t\r\n') for l in f]:
-            if line.startswith('#') or len(line) == 0:
+    with open(file, "r") as f:
+        for line in [l.strip(" \t\r\n") for l in f]:
+            if line.startswith("#") or len(line) == 0:
                 continue
-            prop = line.split('=')
+            prop = line.split("=")
             if len(prop) != 2:
                 continue
-            value = prop[1].strip(' \t\r\n')
+            value = prop[1].strip(" \t\r\n")
             if len(value) == 0:
                 continue
-            props[prop[0].strip(' \t\r\n')] = value
+            props[prop[0].strip(" \t\r\n")] = value
     return props
 
 
 def load_config(args):
-    commit_hash = cmd_out(['git', 'rev-parse', '--short=8', 'HEAD'])
+    commit_hash = cmd_out(["git", "rev-parse", "--short=8", "HEAD"])
 
     # Default values
-    config['version'] = commit_hash
-    config['outdir'] = 'out'
+    config["version"] = commit_hash
+    config["versionCode"] = 1000000
+    config["outdir"] = "out"
 
     # Load prop files
     if op.exists(args.config):
         config.update(parse_props(args.config))
 
-    for key, value in parse_props('gradle.properties').items():
-        if key.startswith('magisk.'):
-            config[key[7:]] = value
+    if op.exists("gradle.properties"):
+        for key, value in parse_props("gradle.properties").items():
+            if key.startswith("magisk."):
+                config[key[7:]] = value
 
     try:
-        config['versionCode'] = int(config['versionCode'])
+        config["versionCode"] = int(config["versionCode"])
     except ValueError:
         error('Config error: "versionCode" is required to be an integer')
 
-    mkdir_p(config['outdir'])
+    mkdir_p(config["outdir"])
     global STDOUT
     STDOUT = None if args.verbose else subprocess.DEVNULL
 
 
 def clean_elf():
     if is_windows:
-        elf_cleaner = op.join('tools', 'elf-cleaner.exe')
+        elf_cleaner = op.join("tools", "elf-cleaner.exe")
     else:
-        elf_cleaner = op.join('native', 'out', 'elf-cleaner')
+        elf_cleaner = op.join("native", "out", "elf-cleaner")
         if not op.exists(elf_cleaner):
-            execv(['gcc', '-DPACKAGE_NAME="termux-elf-cleaner"',
-                   '-DPACKAGE_VERSION="2.1.1"', '-DCOPYRIGHT="Copyright (C) 2022 Termux."',
-                   'tools/termux-elf-cleaner/elf-cleaner.cpp',
-                   'tools/termux-elf-cleaner/arghandling.c',
-                   '-o', elf_cleaner])
+            execv(
+                [
+                    "gcc",
+                    '-DPACKAGE_NAME="termux-elf-cleaner"',
+                    '-DPACKAGE_VERSION="2.1.1"',
+                    '-DCOPYRIGHT="Copyright (C) 2022 Termux."',
+                    "tools/termux-elf-cleaner/elf-cleaner.cpp",
+                    "tools/termux-elf-cleaner/arghandling.c",
+                    "-o",
+                    elf_cleaner,
+                ]
+            )
     args = [elf_cleaner, "--api-level", "23"]
-    args.extend(op.join('native', 'out', arch, bin)
-                for arch in archs for bin in ['magisk', 'magiskpolicy'])
+    args.extend(
+        op.join("native", "out", arch, bin)
+        for arch in archs
+        for bin in ["magisk", "magiskpolicy"]
+    )
     execv(args)
 
 
 def run_ndk_build(flags):
-    os.chdir('native')
-    flags = 'NDK_PROJECT_PATH=. NDK_APPLICATION_MK=src/Application.mk ' + flags
-    proc = system(f'{ndk_build} {flags} -j{cpu_count}')
+    os.chdir("native")
+    flags = "NDK_PROJECT_PATH=. NDK_APPLICATION_MK=src/Application.mk " + flags
+    proc = system(f"{ndk_build} {flags} -j{cpu_count}")
     if proc.returncode != 0:
-        error('Build binary failed!')
-    os.chdir('..')
+        error("Build binary failed!")
+    os.chdir("..")
     for arch in archs:
-        for tgt in support_targets + ['libinit-ld.so', 'libzygisk-ld.so']:
-            source = op.join('native', 'libs', arch, tgt)
-            target = op.join('native', 'out', arch, tgt)
+        for tgt in support_targets + ["libinit-ld.so", "libzygisk-ld.so"]:
+            source = op.join("native", "libs", arch, tgt)
+            target = op.join("native", "out", arch, tgt)
             mv(source, target)
 
 
-def run_cargo_build(args):
-    os.chdir(op.join('native', 'src'))
-    targets = set(args.target) & set(rust_targets)
-    if 'resetprop' in args.target:
-        targets.add('magisk')
-
+def run_cargo(cmds, triple="aarch64-linux-android"):
     env = os.environ.copy()
-    env['CARGO_BUILD_RUSTC'] = op.join(rust_bin, 'rustc' + EXE_EXT)
+    env["PATH"] = f'{rust_bin}{os.pathsep}{env["PATH"]}'
+    env["CARGO_BUILD_RUSTC"] = op.join(rust_bin, "rustc" + EXE_EXT)
+    env["RUSTFLAGS"] = "-Clinker-plugin-lto"
+    env["TARGET_CC"] = op.join(llvm_bin, "clang" + EXE_EXT)
+    env["TARGET_CFLAGS"] = f"--target={triple}23"
+    return execv([cargo, *cmds], env)
 
-    # Install cxxbridge and generate C++ bindings
-    native_out = op.join('..', 'out')
-    local_cargo_root = op.join(native_out, '.cargo')
-    cfg = op.join('.cargo', 'config.toml')
-    cfg_bak = op.join('.cargo', 'config.toml.bak')
-    try:
-        # Hide the config file for cargo install
-        mv(cfg, cfg_bak)
-        cxx_src = op.join('external', 'cxx-rs', 'gen', 'cmd')
-        mkdir_p(local_cargo_root)
-        cmds = [cargo, 'install', '--root', local_cargo_root, '--path', cxx_src]
-        if not args.verbose:
-            cmds.append('-q')
-        proc = execv(cmds, env)
-        if proc.returncode != 0:
-            error('cxxbridge-cmd installation failed!')
-    finally:
-        # Make sure the config file rename is always reverted
-        mv(cfg_bak, cfg)
-    cxxbridge = op.join(local_cargo_root, 'bin', 'cxxbridge' + EXE_EXT)
-    mkdir(native_gen_path)
-    for p in ['base', 'boot', 'core', 'init', 'sepolicy']:
-        text = cmd_out([cxxbridge, op.join(p, 'lib.rs')])
-        write_if_diff(op.join(native_gen_path, f'{p}-rs.cpp'), text)
-        text = cmd_out([cxxbridge, '--header', op.join(p, 'lib.rs')])
-        write_if_diff(op.join(native_gen_path, f'{p}-rs.hpp'), text)
+
+def run_cargo_build(args):
+    native_out = op.join("..", "out")
+    mkdir(native_out)
+
+    targets = set(args.target) & set(rust_targets)
+    if "resetprop" in args.target:
+        targets.add("magisk")
+
+    if len(targets) == 0:
+        return
 
     # Start building the actual build commands
-    cmds = [cargo, 'build', '-Z', 'build-std=std,panic_abort',
-           '-Z', 'build-std-features=panic_immediate_abort']
-    for target in targets:
-        cmds.append('-p')
-        cmds.append(target)
-    rust_out = 'debug'
+    cmds = ["build", "-p", ""]
+    rust_out = "debug"
     if args.release:
-        cmds.append('-r')
-        rust_out = 'release'
+        cmds.append("-r")
+        rust_out = "release"
     if not args.verbose:
-        cmds.append('-q')
+        cmds.append("-q")
 
-    os_name = platform.system().lower()
-    llvm_bin = op.join(ndk_path, 'toolchains', 'llvm', 'prebuilt', f'{os_name}-x86_64', 'bin')
-    env['TARGET_CC'] = op.join(llvm_bin, 'clang' + EXE_EXT)
-    env['RUSTFLAGS'] = '-Clinker-plugin-lto'
-    for (arch, triple) in zip(archs, triples):
-        env['TARGET_CFLAGS'] = f'--target={triple}23'
-        rust_triple = 'thumbv7neon-linux-androideabi' if triple.startswith('armv7') else triple
-        proc = execv([*cmds, '--target', rust_triple], env)
-        if proc.returncode != 0:
-            error('Build binary failed!')
+    cmds.append("--target")
+    cmds.append("")
+
+    for arch, triple in zip(archs, triples):
+        rust_triple = (
+            "thumbv7neon-linux-androideabi" if triple.startswith("armv7") else triple
+        )
+        cmds[-1] = rust_triple
+
+        for target in targets:
+            cmds[2] = target
+            proc = run_cargo(cmds, triple)
+            if proc.returncode != 0:
+                error("Build binary failed!")
 
         arch_out = op.join(native_out, arch)
         mkdir(arch_out)
         for tgt in targets:
-            source = op.join('target', rust_triple, rust_out, f'lib{tgt}.a')
-            target = op.join(arch_out, f'lib{tgt}-rs.a')
+            source = op.join("target", rust_triple, rust_out, f"lib{tgt}.a")
+            target = op.join(arch_out, f"lib{tgt}-rs.a")
             mv(source, target)
 
-    os.chdir(op.join('..', '..'))
+
+def run_cargo_cmd(args):
+    global STDOUT
+    STDOUT = None
+    if len(args.commands) >= 1 and args.commands[0] == "--":
+        args.commands = args.commands[1:]
+    os.chdir(op.join("native", "src"))
+    run_cargo(args.commands)
+    os.chdir(op.join("..", ".."))
 
 
 def write_if_diff(file_name, text):
     do_write = True
     if op.exists(file_name):
-        with open(file_name, 'r') as f:
+        with open(file_name, "r") as f:
             orig = f.read()
         do_write = orig != text
     if do_write:
-        with open(file_name, 'w') as f:
+        with open(file_name, "w") as f:
             f.write(text)
 
 
 def binary_dump(src, var_name, compressor=xz):
-    out_str = f'constexpr unsigned char {var_name}[] = {{'
+    out_str = f"constexpr unsigned char {var_name}[] = {{"
     for i, c in enumerate(compressor(src.read())):
         if i % 16 == 0:
-            out_str += '\n'
-        out_str += f'0x{c:02X},'
-    out_str += '\n};\n'
+            out_str += "\n"
+        out_str += f"0x{c:02X},"
+    out_str += "\n};\n"
     return out_str
 
 
 def dump_bin_header(args):
     mkdir_p(native_gen_path)
     for arch in archs:
-        preload = op.join('native', 'out', arch, 'libinit-ld.so')
-        with open(preload, 'rb') as src:
-            text = binary_dump(src, 'init_ld_xz')
-        preload = op.join('native', 'out', arch, 'libzygisk-ld.so')
-        with open(preload, 'rb') as src:
-            text += binary_dump(src, 'zygisk_ld', compressor=lambda x: x)
-        write_if_diff(op.join(native_gen_path, f'{arch}_binaries.h'), text)
+        preload = op.join("native", "out", arch, "libinit-ld.so")
+        with open(preload, "rb") as src:
+            text = binary_dump(src, "init_ld_xz")
+        preload = op.join("native", "out", arch, "libzygisk-ld.so")
+        with open(preload, "rb") as src:
+            text += binary_dump(src, "zygisk_ld", compressor=lambda x: x)
+        write_if_diff(op.join(native_gen_path, f"{arch}_binaries.h"), text)
 
 
 def dump_flag_header():
-    flag_txt = textwrap.dedent('''\
+    flag_txt = textwrap.dedent(
+        """\
         #pragma once
         #define quote(s)            #s
         #define str(s)              quote(s)
         #define MAGISK_FULL_VER     MAGISK_VERSION "(" str(MAGISK_VER_CODE) ")"
         #define NAME_WITH_VER(name) str(name) " " MAGISK_FULL_VER
-        ''')
+        """
+    )
     flag_txt += f'#define MAGISK_VERSION      "{config["version"]}"\n'
     flag_txt += f'#define MAGISK_VER_CODE     {config["versionCode"]}\n'
-    flag_txt += f'#define MAGISK_DEBUG        {0 if args.release else 1}\n'
+    flag_txt += f"#define MAGISK_DEBUG        {0 if args.release else 1}\n"
 
     mkdir_p(native_gen_path)
-    write_if_diff(op.join(native_gen_path, 'flags.h'), flag_txt)
+    write_if_diff(op.join(native_gen_path, "flags.h"), flag_txt)
 
 
 def build_binary(args):
     # Verify NDK install
     try:
-        with open(op.join(ndk_path, 'ONDK_VERSION'), 'r') as ondk_ver:
-            assert ondk_ver.read().strip(' \t\r\n') == config['ondkVersion']
+        with open(op.join(ndk_path, "ONDK_VERSION"), "r") as ondk_ver:
+            assert ondk_ver.read().strip(" \t\r\n") == config["ondkVersion"]
     except:
         error('Unmatched NDK. Please install/upgrade NDK with "build.py ndk"')
 
-    if 'target' not in vars(args):
-        vars(args)['target'] = []
+    if "target" not in vars(args):
+        vars(args)["target"] = []
 
     if args.target:
         args.target = set(args.target) & set(support_targets)
@@ -357,159 +384,239 @@ def build_binary(args):
     else:
         args.target = default_targets
 
-    header('* Building binaries: ' + ' '.join(args.target))
+    header("* Building binaries: " + " ".join(args.target))
 
+    os.chdir(op.join("native", "src"))
     run_cargo_build(args)
+    os.chdir(op.join("..", ".."))
 
     dump_flag_header()
 
-    flag = ''
+    flag = ""
+    clean = False
 
-    if 'magisk' in args.target or 'magiskinit' in args.target:
-        flag += ' B_PRELOAD=1'
+    if "magisk" in args.target or "magiskinit" in args.target:
+        flag += " B_PRELOAD=1"
 
-    if 'magiskpolicy' in args.target:
-        flag += ' B_POLICY=1'
+    if "magiskpolicy" in args.target:
+        flag += " B_POLICY=1"
+        clean = True
 
-    if 'test' in args.target:
-        flag += ' B_TEST=1'
+    if "test" in args.target:
+        flag += " B_TEST=1"
 
-    if 'magiskinit' in args.target:
-        flag += ' B_PRELOAD=1'
+    if "magiskinit" in args.target:
+        flag += " B_PRELOAD=1"
 
-    if 'resetprop' in args.target:
-        flag += ' B_PROP=1'
+    if "resetprop" in args.target:
+        flag += " B_PROP=1"
 
-    if 'magiskboot' in args.target:
-        flag += ' B_BOOT=1'
+    if "magiskboot" in args.target:
+        flag += " B_BOOT=1"
 
     if flag:
         run_ndk_build(flag)
 
     # magiskinit and magisk embeds preload.so
 
-    flag = ''
+    flag = ""
 
-    if 'magisk' in args.target:
-        flag += ' B_MAGISK=1'
+    if "magisk" in args.target:
+        flag += " B_MAGISK=1"
+        clean = True
 
-    if 'magiskinit' in args.target:
-        flag += ' B_INIT=1'
+    if "magiskinit" in args.target:
+        flag += " B_INIT=1"
 
     if flag:
         dump_bin_header(args)
         run_ndk_build(flag)
+
+    if clean:
         clean_elf()
 
     # BusyBox is built with different libc
 
-    if 'busybox' in args.target:
-        run_ndk_build('B_BB=1')
+    if "busybox" in args.target:
+        run_ndk_build("B_BB=1")
+
+
+def find_jdk():
+    env = os.environ.copy()
+    if "ANDROID_STUDIO" in env:
+        studio = env["ANDROID_STUDIO"]
+        jbr = op.join(studio, "jbr", "bin")
+        if not op.exists(jbr):
+            jbr = op.join(studio, "Contents", "jbr", "Contents", "Home", "bin")
+        if op.exists(jbr):
+            env["PATH"] = f'{jbr}{os.pathsep}{env["PATH"]}'
+
+    no_jdk = False
+    try:
+        proc = subprocess.run(
+            "javac -version",
+            stdout=subprocess.DEVNULL,
+            stderr=subprocess.DEVNULL,
+            env=env,
+            shell=True,
+        )
+        no_jdk = proc.returncode != 0
+    except FileNotFoundError:
+        no_jdk = True
+
+    if no_jdk:
+        error(
+            "Please set Android Studio's path to environment variable ANDROID_STUDIO,\n"
+            + "or install JDK 17 and make sure 'javac' is available in PATH"
+        )
+
+    return env
 
 
 def build_apk(args, module):
-    build_type = 'Release' if args.release else 'Debug'
+    env = find_jdk()
 
-    proc = execv([gradlew, f'{module}:assemble{build_type}',
-                  '-PconfigPath=' + op.abspath(args.config)])
+    build_type = "Release" if args.release else "Debug"
+    proc = execv(
+        [
+            gradlew,
+            f"{module}:assemble{build_type}",
+            "-PconfigPath=" + op.abspath(args.config),
+        ],
+        env=env,
+    )
     if proc.returncode != 0:
-        error(f'Build {module} failed!')
+        error(f"Build {module} failed!")
 
     build_type = build_type.lower()
 
-    apk = f'{module}-{build_type}.apk'
-    source = op.join(module, 'build', 'outputs', 'apk', build_type, apk)
-    target = op.join(config['outdir'], apk)
+    apk = f"{module}-{build_type}.apk"
+    source = op.join(module, "build", "outputs", "apk", build_type, apk)
+    target = op.join(config["outdir"], apk)
     mv(source, target)
-    header('Output: ' + target)
+    header("Output: " + target)
 
 
 def build_app(args):
-    header('* Building the Magisk app')
-    build_apk(args, 'app')
+    header("* Building the Magisk app")
+    build_apk(args, "app")
 
     # Stub building is directly integrated into the main app
     # build process. Copy the stub APK into output directory.
-    build_type = 'release' if args.release else 'debug'
-    apk = f'stub-{build_type}.apk'
-    source = op.join('app', 'src', build_type, 'assets', 'stub.apk')
-    target = op.join(config['outdir'], apk)
+    build_type = "release" if args.release else "debug"
+    apk = f"stub-{build_type}.apk"
+    source = op.join("app", "src", build_type, "assets", "stub.apk")
+    target = op.join(config["outdir"], apk)
     cp(source, target)
 
 
 def build_stub(args):
-    header('* Building the stub app')
-    build_apk(args, 'stub')
+    header("* Building the stub app")
+    build_apk(args, "stub")
 
 
 def cleanup(args):
-    support_targets = {'native', 'java'}
+    support_targets = {"native", "cpp", "rust", "java"}
     if args.target:
         args.target = set(args.target) & support_targets
+        if "native" in args.target:
+            args.target.add("cpp")
+            args.target.add("rust")
     else:
         args.target = support_targets
 
-    if 'native' in args.target:
-        header('* Cleaning native')
-        rm_rf(op.join('native', 'libs'))
-        rm_rf(op.join('native', 'obj'))
-        rm_rf(op.join('native', 'out'))
-        rm_rf(op.join('native', 'src', 'target'))
-        rm_rf(op.join('native', 'src', 'external', 'cxx-rs', 'target'))
+    if "cpp" in args.target:
+        header("* Cleaning C++")
+        rm_rf(op.join("native", "libs"))
+        rm_rf(op.join("native", "obj"))
+        rm_rf(op.join("native", "out"))
 
-    if 'java' in args.target:
-        header('* Cleaning java')
-        execv([gradlew, 'app:clean', 'app:shared:clean', 'stub:clean'])
-        rm_rf(op.join('app', 'src', 'debug'))
-        rm_rf(op.join('app', 'src', 'release'))
+    if "rust" in args.target:
+        header("* Cleaning Rust")
+        rm_rf(op.join("native", "src", "target"))
+        rm(op.join("native", "src", "boot", "proto", "mod.rs"))
+        rm(op.join("native", "src", "boot", "proto", "update_metadata.rs"))
+        for rs_gen in glob.glob("native/**/*-rs.*pp", recursive=True):
+            rm(rs_gen)
+
+    if "java" in args.target:
+        header("* Cleaning java")
+        execv([gradlew, "app:clean", "app:shared:clean", "stub:clean"], env=find_jdk())
+        rm_rf(op.join("app", "src", "debug"))
+        rm_rf(op.join("app", "src", "release"))
 
 
 def setup_ndk(args):
-    os_name = platform.system().lower()
-    ndk_ver = config['ondkVersion']
-    url = f'https://github.com/topjohnwu/ondk/releases/download/{ndk_ver}/ondk-{ndk_ver}-{os_name}.tar.gz'
-    ndk_archive = url.split('/')[-1]
+    ndk_ver = config["ondkVersion"]
+    url = f"https://github.com/topjohnwu/ondk/releases/download/{ndk_ver}/ondk-{ndk_ver}-{os_name}.tar.xz"
+    ndk_archive = url.split("/")[-1]
+    ondk_path = op.join(ndk_root, f"ondk-{ndk_ver}")
 
-    header(f'* Downloading and extracting {ndk_archive}')
+    header(f"* Downloading and extracting {ndk_archive}")
+    rm_rf(ondk_path)
     with urllib.request.urlopen(url) as response:
-        with tarfile.open(mode='r|gz', fileobj=response) as tar:
+        with tarfile.open(mode="r|xz", fileobj=response) as tar:
             tar.extractall(ndk_root)
 
     rm_rf(ndk_path)
-    mv(op.join(ndk_root, f'ondk-{ndk_ver}'), ndk_path)
+    mv(ondk_path, ndk_path)
 
-    header('* Patching static libs')
-    for target in ['arm-linux-androideabi', 'i686-linux-android']:
-        arch = target.split('-')[0]
+    header("* Patching static libs")
+    for target in ["arm-linux-androideabi", "i686-linux-android"]:
+        arch = target.split("-")[0]
         lib_dir = op.join(
-            ndk_path, 'toolchains', 'llvm', 'prebuilt', f'{os_name}-x86_64',
-            'sysroot', 'usr', 'lib', f'{target}', '23')
+            ndk_path,
+            "toolchains",
+            "llvm",
+            "prebuilt",
+            f"{os_name}-x86_64",
+            "sysroot",
+            "usr",
+            "lib",
+            f"{target}",
+            "23",
+        )
         if not op.exists(lib_dir):
             continue
-        src_dir = op.join('tools', 'ndk-bins', '21', arch)
-        rm(op.join(src_dir, '.DS_Store'))
+        src_dir = op.join("tools", "ndk-bins", arch)
+        rm(op.join(src_dir, ".DS_Store"))
         shutil.copytree(src_dir, lib_dir, copy_function=cp, dirs_exist_ok=True)
 
 
+def push_files(args, script):
+    abi = cmd_out([adb_path, "shell", "getprop", "ro.product.cpu.abi"])
+    apk = config["outdir"] + ("/app-release.apk" if args.release else "/app-debug.apk")
+
+    # Extract busybox from APK
+    busybox = f'{config["outdir"]}/busybox'
+    with ZipFile(apk) as zf:
+        with zf.open(f"lib/{abi}/libbusybox.so") as libbb:
+            with open(busybox, "wb") as bb:
+                bb.write(libbb.read())
+
+    try:
+        proc = execv([adb_path, "push", busybox, script, "/data/local/tmp"])
+        if proc.returncode != 0:
+            error("adb push failed!")
+    finally:
+        rm_rf(busybox)
+
+    proc = execv([adb_path, "push", apk, "/data/local/tmp/magisk.apk"])
+    if proc.returncode != 0:
+        error("adb push failed!")
+
+
 def setup_avd(args):
     if not args.skip:
         build_all(args)
 
-    header('* Setting up emulator')
+    header("* Setting up emulator")
 
-    abi = cmd_out([adb_path, 'shell', 'getprop', 'ro.product.cpu.abi'])
-    proc = execv([adb_path, 'push', f'native/out/{abi}/busybox', 'scripts/avd_magisk.sh', '/data/local/tmp'])
-    if proc.returncode != 0:
-        error('adb push failed!')
+    push_files(args, "scripts/avd_magisk.sh")
 
-    apk = 'out/app-release.apk' if args.release else 'out/app-debug.apk'
-    proc = execv([adb_path, 'push', apk, '/data/local/tmp/magisk.apk'])
+    proc = execv([adb_path, "shell", "sh", "/data/local/tmp/avd_magisk.sh"])
     if proc.returncode != 0:
-        error('adb push failed!')
-
-    proc = execv([adb_path, 'shell', 'sh', '/data/local/tmp/avd_magisk.sh'])
-    if proc.returncode != 0:
-        error('avd_magisk.sh failed!')
+        error("avd_magisk.sh failed!")
 
 
 def patch_avd_ramdisk(args):
@@ -517,46 +624,38 @@ def patch_avd_ramdisk(args):
         args.release = False
         build_all(args)
 
-    header('* Patching emulator ramdisk.img')
+    header("* Patching emulator ramdisk.img")
 
     # Create a backup to prevent accidental overwrites
-    backup = args.ramdisk + '.bak'
+    backup = args.ramdisk + ".bak"
     if not op.exists(backup):
         cp(args.ramdisk, backup)
 
-    ini = op.join(op.dirname(args.ramdisk), 'advancedFeatures.ini')
-    with open(ini, 'r') as f:
+    ini = op.join(op.dirname(args.ramdisk), "advancedFeatures.ini")
+    with open(ini, "r") as f:
         adv_ft = f.read()
 
     # Need to turn off system as root
-    if 'SystemAsRoot = on' in adv_ft:
+    if "SystemAsRoot = on" in adv_ft:
         # Create a backup
-        cp(ini, ini + '.bak')
-        adv_ft = adv_ft.replace('SystemAsRoot = on', 'SystemAsRoot = off')
-        with open(ini, 'w') as f:
+        cp(ini, ini + ".bak")
+        adv_ft = adv_ft.replace("SystemAsRoot = on", "SystemAsRoot = off")
+        with open(ini, "w") as f:
             f.write(adv_ft)
 
-    abi = cmd_out([adb_path, 'shell', 'getprop', 'ro.product.cpu.abi'])
-    proc = execv([adb_path, 'push', f'native/out/{abi}/busybox', 'scripts/avd_patch.sh', '/data/local/tmp'])
-    if proc.returncode != 0:
-        error('adb push failed!')
+    push_files(args, "scripts/avd_patch.sh")
 
-    apk = 'out/app-release.apk' if args.release else 'out/app-debug.apk'
-    proc = execv([adb_path, 'push', apk, '/data/local/tmp/magisk.apk'])
+    proc = execv([adb_path, "push", backup, "/data/local/tmp/ramdisk.cpio.tmp"])
     if proc.returncode != 0:
-        error('adb push failed!')
+        error("adb push failed!")
 
-    proc = execv([adb_path, 'push', backup, '/data/local/tmp/ramdisk.cpio.tmp'])
+    proc = execv([adb_path, "shell", "sh", "/data/local/tmp/avd_patch.sh"])
     if proc.returncode != 0:
-        error('adb push failed!')
+        error("avd_patch.sh failed!")
 
-    proc = execv([adb_path, 'shell', 'sh', '/data/local/tmp/avd_patch.sh'])
+    proc = execv([adb_path, "pull", "/data/local/tmp/ramdisk.cpio.gz", args.ramdisk])
     if proc.returncode != 0:
-        error('avd_patch.sh failed!')
-
-    proc = execv([adb_path, 'pull', '/data/local/tmp/ramdisk.cpio.gz', args.ramdisk])
-    if proc.returncode != 0:
-        error('adb pull failed!')
+        error("adb pull failed!")
 
 
 def build_all(args):
@@ -564,51 +663,62 @@ def build_all(args):
     build_app(args)
 
 
-parser = argparse.ArgumentParser(description='Magisk build script')
+parser = argparse.ArgumentParser(description="Magisk build script")
 parser.set_defaults(func=lambda x: None)
-parser.add_argument('-r', '--release', action='store_true',
-                    help='compile in release mode')
-parser.add_argument('-v', '--verbose', action='store_true',
-                    help='verbose output')
-parser.add_argument('-c', '--config', default='config.prop',
-                    help='custom config file (default: config.prop)')
-subparsers = parser.add_subparsers(title='actions')
+parser.add_argument(
+    "-r", "--release", action="store_true", help="compile in release mode"
+)
+parser.add_argument("-v", "--verbose", action="store_true", help="verbose output")
+parser.add_argument(
+    "-c",
+    "--config",
+    default="config.prop",
+    help="custom config file (default: config.prop)",
+)
+subparsers = parser.add_subparsers(title="actions")
 
-all_parser = subparsers.add_parser(
-    'all', help='build everything')
+all_parser = subparsers.add_parser("all", help="build everything")
 all_parser.set_defaults(func=build_all)
 
-binary_parser = subparsers.add_parser('binary', help='build binaries')
+binary_parser = subparsers.add_parser("binary", help="build binaries")
 binary_parser.add_argument(
-    'target', nargs='*', help=f"{', '.join(support_targets)}, \
-    or empty for defaults ({', '.join(default_targets)})")
+    "target",
+    nargs="*",
+    help=f"{', '.join(support_targets)}, \
+    or empty for defaults ({', '.join(default_targets)})",
+)
 binary_parser.set_defaults(func=build_binary)
 
-app_parser = subparsers.add_parser('app', help='build the Magisk app')
+cargo_parser = subparsers.add_parser("cargo", help="run cargo with proper environment")
+cargo_parser.add_argument("commands", nargs=argparse.REMAINDER)
+cargo_parser.set_defaults(func=run_cargo_cmd)
+
+app_parser = subparsers.add_parser("app", help="build the Magisk app")
 app_parser.set_defaults(func=build_app)
 
-stub_parser = subparsers.add_parser('stub', help='build the stub app')
+stub_parser = subparsers.add_parser("stub", help="build the stub app")
 stub_parser.set_defaults(func=build_stub)
 
-avd_parser = subparsers.add_parser(
-    'emulator', help='setup AVD for development')
-avd_parser.add_argument('-s', '--skip', action='store_true',
-    help='skip building binaries and the app')
+avd_parser = subparsers.add_parser("emulator", help="setup AVD for development")
+avd_parser.add_argument(
+    "-s", "--skip", action="store_true", help="skip building binaries and the app"
+)
 avd_parser.set_defaults(func=setup_avd)
 
-avd_patch_parser = subparsers.add_parser(
-    'avd_patch', help='patch AVD ramdisk.img')
-avd_patch_parser.add_argument('ramdisk', help='path to ramdisk.img')
-avd_patch_parser.add_argument('-s', '--skip', action='store_true',
-    help='skip building binaries and the app')
+avd_patch_parser = subparsers.add_parser("avd_patch", help="patch AVD ramdisk.img")
+avd_patch_parser.add_argument("ramdisk", help="path to ramdisk.img")
+avd_patch_parser.add_argument(
+    "-s", "--skip", action="store_true", help="skip building binaries and the app"
+)
 avd_patch_parser.set_defaults(func=patch_avd_ramdisk)
 
-clean_parser = subparsers.add_parser('clean', help='cleanup')
+clean_parser = subparsers.add_parser("clean", help="cleanup")
 clean_parser.add_argument(
-    'target', nargs='*', help='native, java, or empty to clean both')
+    "target", nargs="*", help="native, cpp, rust, java, or empty to clean all"
+)
 clean_parser.set_defaults(func=cleanup)
 
-ndk_parser = subparsers.add_parser('ndk', help='setup Magisk NDK')
+ndk_parser = subparsers.add_parser("ndk", help="setup Magisk NDK")
 ndk_parser.set_defaults(func=setup_ndk)
 
 if len(sys.argv) == 1:

buildSrc/build.gradle.kts

@@ -16,9 +16,9 @@ gradlePlugin {
 }
 
 dependencies {
-    implementation(kotlin("gradle-plugin", "1.8.10"))
-    implementation("com.android.tools.build:gradle:8.1.0-alpha11")
-    implementation("androidx.navigation:navigation-safe-args-gradle-plugin:2.5.3")
+    implementation(embeddedKotlin("gradle-plugin"))
+    implementation("com.android.tools.build:gradle:8.1.2")
+    implementation("androidx.navigation:navigation-safe-args-gradle-plugin:2.7.4")
     implementation("org.lsposed.lsparanoid:gradle-plugin:0.5.2")
-    implementation("org.eclipse.jgit:org.eclipse.jgit:6.4.0.202211300538-r")
+    implementation("org.eclipse.jgit:org.eclipse.jgit:6.7.0.202309050840-r")
 }

buildSrc/src/main/java/Codegen.kt

@@ -64,19 +64,6 @@ private fun PrintStream.byteField(name: String, bytes: ByteArray) {
     println("}")
 }
 
-fun genKeyData(keysDir: File, outSrc: File) {
-    outSrc.parentFile.mkdirs()
-    PrintStream(outSrc).use {
-        it.println("package com.topjohnwu.magisk.signing;")
-        it.println("public final class KeyData {")
-
-        it.byteField("verityCert", File(keysDir, "verity.x509.pem").readBytes())
-        it.byteField("verityKey", File(keysDir, "verity.pk8").readBytes())
-
-        it.println("}")
-    }
-}
-
 @CacheableTask
 abstract class ManifestUpdater: DefaultTask() {
     @get:Input

buildSrc/src/main/java/Setup.kt

@@ -69,13 +69,13 @@ private val Project.androidComponents
 
 fun Project.setupCommon() {
     androidBase {
-        compileSdkVersion(33)
-        buildToolsVersion = "33.0.1"
+        compileSdkVersion(34)
+        buildToolsVersion = "34.0.0"
         ndkPath = "$sdkDirectory/ndk/magisk"
 
         defaultConfig {
             minSdk = 23
-            targetSdk = 33
+            targetSdk = 34
         }
 
         compileOptions {
@@ -213,7 +213,7 @@ private fun Project.setupAppCommon() {
             this.comment.set("version=${Config.version}\n" +
                 "versionCode=${Config.versionCode}\n" +
                 "stubVersion=${Config.stubVersion}\n")
-            this.outFolder.set(File(buildDir, "outputs/apk/${variant.name}"))
+            this.outFolder.set(layout.buildDirectory.dir("outputs/apk/${variant.name}"))
         }
     }
 }
@@ -305,19 +305,6 @@ fun Project.setupApp() {
             }
         }
         mergeAssetsProvider.configure { dependsOn(syncAssets) }
-
-        val keysDir = rootProject.file("tools/keys")
-        val outSrcDir = File(buildDir, "generated/source/keydata/$name")
-        val outSrc = File(outSrcDir, "com/topjohnwu/magisk/signing/KeyData.java")
-
-        val genSrcTask = tasks.register("generate${variantCapped}KeyData") {
-            inputs.dir(keysDir)
-            outputs.file(outSrc)
-            doLast {
-                genKeyData(keysDir, outSrc)
-            }
-        }
-        registerJavaGeneratingTask(genSrcTask, outSrcDir)
     }
 }
 
@@ -331,8 +318,8 @@ fun Project.setupStub() {
             project.tasks.register("${variantName}ManifestProducer", ManifestUpdater::class.java) {
                 dependsOn("generate${variantCapped}ObfuscatedClass")
                 applicationId.set(variant.applicationId)
-                appClassDir.set(File(buildDir, "generated/source/app/$variantName"))
-                factoryClassDir.set(File(buildDir, "generated/source/factory/$variantName"))
+                appClassDir.set(layout.buildDirectory.dir("generated/source/app/$variantName"))
+                factoryClassDir.set(layout.buildDirectory.dir("generated/source/factory/$variantName"))
             }
         variant.artifacts.use(manifestUpdater)
             .wiredWithFiles(
@@ -344,12 +331,12 @@ fun Project.setupStub() {
     android.applicationVariants.all {
         val variantCapped = name.replaceFirstChar { it.uppercase() }
         val variantLowered = name.lowercase()
-        val outFactoryClassDir = File(buildDir, "generated/source/factory/${variantLowered}")
-        val outAppClassDir = File(buildDir, "generated/source/app/${variantLowered}")
-        val outResDir = File(buildDir, "generated/source/res/${variantLowered}")
+        val outFactoryClassDir = layout.buildDirectory.file("generated/source/factory/${variantLowered}").get().asFile
+        val outAppClassDir = layout.buildDirectory.file("generated/source/app/${variantLowered}").get().asFile
+        val outResDir = layout.buildDirectory.dir("generated/source/res/${variantLowered}").get().asFile
         val aapt = File(android.sdkDirectory, "build-tools/${android.buildToolsVersion}/aapt2")
-        val apk = File(buildDir, "intermediates/processed_res/" +
-            "${variantLowered}/out/resources-${variantLowered}.ap_")
+        val apk = layout.buildDirectory.file("intermediates/processed_res/" +
+            "${variantLowered}/out/resources-${variantLowered}.ap_").get().asFile
 
         val genManifestTask = tasks.register("generate${variantCapped}ObfuscatedClass") {
             inputs.property("seed", RAND_SEED)
@@ -390,10 +377,10 @@ fun Project.setupStub() {
         registerJavaGeneratingTask(processResourcesTask, outResDir)
     }
     // Override optimizeReleaseResources task
-    val apk = File(buildDir, "intermediates/processed_res/" +
-        "release/out/resources-release.ap_")
-    val optRes = File(buildDir, "intermediates/optimized_processed_res/" +
-        "release/resources-release-optimize.ap_")
+    val apk = layout.buildDirectory.file("intermediates/processed_res/" +
+        "release/out/resources-release.ap_").get().asFile
+    val optRes = layout.buildDirectory.file("intermediates/optimized_processed_res/" +
+        "release/resources-release-optimize.ap_").get().asFile
     afterEvaluate {
         tasks.named("optimizeReleaseResources") {
             doLast { apk.copyTo(optRes, true) }

docs/README.md

@@ -7,7 +7,8 @@
 
 The following sections are for developers
 
-- [Developer Guides](guides.md)
+- [Building and Developing Magisk](build.md) (for developing Magisk itself)
+- [Developer Guides](guides.md) (for developers **using** Magisk)
 - [Magisk Tools](tools.md)
 - [Internal Details](details.md)
 - [Android Booting Shenanigans](boot.md)

docs/build.md

@@ -0,0 +1,64 @@
+# Building and Development
+
+## Setup Environment
+
+- Supported platforms:
+  - Linux x64
+  - macOS x64 (Intel)
+  - macOS arm64 (Apple Silicon)
+  - Windows x64
+- Windows only: Enable [developer mode](https://learn.microsoft.com/en-us/windows/apps/get-started/enable-your-device-for-development). This is required because we need symbolic link support.
+- Install Python 3.8+:
+  - On Unix, install python3 using your favorite package manager
+  - On Windows, download and install the latest Python version on the [official website](https://www.python.org/downloads/windows/).<br>
+    Make sure to select **"Add Python to PATH"** during installation.
+  - (Optional on Windows): Run `pip install colorama` to install the `colorama` python package
+- Install Git:
+  - On Unix, install git with your favorite package manager
+  - On Windows, download the install the latest Git version on the [official website](https://git-scm.com/download/win).<br>
+    Make sure to **"Enable symbolic links"** during installation.
+- Install Android Studio and follow the instructions and go through the initial setup.
+- Set environment variable `ANDROID_SDK_ROOT` to the Android SDK folder. This path can be found in Android Studio settings.
+- Setup JDK:
+  - The recommended option is to set environment variable `ANDROID_STUDIO` to the path where your Android Studio is installed. The build script will automatically find and use the bundled JDK.
+  - You can also setup JDK 17 yourself, but this guide will not cover the instructions.
+- Clone sources: `git clone --recurse-submodules https://github.com/topjohnwu/Magisk.git`
+- Run `./build.py ndk` to let the script download and install NDK for you
+
+## Building
+
+- To build everything and create the final Magisk APK, run `./build.py all`.
+- You can also build specific sub-components; call `build.py` to see your options. \
+  For each action, use `-h` to access help (e.g. `./build.py binary -h`)
+- Configure the build by using `config.prop`. A sample `config.prop.sample` is provided.
+
+## IDE Support
+
+- The repository can be directly opened with Android Studio as a project.
+- The Kotlin, Java, C++, and C code in the project should be properly supported in Android Studio out of the box.
+- Run `./build.py binary` before working on native code, as some generated code is only created during the build process.
+
+### Developing Rust in Android Studio
+
+Because the Magisk NDK package, [ONDK](https://github.com/topjohnwu/ondk) (the one installed with `./build.py ndk`), contains a fully self contained Clang + Rust toolchain, building the Magisk project alone does not require configuring toolchains. However, due to the way the IntelliJ Rust plugin works, you'll have to go through some additional setup to make Android Studio work with Magisk's Rust codebase:
+
+- Install [rustup](https://rustup.rs/), the official Rust toolchain manager
+- Link the ONDK Rust toolchain and set it as default:
+
+```bash
+# Link the ONDK toolchain with the name "magisk"
+rustup toolchain link magisk "$ANDROID_SDK_ROOT/ndk/magisk/toolchains/rust"
+# Set as default
+rustup default magisk
+```
+
+- Install the [Intellij Rust plugin](https://www.jetbrains.com/rust/) in Android Studio
+- In Preferences > Languages & Frameworks > Rust, set `$ANDROID_SDK_ROOT/ndk/magisk/toolchains/rust/bin` as the toolchain location
+- Open `native/src/Cargo.toml`, and select "Attach" in the "No Cargo projects found" banner
+
+## Signing and Distribution
+
+- In release builds, the certificate of the key signing the Magisk APK will be used by Magisk's root daemon as a reference to reject and forcefully uninstall any non-matching Magisk apps to protect users from malicious and unverified Magisk APKs.
+- To do any development on Magisk itself, switch to an **official debug build and reinstall Magisk** to turn off the signature check.
+- To distribute your own Magisk builds signed with your own keys, set your signing configs in `config.prop`.
+- Check [Google's Documentation](https://developer.android.com/studio/publish/app-signing.html#generate-key) for more details on generating your own key.