Eventually I want to install CyanogenMod, but for now I decided I wanted to play around with the 4.3 OTA as a learning experience. Anyway, I'm trying to modify the OTA update so that when I flash it, it doesn't install Knox. My phone is rooted stock MG2 and I'm using Philz Recovery. So far I've modified the updater-script file with these changes. - Added this line "set_perm(0, 0, 06755, "/system/xbin/su");" after the line where xbin has its permissions set - Removed the lines where is was patching SSuggest.apk with KLMSAgent.apk - Removed the line where it was renaming SSuggest.apk to KLMSAgent.apk - Added a line to delete "/system/app/SSuggest.apk" - Removed the lines that extract aboot.mbn to /dev/block/mmcblk0p5 - Removed the lines that extract sbl2.mbn to /dev/block/mmcblk0p3 - Removed the lines that extract sbl3.mbn to /dev/block/mmcblk0p4 - Modified the lines that are deleting "recovery-from-boot.p" and "install-recovery.sh" to delete "recovery-from-boot.p.bak" and "install-recovery.sh.bak" instead since mine were renamed to that. This is what I've done to the zip file. - deleted aboot.mbn - deleted sbl2.mbn - deleted sbl3.mbn - renamed /recovery/recovery-from-boot.p" to /recovery/recovery-from-boot.p.bak - renamed "/recovery/etc/install-recovery.sh" to "/recovery/etc/install-recovery.sh.bak" - deleted KLMSAgent.odex - deleted KNOXAgent.apk and KNOXAgent.odex - deleted KnoxAttestationAgent.apk and KnoxAttestationAgent.odex - deleted KNOXStore.apk and KNOXStore.odex - deleted ContainerAgent.apk and ContainerAgent.odex - deleted ContainerEventsRelayManager.apk and ContainerEventsRelayManager.odex My questions are: Is it safe to let it extract "tz.mbn" to "/dev/block/mmcblk0p8"? Is it safe to let it extract "rpm.mbn" to "/dev/block/mmcblk0p6"? Should I worry about mmcblk0p7 being patched with "boot.img.p"? Should I not have removed sbl2.mbn and sbl3.mbn? Are the above files in any way part of Knox? Is there anything else I need to do to the zip file before I can flash it from the Custom Recovery?