Hi,
Is it possible that apps obtain root rights without you know it ?
Could you please answer for
1) rooted smartphones,
2) unrooted smartphones.
Sorry if my question seems too basic.
Amusons-nous avant tout !
iwanttoknow said:
Hi,
Is it possible that apps obtain root rights without you know it ?
Could you please answer for
1) rooted smartphones,
2) unrooted smartphones.
Sorry if my question seems too basic.
Amusons-nous avant tout !
Click to expand...
Click to collapse
System applications always have root regardless of whether your phone is rooted or not. Third party apps usually don't have root rights, but malicious ones may exploit processes and apps that have root. If your device is not rooted, you wouldn't notice anything. If you have root and root control app like Supersu, you can restrict many apps. If you have Xposed privacy module, you can restrict even system apps, but you have to know what you are doing, otherwise, you may break your system...
optimumpro said:
System applications always have root regardless of whether your phone is rooted or not. Third party apps usually don't have root rights, but malicious ones may exploit processes and apps that have root. If your device is not rooted, you wouldn't notice anything. If you have root and root control app like Supersu, you can restrict many apps. If you have Xposed privacy module, you can restrict even system apps, but you have to know what you are doing, otherwise, you may break your system...
Click to expand...
Click to collapse
My smartphone is rooted and SuperSU, Xposed framework and XPrivacy module installed.
I deactivate SU when I don't need it; I think it's a good IT practice.
After reading your answer, I have two other issues :
1) I understood that malicious apps may gain root rights by using security weaknessses of processes and apps that have root. Is it also possible if SU is deactivated ?
2) If SU is activated, is it possible that malicious apps may gain root rights without being warned by SuperSU ?
Thanks for your help.
iwanttoknow said:
My smartphone is rooted and SuperSU, Xposed framework and XPrivacy module installed.
I deactivate SU when I don't need it; I think it's a good IT practice.
After reading your answer, I have two other issues :
1) I understood that malicious apps may gain root rights by using security weaknessses of processes and apps that have root. Is it also possible if SU is deactivated ?
2) If SU is activated, is it possible that malicious apps may gain root rights without being warned by SuperSU ?
Thanks for your help.
Click to expand...
Click to collapse
You shouldn't deactivate Supersu, because it really helps you to have more control over apps. You can set it not to trust even system user; you can set it to deny root during boot. You can set a password which will prevent apps from having root without a prompt. So, if you deactivate it, you lose some protection. In addition, there are some very good open source apps that give you additional protection, such as Afwall, which requires root. If you disable root, it won't work. From a secuirty point of view, it is better to have Supersu on all the time, but it has to be properly configured...
Malicious apps may still get root from those processes that have root regardless of Supersu. No system for any device is guaranteed against exploits, which are not known until they are discovered. Deactivating Supersu or unrooting your device does NOT revoke root rights from system apps. They have it anyway. Your phone would simply not boot or function if the opposite were true...
Thanks for your advice and explanations.
You wrote :
From a secuirty point of view, it is better to have Supersu on all the time, but it has to be properly configured...
Could you please publish an example of a proper configuration for SuperSU ?
iwanttoknow said:
Thanks for your advice and explanations.
You wrote :
From a secuirty point of view, it is better to have Supersu on all the time, but it has to be properly configured...
Could you please publish an example of a proper configuration for SuperSU ?
Click to expand...
Click to collapse
Enable pro; enable su; reauthentication; default access - prompt; enable pin code; don't enable su during boot; enable mount namespace separation; enable tapjacking; don't trust system user. In developer section grant root to apps only.
Unless you use MM, don't upgrade Superuser above 2.65...
I don't know what is "enable tapjacking".
Could you explain please ?
Amusons-nous avant tout !
iwanttoknow said:
I don't know what is "enable tapjacking".
Could you explain please ?
Amusons-nous avant tout !
Click to expand...
Click to collapse
It is all in Supersu settings...
optimumpro said:
In developer section grant root to apps only.
Click to expand...
Click to collapse
Hi, where is developer section? All other options are present but except this one.
@optimumpro
Sorry, but I don't understand why it's better to have always SU activated.
From my point of view, if SU is only activated when I need it, it's not a hole of security.
What do you think about that ?
Amusons-nous avant tout !
scattey said:
Hi, where is developer section? All other options are present but except this one.
Click to expand...
Click to collapse
In your phone Settings...
iwanttoknow said:
@optimumpro
Sorry, but I don't understand why it's better to have always SU activated.
From my point of view, if SU is only activated when I need it, it's not a hole of security.
What do you think about that ?
Amusons-nous avant tout !
Click to expand...
Click to collapse
As I have already said, there are third party apps that can protect you and they require root. I will give you 2 examples: Afwall and Adaway. If you don't have afwall, your phone is exposed to the internet. Adaway takes care of ads/tracking/malware domains system wide. Both apps require permanent root.
@optimumpro
So, the logical conclusion if I have not installed third party apps requiring permanent root, is that in this case it's useless to let SU permanently activated.
But my initial question was about the fact to be warned or not if apps can gain root rights. So thanks to your first answer to my post, I conclude that if SU is permanently activated, I would be permanently warned after booting.
Am I right ?
Amusons-nous avant tout !
Related
Hey guys,
This is the wrong place forum, but I like you guys, so I will ask you a question
Say there is an app that requires root (in this case Cisco AnyConnect rooted version), but I do not want to have root access enabled from within Android OS. Is there a way to install the app with automatic root access? E.g. by flashing it from within the recovery?
Thanks,
Su
Do it need root access or system permissions ?
If it needs root, you must have "su" in android OS.
If it needs system permisssions, you could push it in /system/app/ or /system/priv-app/ (more access than /system/app/)
Hmm, from the description, it seems like root access... ah well, from the CM11 SuperUser settings, seems like it is possible to automatically deny root access to all requests, and only allow selected apps.
Perhaps this is a better way to set up the device...
Sumanji said:
Hmm, from the description, it seems like root access... ah well, from the CM11 SuperUser settings, seems like it is possible to automatically deny root access to all requests, and only allow selected apps.
Perhaps this is a better way to set up the device...
Click to expand...
Click to collapse
every app that wants SU permission should be prompting you the first time to allow or deny it.
if any app gets SU permission without you allowing it, something is wrong.
what i dont understand is, you said the phone is NOT rooted, then mentioned cm11. if you are running cm11, your phone is already rooted.
Hi There, does rooting and unrooting affect phone's performance ? what if I root my S6 and unroot it (let's assume that I repeat this 4-5 times ) will it affect ? please let me know.
Bhargav Hegde said:
Hi There, does rooting and unrooting affect phone's performance ? what if I root my S6 and unroot it (let's assume that I repeat this 4-5 times ) will it affect ? please let me know.
Click to expand...
Click to collapse
No, it shouldn't affect the phone performance. However you can install apps with root that can affect your system (as root you will have and give your apps permission to change and even damage the phone OS), in any case a simple restore would fix any malicious app.
So while root is safe, make sure you just give root privileges to apps you trust, malicious software can use this privileges for bad purposes.
Root - A SuperUser with all rights and permissions (or an administrator)
Rooting - A process of getting those SuperUser (or administrative) rights and permissions
Unrooting - Giving up SuperUser rights and permissions
As you might have figured - rooting in itself will not affect performance or security of a device; what you do after acquiring those rights and permission will affect performance and security of the device.
You can root unroot a thousand times if it pleases you; the process itself will not damage the device; ofcourse, as long as you read and follow the process properly and as directed by the author.
I want to have fb messenger in ultra power saving mode (UPSM). for that i need to use the UPSM Manager app which requires root. I really do not like to root, because more and more apps are blocking rooted devices (Barclays banking, android pay, pokemon go). So I am asking if there exists some methods for gaining temp root (e.g. with adb). so i can install and use upsm-m once and then reboot and root is gone. It is important that the flag is not flipping.
Thank you for all your help
Shiro
Nope, and even if you could, the app would fail as soon as root was removed
*Detection* said:
Nope, and even if you could, the app would fail as soon as root was removed
Click to expand...
Click to collapse
I expected that, on my old htcs there were temp roots available.
But the failing of the app after removing root, is not a problem. The app is just a configfile creator. Since the config file has changed, the app is not needed anymore.
Hi All,
Need help of this forum in solving a problem. The problem is in two parts.
1. I need to gain root access on my 7.1.1 on Merlin.
So can i use adb to gain root access ? Learnt something like this from giving elevated access to Greenify for doze. Can someone point to the right direction so that i can learn it to do myself and not depend on third party apps.
2. I have given administrator usages to Airwatch Agent which monitors whether i have root or not. If i gain root access then i lose the service and wont be able to view configured mails. So basically i need to root and not let all the apps know i have root. Somehow hide it.
Please guide. Thanks in advance.
deepray said:
Hi All,
Need help of this forum in solving a problem. The problem is in two parts.
1. I need to gain root access on my 7.1.1 on Merlin.
So can i use adb to gain root access ? Learnt something like this from giving elevated access to Greenify for doze. Can someone point to the right direction so that i can learn it to do myself and not depend on third party apps.
2. I have given administrator usages to Airwatch Agent which monitors whether i have root or not. If i gain root access then i lose the service and wont be able to view configured mails. So basically i need to root and not let all the apps know i have root. Somehow hide it.
Please guide. Thanks in advance.
Click to expand...
Click to collapse
Well, basically you are not going to get around AirWatch knowing you are rooted, even with Magisk if their Air Watch server is relatively current... I have tried and tried this (we sell and administer Airwatch for ourselves and lots of customers). Airwatch has been specifically designed to detect King*Root, SuperSU, and Magisk (and it's iPhone equivalents), and it uses far more advanced detection schemes than just SafetyNet, so far it hasn't been bypassed that we have seen on Android 6 and higher devices... (Android 5.1 and older have a different mechanism for bypassing root detection from Airwatch that apparently isn't possible with Marshmallow and higher). Also be aware that Airwatch will flag any device on a custom ROM of any kind too (rooted or not) as an incompatible device.
I don't think there is sufficient need for a detection bypass to be implemented into Magisk for Airwatch, and I am not sure the developers would even consider it, since it would be more about getting around a corporate security policy you agreed too more than just getting around some stupid restrictions from the Play Store or an app developer, but hey, it's worth a shot to ask I guess.
Getting around most apps knowing you have root is pretty simple with Magisk, but Airwatch and some of it's competitors MDM applications are much tougher to deal with.
To be honest you are better to just let Greenify go or to get a separate cheapo device just for your corporate email and keep root on your personal device.
Thats insightful.
Thanks a lot for the comments. I however have not seen Airwatch revoking my device enrollment even when i am running a custom ROM. It just checks whether i have root or not.
And can you guide how to use Magisk to root my Nougat on merlin.
deepray said:
Thanks a lot for the comments. I however have not seen Airwatch revoking my device enrollment even when i am running a custom ROM. It just checks whether i have root or not.
And can you guide how to use Magisk to root my Nougat on merlin.
Click to expand...
Click to collapse
Download Magisk and flash it... If your running a custom ROM with SuperSU or some other root built in, might want to ask in your ROM thread to see the right process.
Odd a custom ROM doesn't do anything weird... We have tried several ROM's on our Nexus device and every one will not allow device enrollment.
Confused
acejavelin said:
Download Magisk and flash it... If your running a custom ROM with SuperSU or some other root built in, might want to ask in your ROM thread to see the right process.
Odd a custom ROM doesn't do anything weird... We have tried several ROM's on our Nexus device and every one will not allow device enrollment.
Click to expand...
Click to collapse
I flashed magisk. It rooted my device. Could use greenify with root and lucky patcher with root too. Which means i have got root access. Now comes Airwatch Agent. It asked for root access And i denied it. So now my device is not unenrolled and i am able to use configured mails successfully. Happy. But confused.
deepray said:
I flashed magisk. It rooted my device. Could use greenify with root and lucky patcher with root too. Which means i have got root access. Now comes Airwatch Agent. It asked for root access And i denied it. So now my device is not unenrolled and i am able to use configured mails successfully. Happy. But confused.
Click to expand...
Click to collapse
So latest Magisk is not seen by AirWatch... Nice. I'll have to play with it again.
But there's a new problem now.
acejavelin said:
So latest Magisk is not seen by AirWatch... Nice. I'll have to play with it again.
Click to expand...
Click to collapse
I lost the root. Dont know why. I actually tried installing supersu from playstore which asked something like- do you want to copy binaries to somwhere and i said yes. To that effect my device was unenrolled by Airwatch Agent. Then i removed supersu and i was able to enrol my device again. But the next morning i am noy rooted anymore. Lucky patcher says root is not stable. Don't know what to do.
deepray said:
I lost the root. Dont know why. I actually tried installing supersu from playstore which asked something like- do you want to copy binaries to somwhere and i said yes. To that effect my device was unenrolled by Airwatch Agent. Then i removed supersu and i was able to enrol my device again. But the next morning i am noy rooted anymore. Lucky patcher says root is not stable. Don't know what to do.
Click to expand...
Click to collapse
You can't mix SuperSU and Magisk... after you flash Magisk you need to install Magisk Manager, but it isn't in the Play Store.
And BTW, don't mention Lucky Patcher here... that is purely a pirating app and users of it are thieves.
I will not assist you with anything to do with that software.
acejavelin said:
You can't mix SuperSU and Magisk... after you flash Magisk you need to install Magisk Manager, but it isn't in the Play Store.
And BTW, don't mention Lucky Patcher here... that is purely a pirating app and users of it are thieves.
I will not assist you with anything to do with that software.
Click to expand...
Click to collapse
I am sorry if i offended the community. I installed it as a means to achieve background play of YouTube as till Marshmallow, this was beautifully done by xposed mods. But as for Nougat as xposed is still in development, i needed that app.
I was not aware of other uses of that app. Nor do i have any further intention. Actually i tried using OG Youtube and the other app which was needed but that provided for popup only. Hope you understand.
deepray said:
I am sorry if i offended the community. I installed it as a means to achieve background play of YouTube as till Marshmallow, this was beautifully done by xposed mods. But as for Nougat as xposed is still in development, i needed that app.
I was not aware of other uses of that app. Nor do i have any further intention. Actually i tried using OG Youtube and the other app which was needed but that provided for popup only. Hope you understand.
Click to expand...
Click to collapse
Not really... Background playback on YouTube is a paid service, no matter how you bypass that it's stealing.
Trust me, I don't like it either but I'm not going to steal the service
acejavelin said:
Not really... Background playback on YouTube is a paid service, no matter how you bypass that it's stealing.
Trust me, I don't like it either but I'm not going to steal the service
Click to expand...
Click to collapse
Got the message. I found it difficult to draw the line though.
I've got hope. The GSAMBattery app said it needs rights to display more data. If you have root, the app does that for you. If not, you should enter this command:
adb shell pm grant com.gsamlabs.bbm android.permission.BATTERY_STATS
The way I see it, it simply means that I'm granting rights here that I could otherwise only do with root. Now the question: Is it possible with ALL rights? I would need the superuser for the App Automate, so that it can automatically move my device into the flight mode and out again.
Translated with www.DeepL.com/Translator
Try this
You can use Magisk root and use Magisk manager to hide root status from your device to use all applications.:laugh:
Thats not the point. Huawei doesnt give away unlock codes anymore (dont know why) and I also want future OTAs. So actually rooting is no option.
I just wonder bc the line above IS some kind of acting as root. So isnt it possible to gibe rights to other apps the same way?
Is it not possible? Then why did it work with the battery app?
Rookie1919 said:
Is it not possible? Then why did it work with the battery app?
Click to expand...
Click to collapse
The command that you used is not the same thing as root permissions, you merely granted the app permission for a certain action. No, you cannot use this methid to acheive the sane thing as full root permissions for all apps.
Sent from my LGL84VL using Tapatalk
I dont want to do a full root permission with this command. The app Automate need "superuser" rights for putting the device in flight mode. I only want to grant that one for the one specific app.