0

Our company uses a few devices for in house tasks. I have the SU binary flashed to my devices. I have proprieteary apps installed that access the SU through hardcoded shell commands. My devices are completeley locked and cannot install new apps (no package installer, custom recovery, and re-engineered USB ports) so I don't really have any security concerns. At the present we rely on a 3rd party SuperUser app to grant privaleges to our own apps. Is there a way to Automatically grant SU priveleage to all the apps on the device (we trust them all - because we wrote them) without prompting the user? Understanding that a few SU apps do have a feature to "allow all" I still ask because I would like to avoid using 3rd party software completely.

Can I just remove the SU app, or do I need to write a replacement?

sh7411usa
  • 53
  • 1
  • 7
  • From where did you get the su binary? – Irfan Latif Feb 12 '19 at 02:30
  • flashed it from a zip before we installed our own recovery – sh7411usa Feb 12 '19 at 11:21
  • And who provided that zip? – Irfan Latif Feb 12 '19 at 12:32
  • Pulled it from here , worked for us. – sh7411usa Feb 13 '19 at 15:37
  • I think you can Allow All and then delete the su app... – Empire of E Feb 14 '19 at 03:48
  • Also, you probably just need build you own SU app... One that does nothing. – Empire of E Feb 14 '19 at 03:49
  • @sh7411usa those must be really old devices if just placing su binary elevates root privileges. Starting with JB, it went on getting harder and harder. Anyway, granted/denied su requests are managed by UI app and usually stored in a file somewhere. The latest rooting solution Magisk, for instance, stores its settings in SQLite database file /data/adb/magisk.db. You need to figure that out to make su work without UI app. I'm not sure how strongly this old su binary is hooked to the UI app. – Irfan Latif Feb 15 '19 at 01:17
  • Answered here – Irfan Latif Feb 23 '19 at 21:34
  • @Irfan Latif - having read your link, would that imply that on ICS (yup! our devices are that old) we would need a root permissions manager? – sh7411usa Feb 24 '19 at 17:14
  • @sh7411usa not necessarily. You need to find some su binary that works independently without permission manager app. I'm not sure if any such working thing exists. Another workaround would be to create a database or config file (wherever su saves permission granted/denied policy) for all possibly installed apps and put that database on all devices. – Irfan Latif Feb 24 '19 at 18:05

0 Answers0