Android 取得root权限的方法
On the emulator provided with the SDK r10, you can get a root
shell executing “adb shell” from your host computer. Once you have
such root shell, you cat follow this steps to get a command that
can log you as root from the terminal emulator:
# Remount /data to allow executables and setuids
on itmount -o
remount,rw
/dev/block/mtdblock1 /data# There’s no “cp” command on
Androidcat /system/bin/sh >
/data/su# Give setuid permissions to the
shellchmod 7755 /data/su
Now, from the emulator, just run “/data/su” and that’s it,
you’re root.
The normal “/system/xbin/su” command included in the SDK
performs internal user id checks, so these commands…
mount -o remount,rw /dev/block/mtdblock0 /system
chmod 7755 /system/xbin/su
…just won’t work. There’s no way to trick /system/xbin/su to
allow the normal user (UID 10018 in my case) to become root.
Please note that dealing with setuid programs can be a security
risk (not higher than having a universal “su” command, though). Use
this solution at your own risk.
发布者：全栈程序员-站长，转载请注明出处：https://javaforall.net/232955.html原文链接：https://javaforall.net
