[Q] Security of rooted Android devices - Android Q&A, Help & Troubleshooting

Hello!
I have some basic questions about the security of rooted android devices. I'm running Cyanogenmod 11 actually on my SGS3. Of course I rooted it to install custom Recovery and ROM. So is there any possibility for an App to get Root Access without recognition?
I dont need the Root access anymore, I only wanted to install Cyanogenmod and thats it. What to do to fully unroot Cyanogen?
Another question:
If i have enabled "only install from trusted sources" am I safe? Or could there be sort of drive-by-downloads for example on this site sometimes i get the pop-up "your phone has (13) viruses, click ok ...".
Yeah thats it, I'm a little bit paranoid especially according to my passwords, are they safe!?
Thanks a lot and Greets from Germany!

RedMr said:
I'm running Cyanogenmod 11 actually on my SGS3. Of course I rooted it to install custom Recovery and ROM. So is there any possibility for an App to get Root Access without recognition?
I dont need the Root access anymore, I only wanted to install Cyanogenmod and thats it. What to do to fully unroot Cyanogen?
Click to expand...
Click to collapse
You can't be unrooted and have CyanogenMod installed; that's an oxymoron. You can, of course, be unrooted without CM installed, but you can't have 'em both.
RedMr said:
If i have enabled "only install from trusted sources" am I safe? Or could there be sort of drive-by-downloads for example on this site sometimes i get the pop-up "your phone has (13) viruses, click ok ...".
Click to expand...
Click to collapse
You're safe even without "only install from trusted sources" turned on. Just make sure not to install anything at all that you didn't specifically tell your device to install.
RedMr said:
I'm a little bit paranoid especially according to my passwords, are they safe!?
Click to expand...
Click to collapse
Unless you have an actual trojan or virus installed on your phone, your passwords are perfectly safe.
To check and make sure you're secure, download and install the avast! Mobile Security & Antivirus app from Google Play, and run a device scan.

Is there any possibility for getting installed without recognizing?
Can an app get Root permissions without giving them?

RedMr said:
Is there any possibility for getting installed without recognizing?
Can an app get Root permissions without giving them?
Click to expand...
Click to collapse
If you're not already, you need to use a Super User app like SuperSU (the best one). It allows you to grant/deniy apps root access. If it asks to grant/deny permission to an app that you didn't install or isn't a function of CM, or simply don't want to grant root access, then deny it permission.
EDIT: As Nookie said, you can't accidentally install something even if you allow installations of apps that aren't from "trusted sources". If you do install apps from non "trusted sources", just be smart about it.

Related

[Q] install apk as system app

Is there a way to install an apk as a system app? I want to 'unroot' a device but still run an app that requires root access. I'm unsure of how this can be done, any advise would be very much appreciated!
Thanks
I know that the Z4 root app has an option for temp root functions which goes back to an unrooted state once you reboot.
My guess is that you can run that, place your apk in the appropriate system folder, install the apk from there & then reboot.
But again I'm not to sure if temp root functions work on our G-Tabs & if it does if it's as simple as I explained. Worth a try I guess.
Again I'm assuming that your not already in a permanent root state. If so then you'll have to unroot completely first & then try what I mentioned above.
Unless someone has an easier method?
convert user apps to system apps
nikt said:
Is there a way to install an apk as a system app? I want to 'unroot' a device but still run an app that requires root access. I'm unsure of how this can be done, any advise would be very much appreciated!
Thanks
Click to expand...
Click to collapse
Titanium Backup Pro (paid version 3.8.1 and higher) has a function that allows one to convert user apps-->system apps (as well as system app-->user app ... though this sometimes causes initial FCs, which generally disappear with reboot).
Not sure if the effect will remain after unrooting.
Just to clear up a bit, not because an app its on /system it will have root access. If you want to run an app that needs root, you need root, thats it. You cant unroot and use the app after that.
So, no you cant do that. Its 2 different things installing an app on /system than having root for an app.
pmcnano said:
Just to clear up a bit, not because an app its on /system it will have root access. If you want to run an app that needs root, you need root, thats it. You cant unroot and use the app after that.
So, no you cant do that. Its 2 different things installing an app on /system than having root for an app.
Click to expand...
Click to collapse
So then how do proprietary apps like Sprint Nascar (as an example) run on an unrooted phone?
Why would Sprint Nascar need root permision?
pmcnano said:
Why would Sprint Nascar need root permision?
Click to expand...
Click to collapse
It probably doesn't or it might I have no idea. The op never pointed out which apps he wants to use.
However & this is a big however, as I have no idea which apps require root access, one has to assume that any of the preinstalled apps that come on our G-Tabs do in fact need root access, yet they can run on an unrooted device. Again I could be wrong.
That being said, how does one go about determining which apps require root access?
Thanks for the replies guys. The issue is supporting proxy servers on unrooted devices. There are several proxy apps that require root access as well as a kernel that supports proxy. If the proxy app were installed as a system app, would this have enough rights to access the kernel as required? I don't know enough about this but was led to believe this might work if it was running as system. Same for apps that use CIFS, like mount manager. I guess I'll give it a try and see what happens...!
Like I said, being installed on System doesnt have anything to do with having root or not.
Im 95% sure about what I am saying.
edit: I confirmed it..so 100% sure, if the app needs root, you will need root no matter where the app is installed.

[Q] Rooting a Device with citrix mobile connect

I have to install citrix mobile connect to connect to the Exchange server at work, and citrix will not run on a rooted device
is there a way to overcome this or perhaps install a different app to receive exchange sync?
(for example will "hide root" work here)?
You can try voodoo rootkeeper that can perform a temporary unroot.
I will start with this thread and see if blocks the exchange sync, http://forum.xda-developers.com/showthread.php?t=1957273
I hope rooting doenst erase my data, as I am already working for a week with the device.
Anyway, I will run titnium backup before I start
ofird said:
I will start with this thread and see if blocks the exchange sync, http://forum.xda-developers.com/showthread.php?t=1957273
I hope rooting doenst erase my data, as I am already working for a week with the device.
Anyway, I will run titnium backup before I start
Click to expand...
Click to collapse
titanium backup needs root
just found that out
So - any other ROM back up program out there that doesnt neet root?
or perhaps i dont have to worry about losing data with CFAuto root?
ofird said:
just found that out
So - any other ROM back up program out there that doesnt neet root?
or perhaps i dont have to worry about losing data with CFAuto root?
Click to expand...
Click to collapse
rooting does not delete data, whereas you never can be sure 100% that it will go as planned. Nevertheless there is not app that can backup 100% of your rom without root.
so i will take my chances :0)
Ke sera sera
done, went smooth
although I am running "root checker" and it says system running slow and doenst return results
is there a specific app i should install now ? "super SU" or something?
ofird said:
done, went smooth
although I am running "root checker" and it says system running slow and doenst return results
is there a specific app i should install now ? "super SU" or something?
Click to expand...
Click to collapse
If you rooted it correctly SuperSU or SuperUser should already be installed. Did you have any progress getting Citrix to work while rooted? Im in the same situation and I've only been able to get it to work briefly with Touchwiz based ROMs with SuperSU. All others give me a " cannot connect due to a security policy" error - even after disabling root and trying to re-enroll. Its a beast...
Yes I have
I used hide my root throughout all the process.
I check with root checker to validate it's indeed hidden.
And I keep running hide my root at all times
ofird said:
Yes I have
I used hide my root throughout all the process.
I check with root checker to validate it's indeed hidden.
And I keep running hide my root at all times
Click to expand...
Click to collapse
Nice! I'm gonna give that a go then. Thanks
tscalia2 said:
Nice! I'm gonna give that a go then. Thanks
Click to expand...
Click to collapse
I have had to do the same...and all seems to work. But I had to also install two more apps enforced by policy; Lookout, and Touchdown.
Any ideas on what these do?
Touchdown is a great app for synching all your mails, notes and Exchange data.
I use it
I don't know what lookout is for

[Q] Some apps says its rooted, some that its not

Hey, not sure if it matters, but my device is: Kruger&Matz KM 974 tablet (PIPO)
- Some apps, like all kinds of RootChecker's from google play, says that I have no root
- CPU-Z (mobile) says that I have root
- AVG antivir (mobile) says theres root
- Avast! says there isnt
Which app would be most reliable?
How to check it without apps?
Thanks.
Hope its allowed to bump from time to time? It moved to 2nd page pretty quick.
maybe you can see in superuser or supersu apps ..make sure the su binary is installed correctly
ali.filth said:
maybe you can see in superuser or supersu apps ..make sure the su binary is installed correctly
Click to expand...
Click to collapse
Could it be that its "rooted" (in the meaning of not locked), but without superuser app? So some apps checking for superuser (which isnt here) reporting its not rooted while others checking something else saying it is?
Kinda new to this, but could simply installing the superSU app solve the issue? Or well, could it actually break something if its installed on non rooted device?
Sorry for dumb questions but im really an first time android user
z4x said:
Could it be that its "rooted" (in the meaning of not locked), but without superuser app? So some apps checking for superuser (which isnt here) reporting its not rooted while others checking something else saying it is?
Kinda new to this, but could simply installing the superSU app solve the issue? Or well, could it actually break something if its installed on non rooted device?
Sorry for dumb questions but im really an first time android user
Click to expand...
Click to collapse
The apps are for rights management, for you to control which apps get su access and which apps don't.
You should be able to su from a terminal without the apps, but if you can, remember that other apps can do so as well without you knowing.
Beamed from my Galaxy Express using Tapatalk
kruger and matz
z4x said:
Hey, not sure if it matters, but my device is: Kruger&Matz KM 974 tablet (PIPO)
- Some apps, like all kinds of RootChecker's from google play, says that I have no root
- CPU-Z (mobile) says that I have root
- AVG antivir (mobile) says theres root
- Avast! says there isnt
Which app would be most reliable?
How to check it without apps?
Thanks.
Click to expand...
Click to collapse
you can try the method from my group and let me know
What do you want to use root for ?
try the app that requires root (Titanium Backup? ROM Manager? etc? ), if it works, then you have root, if not, then not... who cares what the checker apps say....

Is Remix OS rooted?

Well, i want to know that, if it is rooted or not.
I used root checker but it says "Root is nor properly installed" ... it means that is not rooted?
Than kyou!
tottobenn said:
Well, i want to know that, if it is rooted or not.
I used root checker but it says "Root is nor properly installed" ... it means that is not rooted?
Than kyou!
Click to expand...
Click to collapse
It is not rooted. Any app that requires root privilege will not be functional.
That being said, there are known methods to "root" Remix OS. A "systemless" method is to be found elsewhere in this forum.
http://forum.xda-developers.com/remix/remix-os/systemless-root-remixos-64bit-t3368131
Sent from my on Z00A using XDA Labs
tottobenn said:
Well, i want to know that, if it is rooted or not.
I used root checker but it says "Root is nor properly installed" ... it means that is not rooted?
Than kyou!
Click to expand...
Click to collapse
Android apps can't get root access without modifying the RemixOS installation, however there is a command prompt with root access that you can enable in the experimental options part of the settings app. Once enabled you can press Alt+F1 to get to it, and Alt+F7 to get back to the desktop. It's not as useful as full root access, but it works if you just want to remove system files or disable some apps that you can't disable using the settings app.
Sent from my iPhone using Tapatalk
tottobenn said:
Well, i want to know that, if it is rooted or not.
I used root checker but it says "Root is nor properly installed" ... it means that is not rooted?
Than kyou!
Click to expand...
Click to collapse
There are a couple options on the forum that are available already pre-rooted, and there are also threads with instructions on how to root it yourself. :good:
Thank you guys for the answers!
i want it to not be rooted.
So if it is not rooted from the begining, then better.

remove some stock apps and then disable/ restrict any further software changes

After I root a phone, I would like to be able to uninstall/remove some stock apps (for example, stock Messaging app) and add some new apps (for example, 3d-party Messaging app).
Do I need Titanium app to achieve that? Or is there something more lightweight?
After I complete the setup, I want to disable/ restrict any further software changes. Pretty much the same as Window OS "Admin" VS "Standard User"
So I guess I would need some app manager capable of permission managing.
Any advice on my project? Will my phone be as stable as the original stock after such modding?
The phones: Moto E2 and Moto G2 and G3, Android 5.01 or 6.01
Well, Backing Up the Stock Content before doing any Modding to your Phone is a Good Practice and Extremely Recommended in Case of any worst case scenarios and you can achieve the same by Titanium Back or any Other app Readily available on Play Store.
After Back up, Yes, you can Uninstall PreInstalled apps or any other bloatware that you may don't want in your phone. And Install 3rd Party apps in place of stock Ones.
Talking about Permissions, until/unless you give Root Access to that App, it won't be able to Make any changes in the System. So, you also have to keep a check on giving Root permissions to apps.
Your Phone Will remain stable When you know what actually you are doing with it and what measures could be taken to revert it.
abhinavp649 said:
Talking about Permissions, until/unless you give Root Access to that App, it won't be able to Make a.
Click to expand...
Click to collapse
Once the phone is rooted, will I be able to block/restrict both: uninstalling apps (which are already installed) and installing new apps? The phone will be used by my kids, so I want to prevent them from making any phone changes.
rybshik said:
Once the phone is rooted, will I be able to block/restrict both: uninstalling apps (which are already installed) and installing new apps? The phone will be used by my kids, so I want to prevent them from making any phone changes.
Click to expand...
Click to collapse
You can't restrict to install and uninstall apps. As abhinavp649 said the application makes modifications to the system if you give root permission to them. If you are using SuperSU superuser app then you can set pin to grant root permission to the app from the settings of supersu
rybshik said:
Once the phone is rooted, will I be able to block/restrict both: uninstalling apps (which are already installed) and installing new apps? The phone will be used by my kids, so I want to prevent them from making any phone changes.
Click to expand...
Click to collapse
To Prevent app from uninstalling the best way is to hide it From Home screen Or Make that as System.
And Revoke SU permissions from those apps which can uninstall system apps or any similar one.
Hit thanks if Helped :laugh:
abhinavp649 said:
to hide it From Home screen Or Make that as System.:
Click to expand...
Click to collapse
How can I do that?
Additionally, can I, for example, turn on Location (GPS) and prevent the phone user from turning it OFF? thanks!
rybshik said:
How can I do that?
Additionally, can I, for example, turn on Location (GPS) and prevent the phone user from turning it OFF? thanks!
Click to expand...
Click to collapse
Installing an App as system is a easy and you can find tools easily on play store. Just search 'make app system' or something else similar.
Using GPS to prevent Turn off? I think you are expecting too too much out of a device.
However, you can disable Power Off from options you get by holding lock button.
To do this You Have to Install Xposed Framework in your Device.
Xposed Framework allows you to do Amazing modding to your Android device. You can just do everything with the device(Exceptions are always present)
rybshik said:
How can I do that?
Additionally, can I, for example, turn on Location (GPS) and prevent the phone user from turning it OFF? thanks!
Click to expand...
Click to collapse
If you are thinking of turning on GPS for the sake of tracking your kids, then make sure you tell them you are doing so. Have known a few people that got into legal trouble for not doing so.
In the end if the kids are smart enough there will be nothing you can really do as they can just reset the device and everything you did is gone.
zelendel said:
nothing you can really do as they can just reset the device
Click to expand...
Click to collapse
So, can I prevent that by disabling/removing or password-protecting the option of "Factory Reset" on a rooted Android 6.0?
rybshik said:
So, can I prevent that by disabling/removing or password-protecting the option of "Factory Reset" on a rooted Android 6.0?
Click to expand...
Click to collapse
No. You can not restrict or disable factory data reset option by any ways even you are rooted. Some brands like Samsung gives FRP (factory reset protection) to their device. Devices without FRP easily factory data reset by entering in recovery mode or in settings.

Categories

Resources