71–72 of 72 posts
Earlier quoted context omitted.
http://www.cs.ucr.edu/~zhiyunq/pub/ccs15_root_providers.pdf
2015-08-20. The document describes analysis performed on those apps which root your phone for you. Thanks!
Earlier quoted context omitted.
You're root running in a limited selinux context.
Are you saying that on Android, you can achieve UID=0 via this exploit, but still not write to anywhere important on the device? What are these different "methods" listed in the table here? https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs Can one of those methods allow me to write to some file in /etc? (Which is enough to grant me the access I want, unless selinux is just MAGIC.)
You would need to be able to `setenforce 0 `. A properly configured SELinux context can prevent you from doing that however we are starting to finally see some reports of dirtyc0w successfuly leading to `SELinux status: permissive` and permanent root.