Live data from Hacker News

KernelSU: A kernel-based root solution for Android

kernelsu.org

11–20 of 26 posts

Re: KernelSU: A kernel-based root solution for Android

#12

Nice, but using root generally is very insecure. The whole concept of superuser is broken and bad. Such privileges shouldn't be given to any user.

Bypassing "security" when you as the owner of the device want to is the whole point of root.

This project allows root by default, like it's part of the user experience, which is bad for security.

Re: KernelSU: A kernel-based root solution for Android

#14

Earlier quoted context omitted.

Bypassing "security" when you as the owner of the device want to is the whole point of root.

This project allows root by default, like it's part of the user experience, which is bad for security.

It does not grant root by default, quote: "Whitelist access control Only App that is granted root permission can access `su`, other apps cannot perceive su."

Re: KernelSU: A kernel-based root solution for Android

#15

GPLv3 licensed, despite almost certainly being a derivative work of Linux, which is GPLv2 licensed (with no "or later" provision). Now, I ain't no lawyer or nothin', but I reckon that's a legal paddlin'.

Most probably not. Kernel devs are tame even with closed-source device and software vendors pirating the Linux kernel. I doubt any kernel copyright holder will bat an eye over GPLv3 vs. GPLv2. Not to mention the very relevant question of "is it really a derivative work?", which very much depends on the depth and complexity of integration, provided interfaces, GPLONLY symbols and other minutiae.

Re: KernelSU: A kernel-based root solution for Android

#16

Why, just use lineageOS.

This has nothing to do with LineageOS.

You're right, it doesn't. But why go through the hassle of hacking the kernel when you can replace the whole OS with something better?

Re: KernelSU: A kernel-based root solution for Android

#17

Earlier quoted context omitted.

This has nothing to do with LineageOS.

You're right, it doesn't. But why go through the hassle of hacking the kernel when you can replace the whole OS with something better?

Because, last I checked, LineageOS doesn't expose root privileges to the user.

Re: KernelSU: A kernel-based root solution for Android

#18
post #14

Earlier quoted context omitted.

This project allows root by default, like it's part of the user experience, which is bad for security.

It does not grant root by default, quote: "Whitelist access control Only App that is granted root permission can access `su`, other apps cannot perceive su."

In this context I meant that it allows root where Android never allows.

Re: KernelSU: A kernel-based root solution for Android

#19
post #14

Earlier quoted context omitted.

It does not grant root by default, quote: "Whitelist access control Only App that is granted root permission can access `su`, other apps cannot perceive su."

In this context I meant that it allows root where Android never allows.

But that's the whole point? That you can user your own device as a general-purpose computing device, not only as a media-consumption device limited by arbitrary restrictions the vendor of the device can pose on you?

Re: KernelSU: A kernel-based root solution for Android

#20

Nice, but using root generally is very insecure. The whole concept of superuser is broken and bad. Such privileges shouldn't be given to any user.

What attack do you see this allowing that wouldn't work without it? Considering that the user has to intentionally add it, and the user has to explicitly give apps root access, the only problem I can see is if a user gives root to an untrustworthy app, but that seems like a good trade.

Incidentally, do you also think that users shouldn't have admin power on, say, laptops, or are phones special?

Post reply on HN