Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

KernelSU: A kernel-based root solution for Android

kernelsu.org

Post reply on HN
Print view View original

21–26 of 26 posts

Re: KernelSU: A kernel-based root solution for Android

#21

Post by worldsavior »

yjftsjthsd-h wrote: post #20
worldsavior wrote: post #9

Nice, but using root generally is very insecure. The whole concept of superuser is broken and bad. Such privileges shouldn't be given to any user.

What attack do you see this allowing that wouldn't work without it? Considering that the user has to intentionally add it, and the user has to explicitly give apps root access, the only problem I can see is if a user gives root to an untrustworthy app, but that seems like a good trade. Incidentally, do you also think that users shouldn't have admin power on, say, laptops, or are phones special?

Those are apps that are granted root can be exploited by other apps.

And yes also on other devices (depends which one, such laptops).

Re: KernelSU: A kernel-based root solution for Android

#22

Post by worldsavior »

summm wrote: post #19
worldsavior wrote: post #18

Earlier quoted context omitted.

In this context I meant that it allows root where Android never allows.

But that's the whole point? That you can user your own device as a general-purpose computing device, not only as a media-consumption device limited by arbitrary restrictions the vendor of the device can pose on you?

This kernel is for day to day use. Using insecure features such as root, can potentially cause harm. Do whatever you want, just pointed a fact.

Re: KernelSU: A kernel-based root solution for Android

#23

Post by nubinetwork »

RealStickman_ wrote: post #17
nubinetwork wrote: post #16

Earlier quoted context omitted.

You're right, it doesn't. But why go through the hassle of hacking the kernel when you can replace the whole OS with something better?

Because, last I checked, LineageOS doesn't expose root privileges to the user.

The install goes something like this...

- install new recovery and reboot

- install new OS image

- install google apps

- install su package

- reboot and wait half an hour because androids first boot always takes forever :)

Installing su is often skipped because its not recommended.

Re: KernelSU: A kernel-based root solution for Android

#24

Post by yellowapple »

c4mpute wrote: post #15
yellowapple wrote: post #13

GPLv3 licensed, despite almost certainly being a derivative work of Linux, which is GPLv2 licensed (with no "or later" provision). Now, I ain't no lawyer or nothin', but I reckon that's a legal paddlin'.

Most probably not. Kernel devs are tame even with closed-source device and software vendors pirating the Linux kernel. I doubt any kernel copyright holder will bat an eye over GPLv3 vs. GPLv2. Not to mention the very relevant question of "is it really a derivative work?", which very much depends on the depth and complexity of integration, provided interfaces, GPLONLY symbols and other minutiae.

> Kernel devs are tame even with closed-source device and software vendors pirating the Linux kernel.

It's more complicated than that: https://lwn.net/Articles/698452/

> I doubt any kernel copyright holder will bat an eye over GPLv3 vs. GPLv2.

Probably not, but why risk it? The only meaningful difference between the two is the anti-TiVoization clause, and considering how thoroughly Android is already TiVoized, that seems pretty pointless anyway.

> Not to mention the very relevant question of "is it really a derivative work?", which very much depends on the depth and complexity of integration, provided interfaces, GPLONLY symbols and other minutiae.

It's a kernel module, the build process for which entailing pulling the KernelSU code into a cloned Linux repo. It's pretty unambiguously a derivative work.

Re: KernelSU: A kernel-based root solution for Android

#25

Post by RealStickman_ »

nubinetwork wrote: post #23
RealStickman_ wrote: post #17

Earlier quoted context omitted.

Because, last I checked, LineageOS doesn't expose root privileges to the user.

The install goes something like this... - install new recovery and reboot - install new OS image - install google apps - install su package - reboot and wait half an hour because androids first boot always takes forever :) Installing su is often skipped because its not recommended.

The latest officially avaiable su package is for 16.0. My phone's on 18.1 and the latest version is 20. If you want SU on a supported LineageOS, you have to use Magisk or potentially this project.

Re: KernelSU: A kernel-based root solution for Android

#26

Post by nubinetwork »

c4mpute wrote: post #4
nubinetwork wrote: post #3

Why, just use lineageOS.

LineageOS hasn't supported root for several major releases. The last official su addon is for version 16.0, https://download.lineageos.org/extras , we are now at 19.1 or 20.0. Magisk used to work, but is getting more and more of a hassle to install and update. I fear root is becoming rarer and harder, even on alternative Android distributions.

Sorry I didn't see this reply... I'm on 18.1 at the moment, but I'm pretty sure I had su installed at one point.

I reflashed my phone a few months ago because my nand/SD are starting to go... Time to ditch the S5 and buy a S23 :)

Post reply on HN