I mean not through magisk by user.
By developers when the build the ROM
In the first place.
As long as in Android's ecosystem the SU binary can be found, Android is considered to be rooted. It's a very primitive task for devs of banking / payment apps to search the device's Android for that file.
xXx yYy said:
As long as in Android's ecosystem the SU binary can be found, Android is considered to be rooted. It's a very primitive task for devs of banking / payment apps to search the device's Android for that file.
Click to expand...
Click to collapse
I want to know when developing custom ROM, making banking apps can run on that custom ROM is possible in the rooted phone .
I know we could do that with su in the past and now we can do with magisk. But i want to know developers can build ROM to make banking apps run in rooted phone when they are building that rom . Not through modification by users.
Btw i am asking this assuming 2015-2016year.
Wondering why you don't carefully read a post?
It is easy for anyone to determine the existence of SU: just search the internal memory for it - any 10 year old remedial student can do it.
BTW: Magisk doesn't anything other than installing SU.
Since banking apps depend on the Play Integrity API to get a good idea of a device's state and security, workarounds are required, generally by means of Magisk modules such as Shamiko or USNF mod. It is possible to build these into ROMs.
Related
Well, hello. I'm most certainly a noob, although I do have experience with developing for android and using Linux on a PC system. I haven't done any rooting/unrooting/custom-firmware-flashing before, however.
I believe this question to be about Android devices in general and so I'm posting it here instead of a device-specific forum.
The short version of my question is:
Is it possible to install a custom firmware on my phone, but prevent apps installed in it from having root access?
The long version:
Having read about how the Android OS works, I understand that each app installed in a system basically has its own user account, and that's how privileges work: The OS simply doesn't allow this specific user/app to access other apps or hardware.
Unless I'm mistaken, rooting a phone makes all apps run under the same user account: root. Which means that all apps have access to every other app and all hardware on the device.
I found many web pages that explained that this is a security risk as malicious code could then use anything at all on the phone. This makes sense of course, that's why most applications on a Linux system don't run as root.
I understand why rooting the device is necessary to install a custom firmware on it, but what I haven't understood is why the device has to stay rooted afterwards. Isn't installing a custom firmware basically replacing the OS on the device? If so, couldn't I replace it with an OS that doesn't run everything as root but instead runs every app as its own user, like unrooted devices do?
I've searched this website and others for information on this but I haven't been able to find something that answers this question.
I found explanations for why unrooting is needed to install a custom firmware, but they didn't include why the resulting system can't be rooted.
I found guides on how to restore the original firmware on a device, which isn't what I'm looking for, although this process is called "unrooting" (the word seems to be misused here, but maybe that's just me).
I also found guides on how to trick certain applications, which won't run on a rooted device, into thinking that the device isn't rooted. However, the reason I'd prefer my device not to be rooted isn't to trick any applications but for security reasons.
What I'd basically like to do, is install custom firmware but, once that's done, ensure that applications I download from the Market or install directly don't have any more privileges than they've been developed to ask for. Is that not possible? I don't understand why not...
Gaining root access to your phone will not give a single app root privileges, for the most part you will use an app called superuser or supersu to allow or deny any app root access. (Sometimes baked into ROM)
But you have no worries, any app that you download from the market will not have root unless you give it
Sent from my Nexus 4 using xda premium
demkantor said:
Gaining root access to your phone will not give a single app root privileges, for the most part you will use an app called superuser or supersu to allow or deny any app root access. (Sometimes baked into ROM)
But you have no worries, any app that you download from the market will not have root unless you give it
Click to expand...
Click to collapse
Is that so? Thanks. It seems I was wrong at the very beginning of my logical process.
So, if I understand correctly, the lack of security isn't that anything installed has root access, but that it can have root access. Is that right?
Correct, even whatever custom ROM you are running has a built in app for lets say messaging, this will not have root access.
You just bow have the ability to do anything (mostly) to your device, but you don't have to
Sent from my Nexus 4 using xda premium
I have recently read that Greenify can be run as a system app. I have been searching the benefits to doing this, but so far nothing conclusive. If I convert to system app through TiBU as an example, are there any benefits or known drawbacks to doing this? I am running MM 6.01, rooted with SuperSU and currently running exposed module.
jrmt077 said:
I have recently read that Greenify can be run as a system app. I have been searching the benefits to doing this, but so far nothing conclusive. If I convert to system app through TiBU as an example, are there any benefits or known drawbacks to doing this? I am running MM 6.01, rooted with SuperSU and currently running exposed module.
Click to expand...
Click to collapse
At minimum it will allow BBS to operate in "boost" mode which permits faster hibernation of apps. To the best of my knowledge there are no disadvantages or side-effects beyond those that accompany converting user apps to system apps on a case-by-case basis.
Must your phone be rooted to make Greenify run as system app? Or is there some ADB command that can be run to facilitate this?
adrianh_za said:
Must your phone be rooted to make Greenify run as system app? Or is there some ADB command that can be run to facilitate this?
Click to expand...
Click to collapse
Device (ROM) must be rooted or have some other means of writing to the system partition to 'make' Greenify into a system app. Once in place Greenify should run happily regardless of root status. Whether Boost mode can be activated is an open question as it depends if the app checks for root permissions (the expected configuration) as a prerequisite for enabling extended functionality.
Point of this post(boring stuff )
In your stock ROMs you are pretty much stuck with the preloaded craps unless you root your device. Now you might not want to root your device for various reasons. For instance, almost all banking apps do not work on rooted devices. A way to tackle this is to use systemless root access provider like magisk. But unfortunately magisk requires Android 5.0+. So we need some other ways for our devices running Android 4.4.4 right? Well, fortunately there is a very simple method for debloating any stock ROM(I personally tested this method on Lenovo A6000 PLus but this should work on any ROM out there).
Note: You need a custom recovery for this to work, which can cause serious harm to your device if you do things incorrectly. You are also tweaking your device's system partition, so you might void your warranty. If anything happens to your device, its your responsibility.
Let's get started
Step 1: Download the "pico" gapps package from opengapps.org. For Lenovo A6000/Plus running stock kitkat, select arm,4.4,pico.
Step 2: Open twrp recovery.
Step 3: Install the pico gapps package that you just downloaded.
Step 4: Reboot your device. Now you will find that most of the google apps have a green icon with android logo(if you are using lenovo launcher). Just remove those apps.
Done
So, Which apps are removed?
Pretty much every apps are removed except Google Play Services, Play Store, Gboard and Play Newsstand. You can disable Newsstand and the security app(which does nothing but eat up space and resources) if you like.
rajorshi.me said:
Point of this post(boring stuff )
In your stock ROMs you are pretty much stuck with the preloaded craps unless you root your device. Now you might not want to root your device for various reasons. For instance, almost all banking apps do not work on rooted devices. A way to tackle this is to use systemless root access provider like magisk. But unfortunately magisk requires Android 5.0+. So we need some other ways for our devices running Android 4.4.4 right? Well, fortunately there is a very simple method for debloating any stock ROM(I personally tested this method on Lenovo A6000 PLus but this should work on any ROM out there).
Note: You need a custom recovery for this to work, which can cause serious harm to your device if you do things incorrectly. You are also tweaking your device's system partition, so you might void your warranty. If anything happens to your device, its your responsibility.
Let's get started
Step 1: Download the "pico" gapps package from opengapps.org. For Lenovo A6000/Plus running stock kitkat, select arm,4.4,pico.
Step 2: Open twrp recovery.
Step 3: Install the pico gapps package that you just downloaded.
Step 4: Reboot your device. Now you will find that most of the google apps have a green icon with android logo(if you are using lenovo launcher). Just remove those apps.
Done
So, Which apps are removed?
Pretty much every apps are removed except Google Play Services, Play Store, Gboard and Play Newsstand. You can disable Newsstand and the security app(which does nothing but eat up space and resources) if you like.
Click to expand...
Click to collapse
Dude, 1st thing, you said this method needs a custom recovery which means you have to root the device at first or lest consider you just boot twrp using fastboot
And flashing gapps will remove the obselet gapps, and it won't remove the other oem bloatware present so actually this can't br called "Debloating"
Debloating doesn't mean removing gapps, debloating is the removal of useless or apps which can be downloaded from play store, included in the ROMs
[email protected]_ said:
Dude, 1st thing, you said this method needs a custom recovery which means you have to root the device at first or lest consider you just boot twrp using fastboot
And flashing gapps will remove the obselet gapps, and it won't remove the other oem bloatware present so actually this can't br called "Debloating"
Debloating doesn't mean removing gapps, debloating is the removal of useless or apps which can be downloaded from play store, included in the ROMs
Click to expand...
Click to collapse
Yes you have to use fastboot method but you don't need root access for that and as for the "bloatware" you are referring to, it's any unnecessary app that comes pre-installed with a device which you can't uninstall. Keeping aside the gapps there are only 2-3 apps that fall into that category, which you can just disable as I mentioned. In a device with 8gb or 16gb internal storage every bit of free storage counts. At least it's better than being stuck with all the apps in the first place.
rajorshi.me said:
Yes you have to use fastboot method but you don't need root access for that and as for the "bloatware" you are referring to, it's any unnecessary app that comes pre-installed with a device which you can't uninstall. Keeping aside the gapps there are only 2-3 apps that fall into that category, which you can just disable as I mentioned. In a device with 8gb or 16gb internal storage every bit of free storage counts. At least it's better than being stuck with all the apps in the first place.
Click to expand...
Click to collapse
KProK sur me noob surry :"(
It's clear you lack a lot of knowledge
Nvm good work
[email protected]_ said:
KProK sur me noob surry :"(
It's clear you lack a lot of knowledge
Nvm good work
Click to expand...
Click to collapse
Call someone noob and you win the argument. Cheers.
Point of this post(boring stuff )
In your stock ROMs you are pretty much stuck with the preloaded craps unless you root your device. Now you might not want to root your device for various reasons. For instance, almost all banking apps do not work on rooted devices. A way to tackle this is to use systemless root access provider like magisk. But unfortunately magisk requires Android 5.0+. So we need some other ways for our devices running Android 4.4.4 right? Well, fortunately there is a very simple method for debloating any stock ROM(I personally tested this method on Lenovo A6000 PLus but this should work on any ROM out there).
Note: You need a custom recovery for this to work, which can cause serious harm to your device if you do things incorrectly. You are also tweaking your device's system partition, so you might void your warranty. If anything happens to your device, its your responsibility.
Let's get started
Step 1: Download the "pico" gapps package from opengapps.org. For Lenovo A6000/Plus running stock kitkat, select arm,4.4,pico.
Step 2: Open twrp recovery.
Step 3: Install the pico gapps package that you just downloaded.
Step 4: Reboot your device. Now you will find that most of the google apps have a green icon with android logo(if you are using lenovo launcher). Just remove those apps.
Done
So, Which apps are removed?
Pretty much every apps are removed except Google Play Services, Play Store, Gboard and Play Newsstand. You can disable Newsstand and the security app(which does nothing but eat up space and resources) if you like.
Hello
Happy New Year
I'm Vivek Chourasia...
Im using a Lenovo A6000 1GB ram & 8GB ROM & SD card 32GB Supported.....
I'm facing a lot of issue in using jio sim for using call from Jio4GVoice app... And their are 2many bloatware available. I'm on latest android stock ROM of Lenovo A6000 5.0.2..
What should I do to remove bloatware????
And how to use Jio4GVoice without a single Issue????
Plzzz see my comment
Plzzzz reply to me just for once..,
Main question at the end of post.
I came across an app that said my device isn't rooted properly, when it is, or I thought it was?
Spyera is the app. For those not familiar, spyera is an app that is used to monitor devices, family members, employees, doesn't matter. Let's assume everyone owns the devices and those using the devices are aware. Not the point of the post.
spyera has a rooted and a non rooted version. The rooted version will not install on my devices. I talked to tech support and they are saying my device isn't a full root. Their software root algorithm says my phone isn't rooted. Basic root checkers and all of my apps requiring root seem to think my root is fine.
I have a few pixel 4xl device's and some samsung s21 ultras that are all rooted with magisk. All other root apps work fine.
This brings up my main question....is magisk a "full" root? Or is it something else?
Spyera tends to be a pretty reliable platform and if their software is saying I'm not rooted, I am curious what could be the reason.
Magisk is "full" root. If an app can't detect Magisk as a root solution it's poorly written.
And yes, that's a shady app... I'd be very careful with giving an app like that complete and full access to a device by giving it superuser permissions (or even install it in the first place). Also, doesn't sound like the company even knowns what they're talking about.
Thanks. And yes, very shady
@Didgeridoohan
Magisk ISN'T ROOT, it's a framework that allows to inject some functionalities into Android ecosystem.
jwoegerbauer said:
@Didgeridoohan
Magisk ISN'T ROOT, it's a framework that allows to inject some functionalities into Android OS.
Click to expand...
Click to collapse
And one of the parts of the Magisk suite of software is MagiskSU that provides root for Android applications... Sure, Magisk is more than "just" root, but when you talk about Magisk and root in the same context, generally it's understood that what you're actually talking about is MagiskSU.
But thanks for clarifying.
Hi everyone, i've been out from the custom rom world for a while and i noticed that some things have changed; i read that rooted devices cannot run banking or securtity apps or even applications like netflix ect ect...
I recently decided to upgrade my old poco f1 to a Android 13 rom, but i stopped because i need banking apps to work and i don't know thant much anymore about the topic, is there anyone that could help me find a rom that supports the use of banking apps or any rom is good unless the device is rooted?
Thank yall in advance.
If the ROM passes SafetyNet out of the box then there should be no issues with the majority of the banking/financial apps provided you don't root your device. If you do root your device (with Magisk) you will need to use the Shamiko Magisk module to hide root. There's 2-3 additional steps which you can easily Google. In my case I can use every such app in all my rooted devices. Root breaks SafetyNet but most apps with the exception of Google Pay work just fine. To fix SafetyNet you can flash the Universal Safetynet Fix module. I don't know about others but after flashing this module Google login doesn't work. I can't add another Gmail account for example or use my Google credentials to newly log into apps etc. Since I don't use Google Pay much it's OK and I keep the USNF module disabled. Currently I am using crDroid A12. Will switch to it's A13 flavor in the coming months.