Tell me more ×
Android Enthusiasts Stack Exchange is a question and answer site for enthusiasts and power users of the Android operating system. It's 100% free, no registration required.
up vote 20 down vote favorite
6

I know there was a discussion previously BUT they didn't talk about security. E.g.: if I root my phone will all my apps run with root permission?

Related: Are there any risks to rooting a device?

share|improve this question

3 Answers

up vote 12 down vote accepted

The answer is no: not all application will have root permission. Not all the apps require root and the apps requiring root will not have it unless you give them permission to do so. At least that's what I can tell after using z4root and superoneclick to root a few phones. You get a superuser app that will get requests from apps needing the root account and you'll have the change to enable that or not. Risks connected to root a device are, more or less, the risks connected to use an administrative user on any kind of unix-like system.

ever tried a rm -r (a command to delete all files)? it's like putting in the trash can your windows folder just because you're a root user and you can do it.

Superpowers always involve super responsabilities and super attentions :)

Said that I have to say that in my everyday use (with a little brain turned on) I can't see a real way to get any kind of harm. But if you install strange scripts coming from al quaeda and tons of pirated apps and poor not certified code... Well. Bad things could happen.

Install a recovery and do a nandroid backup. After that play happily with your phone :)

share|improve this answer
2  
to be more precise, if you do rm -r, it's more like burning the folder to ash; if you simply put it into the trash can, you will still be able to restore it relatively easily; but if you do rm -r in any unix-like system (including Linux and Android), you may have to do dark voodoo to recover the files and you may not necessarily recover the file intact. – Lie Ryan Oct 22 '11 at 16:14
Don't you mean rm -rf? – Demizey Jan 22 '12 at 13:23
up vote 20 down vote

If you root your phone, then only the applications that you explicitly grant root access to will have root access. This does make things fairly safe, as that extra step should be enough to make you stop and think "Why does this app need root?".

If you only grant root access to apps that need root for a good reason, are from trusted developers, and which you acquired from a trusted source then you should be ok.

Bear in mind what apps with root access can do though - from a previous answer on the subject:

On a rooted phone, an app which has been granted root access can do pretty much anything that is possible in the hardware. Apps that have root permissions can write on non-read-only storage media (including modifying the bootloader), modify other programs' private data, modify system settings, modify system files, etc. A rooted app can also hide itself from the system, and pretend to be uninstalled while being perfectly well and alive.

I'll let you imagine what the worst-case scenario security implications are for a nefarious app being granted root access on your phone; be careful out there.

share|improve this answer
up vote 2 down vote

The newest versions of SuperUser (3.x) support using a PIN to approve root access for apps. In other words, whenever an app requests root you need to enter your PIN before root access is granted. This is more or less foolproof; no app should be able to get root access on its own or through you clicking the wrong button without it exploiting some bug in SuperUser or the system, and if it's doing that you might be screwed even without root.

share|improve this answer
sry for asking, but what the hell is a "superuser 3.x" - is it binded to an Android version? – LanceBaynes Sep 27 '11 at 17:48
@LanceBaynes It's a version of the SuperUser application, which comes with its own su binary that screens requests for root access - you must approve the access before the app gets root. – Broam Sep 27 '11 at 18:42
1  
How can we be sure that the SuperUser app is not the one that is malicious? (Not refering to a special app, just asking in general.) – Marco W. Apr 15 '12 at 21:57
@MarcoW. You can't, just like you can't be sure that the binary isn't malicious or that the browser isn't malicious or that every last but of Android is Google trying to steal your secrets :P. If you don't trust your source, don't trust the software you get from that source. – Matthew Read♦ Apr 16 '12 at 17:05
1  
@MarcoW SuperUser is released by Chainfire here; coupled with that official release you should be able to analyze any root method and do it yourself, at least if they've made the details available. That really is the crux of security issues, though: You have to trust someone else in order to gain anything from them. Nothing we can do about that. – Matthew Read♦ Apr 17 '12 at 19:03
show 1 more comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.