11

First to clarify only root (UID 0) isn't enough to get access to /data at least since Android 5. Discretionary Access Control based on traditional UNIX UIDs/GIDs alone doesn't fulfill the needs of modern complex OSes like Android. DAC is supplemented by Mandatory Access Control (MAC); SELinux in case of Android. So to access /data your process/user must ...


9

First to clarify root and data: Root directory / of Android devices is a read-only pseudo (temporary) filesystem (rootfs) that lives in RAM and is vanished when device is powered off. When device is powered on, it's again extracted from initramfs that lives in boot partition along with kernel. On newer devices with system-as-root, system partition is ...


9

I was looking at the web search results of “how to manually root Android devices” and I noticed that most of those are either just advertising stuff or makes use of dedicated (particularly closed source) rooting solutions. Those which worked some time ago are now obsolete since they depended on some security vulnerability in Android which was fixed over time....


8

The authentication token for Google accounts and of other accounts which uses AccountManager class are stored inside: /data/system/users/0/accounts.db # for Android Marshmallow and earlier /data/system_ce/0/accounts_ce.db # for Android Nougat and above. 0 implies primary user of the device. If you have secondary user accounts, replace 0 with the user ...


6

I'm going to give a general overview of how dm-verity and related things work on Android according to my limited knowledge. Situation might differ on different devices and ROMs. HOW IS DM-VERITY ENFORCED? dm-verity (Verified Boot and AVB) as well as dm-crypt (FDE) are targets of device-mapper feature of Linux kernel. dm-verity verifies the integrity of ...


5

On production (user) build of a ROM, you can't start adbd as root unless ROM or at least adbd binary is rebuilt with required modifications. Reason is the ALLOW_ADBD_ROOT build flag (1, 2). That's why adbd Insecure was developed, which replaced the adbd binary with a modified one. On a userdebug or eng build (or with insecure adbd binary extracted from any ...


4

How much is the possibility that Android will kill my executable? Privileged native processes usually don't get killed by Android except if they can't handle an error occurred inside, such as some system resource not available or permission denied because of SELinux etc. To free up memory, Android only kills processes within its framework i.e. running under ...


3

This can be marked a duplicate of questions like this, but it's a device-specific question. It cannot be answered in a generic way, it should be “How to root XYZ Android device without unlocking bootloader?” Simple answer is: It should not be possible to root Android devices without unlocking bootloader, but it's possible for some devices due to security ...


2

I know that to be able to install a driver into the kernel, that means a custom kernel and then you would not be able to have OTA updates which defeats the above purpose. You can't have OTA updates with Magisk installed because flashing Magisk modifies boot partition in which kernel binary lives. Before OTA update, you will have to uninstall Magisk which ...


2

It can be done using many ways, if you use the same Google account on both devices then just a simple cloud restore from the initial setup screen would setup everything just the same. (when I was switching roms frequently which are all based upon lineage, or same feature sets, I noticed even personal settings appeared to be restored along with all apps, ...


2

It seems that the only way to get this without automation is having the habit of pressing "show desktop" before locking. In case, you are not against automation, you can accomplish your request with MacroDroid, Tasker or other apps. With MacroDroid In the Triggers section, select Screen Unlocked. In the Actions section, select Launch Home Screen. Give the ...


2

since at least 2019 there is f-droid privilege extension https://f-droid.org/en/packages/org.fdroid.fdroid.privileged.ota/ to install you don't need root but you need twrp or similar custom recovery installed on your device. https://twrp.me/ you also need adb installed on your pc and usb debugging enabled on your device. in the following steps all adb ...


2

If you want to "flex your root muscle" so to speak, there are options using Xposed modules, but these options do not require it. Battery full notifications are a bit of a workaround: Open Settings and select the Notifications option Click See All under the Recently Sent list Select All from the dropdown in the top left Click the 3 dots in the top right and ...


2

In order to run bash in Termux app's context so that it behaves exactly the same way as if it was started from the app, it must be run at least: With UID/GID of the app assigned by the Package Manager at the time of installation With supplementary group inet (3003), which is required to create network sockets and is assigned to any app at the time of ...


2

If you go through How Magisk works and How to manually root a phone it would be easy for you to figure out why it's impossible to achieve what you are looking for. init is the very first process started by kernel, which at its early stage sets SELinux enforcing (if it's not already enforcing). Before that happens, we need to modify SELinux policy so that it ...


1

The problem with shipping rooted device by default is that it may increase the load of customer support for the device manufacturer and possibly on other user support forums. If the manufacturer are willing to accept that, then there's really nothing really bad with shipping rooted device by default. Google really wouldn't care about it. They may have their ...


1

Android does have HTTP(S) proxy support built-in that can be set through Settings UI and/or command line, but it isn't global, so regarded by proxy aware apps only. However there is no built-in support for SOCKS, so you can't set SOCKS5 proxy from adb shell or terminal emulator without using a third party tool / app. See details in How to set Wi-Fi HTTPS ...


1

The developer of that app, Cheetah Mobile, has been accused of committing ad-frauds. XDA has it covered in detail here. I would suggest to refrain from using any product from such developer. If you can remove such an app or at least disable it, than consider it.


1

SOLVED! I found a solution, by using Automagic and Tasker Autoinput plugin we can easily Remap everything in the screen. In the flow below , when a game (brawl stars) starts then do the below actions (disable keys, display ongoing notification to enable keys whenever I want, and a toast)


1

If you are using Magisk modules, you must be trying to delete a bind mounted (1) directory. Enable Core Only Mode (no modules) in Magisk app and reboot. Then delete the stuff you want to.


1

Huawei has locked bootloader by default, no chance to boot custom recovery from fastboot = no way to break in and reset locksettings.db (you can check the unlock status with fastboot oem device-info) If you are the owner of the bonded google account and phone, you can connect it over wifi, or insert a SIM card (with disabled PIN) to accomplish mobile data ...


1

When installing Magisk you don't need to wipe anything (data, dalvik, cache, system, etc). All you need is to install the Magisk zip. If you want to install a custom ROM, then it is recommended to wipe data, system and dalvik/cache.


1

AFAIK, only apps running as root (UID 0) (1) or system (UID 1000) (2) or with android.permission.MOUNT_UNMOUNT_FILESYSTEMS (3) can do fstrim. But third party apps can neither get UID 0/1000 (without rooting phone), nor the said permission is for third party apps (4). Also manually sending FITRIM ioctl with fstrim command requires at least capability ...


1

I highly doubt it. I use an app called Trimmer which requires root to trim /cache, /data, /system. I installed this app & ran only selecting cache, but it shower trimeed cache & data. I ran a logcat, did not catch anything. So most probably it is a snake oil or at best it clears your cache.


1

Here is the link how this app works you might not understand the language its English title is LagFix Trimmer to cure the machine without root | Easy Android Click here


1

Thanks to alecxs for all the help. In the end this was possible with Magisk Manager and odin. I will try and list all the steps needed, but there was a lot of trial and error so I may miss somthing. Get enable OEM reset then usb debugging (this will factory reset the tablet) Find the stock boot.img I found mine here transfer the boot.img to your phone ...


1

Samsung's are notoriously hard to gain root access on, and many people that own a Samsung prefer to use a separate device with root access. The main reson is that Samsung's main goal ( in my opinion ) was to create a device that is secure enough to be used by law enforcement agencies. The main selling point in that direction was a security feature called ...


1

So I did manage to get it working with SSHDroid. The real problem was not what I thought it was at all. I unplugged my wireless booster (Buffalo) and it started working. For some reason the booster blocks IP between the machines on the WiFi and the machines on the wired LAN even though they can find each other with ARP. I'm really glad I didn't start ...


1

You will naturally need root to replace a system font. Because without root, you cannot write to the partitions where the fonts are stored and loaded from. So, in order to answer your question - No, it is not possible. That said, we do hear that Android Q will have support for font changes. If the feature makes its way to the final Q builds, you will be ...


1

Is it technically possible to do a block-level (dd) backup of a file? - Yes Is it technically possible to do a block-level (dd) backup of a folder? - No


Only top voted, non community-wiki answers of a minimum length are eligible