Root Access != Superuser Popup

[dolorespark]

There seems to be a misconception that you're not "fully rooted" unless you get a popup when you or an app tries to get root access. In fact, the popup just confirms that you have a functioning copy of the Superuser app installed. If you can do things that only root can do, like push stuff into /system/app or dump a nand partition, then you're rooted regardless of whether a popup appears. (Note: I'm talking about when your system is booted normally, not in recovery mode.)

On a typical Unix system, you're prompted for a password whenever you run 'su' to get superuser privileges. On our cheap China-tabs, they include a simplistic version of 'su' that doesn't prompt or ask any questions. It just grants access to whatever requests them - possibly without your knowledge. This is clearly a security issue, so many people install the SuperUser app which comes with its own version of 'su'. That version sends a message to the app (.apk) which in turn pops up a window asking whether you want to grant app XYZ root access. Superuser.apk may improve security on your device but it doesn't add any new capabilities to a system that already has a copy of 'su'.

Some of the misunderstanding about Superuser.apk may be because most mainstream tabs and phones don't come with a stock 'su' binary. Users have to go to great lengths to get a copy installed - and the version they usually end up with is Superuser's. If they haven't used a Unix-based system before, they may incorrectly equate "root" with "popup". More experienced users understand that the popup is simply a substitute for a password prompt.

DoPa

[matt]

Double post-delete.

[matt]

I think you are right. I only want superuser so I can control what apps have access to root. It's like a firewall for system access. With stock su any malware can gain root access.
To install superuser correctly, I've only had success by installing a new busybox first on my polaroid and arnova tabs.

Superuser does not 'root' tablets, it gives me administrative control over root.

Busybox by stephen and superuser by chain work for me. Supersu is also popular.
Without busybox, I could never get the superuser binaries to update. Or any popups.

[matt]

The sticky above about 701c root was extremely confusing to me with my first tablet.
There is discussion about 'semiroot' which on all later tablets became 'rooted out of the box' and the objective seemed to be leaving root and system RW permanently! Seems to me if a file manager can gain root access with su command so can any other app that wants it.