Mk908 Always root without permission management?

[FadeFx]

Hi, today i got my new toy and the first thing i realized is that it is rooted, but has no superuser management, so in my opinion is permanently at risk that a malicious app could do whatever it wants on your device without you even noticing that it can.
So now my question is if someone has already tried to install supersu or a similar app to have more control over that?

_________________________
tapatalked from GalaxyS3

[Jbardi]

Mk908 Always root without permission management?

The first step to protecting your device is you! You are the root password. Don't install any apk if you are not fully aware of what it does, and secondly, don't give apps root access unless you trust it. Unlike most *nix based systems that run unprivileged apps under your limited user account, the way android is designed is that each app that is installed on your device is basically run as a unique separate user, with its own permissions, based upon the requirements the app has listed at install time. With the app SuperSU, you get to decide which apps to elevate to root when they ask for it, and if you are really scared, you can set SuperSU to ask for the elevation every time or after xx minutes, but the idea of requiring a proper su with password access restrictions is rather silly for a TV Stick especially. After all, what sensitive data are you really putting on your TV Stick media center?
This setup is working for thousands and thousands of people with rooted TV sticks, phones and tablets, so it is obviously not a dire issue or every rooting method would involve the backup and replacement of the existing su. I say relax and be a little less paranoid. No need for tin hats with your new toy.

btw, whether root had a password or not is irrelevant as you would have to elevate certain apps that require root in either scenario, only in your "ideal" solution you would have to type your password in rather than simply clicking "allow" as you do with the current password-less state of root. So again, it all comes down to you trusting the apps you elevate. Due diligence by way of research and reviews on a particular app will be your best bet. Also, stay away from aptoide, blackmart, etc. if you want to steal apps by installing cracked or patched apk files, all bets are off!

[FadeFx]

AW: Mk908 Always root without permission management?

It is not the password that bugs me, but there is no superuser app installed that grants su permission to apps, so any app that needs su can use it without any visible confirmation, su is granted immediately instead of piping up a window to ask if i want to allow that. I tried to install superuser by chainfire, but apps are granted su without confirmation anyways. So in my opinion the used su binary is inappropriate!

_________________________
tapatalked from GalaxyS3

[Jbardi]

Mk908 Always root without permission management?

Hmm, I use SuperSU by chainfire all the time, in fact, every pre-rooted rom I have ever seen has chainfire's SuperSU installed by default, and apps are not given root access without a prompt to grant or deny, so not quite sure how any apps on your device are able to bypass SuperSU's requirement. I have an iMito MX1, a Tronsmart T428, a Minix Neo X7 and a Kindle Fire, but not an MK809, so I'm not sure what rom they have as Chinese roms are all hacked and patched so who knows. In 99.9% of cases the current setup with password-less root is perfectly safe <shrug>

[FadeFx]

AW: Mk908 Always root without permission management?

As i say, passwordless is no problem for me, promptless is what concerns me. I am gonna try install supersu tomorrow and let it install its own su binary, if that does not work, i will definitely install HFW and forget about the stock rom.

_________________________
tapatalked from GalaxyS3

[Legitsu]

install a custom rom or install SuperSU from the google play store
./thread

https://play.google.com/store/apps/details?id=eu.chainfire.supersu&hl=en

[FadeFx]

AW: Mk908 Always root without permission management?

Ok, SuperSu did the trick, now it asks for confirmation...

However, i still plan to flash HFW as soon as i find more time.

_________________________
tapatalked from GalaxyS3