MarcoBuster/Magisk
1
1
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add exploit conditions

Browse Source 
Even selinux is permissive and euid=0, if missing privileges, magiskd will fail to start. e.g. https://github.com/vvb2060/Magica
This commit is contained in:
vvb2060 2021-05-31 21:26:09 +08:00
parent 080ab6032c
commit 09b023dbb6
No known key found for this signature in database
GPG Key ID: 59B2BF15A79E26FA
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
docs/deploy.md
View File

@ -54,6 +54,7 @@ The script `scripts/emulator.sh` allows you to establish a minimal Magisk enviro
Occasionally, there would be exploits in certain devices that could lead to full fledged root. On modern Android, it is possible to use MagiskSU if you can gain a shell with the following conditions:
- Effective UID should be privileged (root, or `euid=0`)
- Full Linux capabilities
- Have the ability to reload `sepolicy` (which 99.9% of the time means SELinux permissive)
You can check out `scripts/emulator.sh` as a reference for bringing up Magisk with a root shell. Note that these changes are not persistent, and you will need to find ways to rerun the whole process every boot.