logoalt Hacker News

rany_yesterday at 6:49 PM4 repliesview on HN

Could this be used to root Android devices? Does Android ship with algif_aead?


Replies

alufersyesterday at 8:48 PM

I rewrote it quickly to C [1] (and changed the embedded binary to be aarch64).

Unfortunately it fails on calling bind() on my device, so probalby Android doesn't ship with that kenrel module by default :(. So no freedom for my $40 phone.

Putting it out here, maybe somebody else will have better luck.

[1] https://gist.github.com/alufers/921cd6c4b606c5014d6cc61eefb0...

tripdoutyesterday at 7:30 PM

There’s SELinux, everything is mounted nosuid, barely anything runs as root except init. I doubt it.

notpushkinyesterday at 7:14 PM

I’ve poked around on my phone and it didn’t work:

    File "/data/data/com.termux/files/home/a.py", line 5, in c
      a=s.socket(38,5,0); # ...
    File "/data/data/com.termux/files/usr/lib/python3.13/socket.py", line 233, in __init__
      _socket.socket.__init__(self, family, type, proto, fileno)
      ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  PermissionError: [Errno 13] Permission denied
show 1 reply
zb3yesterday at 6:57 PM

Android is smarter than setuid + system partitions aren't writable.

show 2 replies