原生android获取root,Android 原生获取root权限的办法

int main(int argc, char **argv)

{

struct passwd *pw;

int uid, gid, myuid;

//---------------------------------------------------------------disabled by fisher

/* Until we have something better, only root and the shell can use su. */

/*

myuid = getuid();

if (myuid != AID_ROOT && myuid != AID_SHELL) {

fprintf(stderr,"su: uid %d not allowed to su\n", myuid);

return 1;

}

*/

//-----------------------------------------------------------------

if(argc < 2) {

uid = gid = 0;

} else {

pw = getpwnam(argv[1]);

if(pw == 0) {

uid = gid = atoi(argv[1]);

} else {

uid = pw->pw_uid;

gid = pw->pw_gid;

}

}

if(setgid(gid) || setuid(uid)) {

fprintf(stderr,"su: permission denied\n");

return 1;

}

/* User specified command for exec. */

if (argc == 3 ) {

if (execlp(argv[2], argv[2], NULL) < 0) {

fprintf(stderr, "su: exec failed for %s Error:%s\n", argv[2],

strerror(errno));

return -errno;

}

} else if (argc > 3) {

/* Copy the rest of the args from main. */

char *exec_args[argc - 1];

memset(exec_args, 0, sizeof(exec_args));

memcpy(exec_args, &argv[2], sizeof(exec_args));

if (execvp(argv[2], exec_args) < 0) {

fprintf(stderr, "su: exec failed for %s Error:%s\n", argv[2],

strerror(errno));

return -errno;

}

}

/* Default exec shell. */

execlp("/system/bin/sh", "sh", NULL);

fprintf(stderr, "su: exec failed\n");

return 1;

}

这个代码就不说了,本来想说的,打字途中想起不开心的事了,简单代过.看前面那部分被注释掉的代码,这个在执行的时候会检测用户是否为root或者shell,如果不是,直接返回,如果是,那么执行下面的setuid,setgid代码.还不明白的自己去买块老豆腐吃死算了.

此方法在android4.2系统上验证通过.