[RK3288][Android5.1] 调试笔记 -- Android系统ROOT(免授权)

Platform: RK3288
OS: Android 5.1

Kernel: 3.10.79

1.删除system/extras/su/Android.mk 屏蔽系统su编译

2.使用 PRODUCT_COPY_FILES 拷贝附件的su到out/../system/xbin/目录下
例 PRODUCT_COPY_FILES +=$(CUR_PATH)/su:system/xbin/su

在 \device\rockchip\rk3288\device.mk  文件中

PRODUCT_COPY_FILES += \
    device/rockchip/rk3288/rk3288_box/init.rc:root/init.rc \
    device/rockchip/rk3288/fstab.rk30board.bootmode.unknown:root/fstab.rk30board.bootmode.unknown \
+    $(LOCAL_PATH)/su:system/xbin/su \
    device/rockchip/rk3288/rk3288_box/fstab.rk30board.bootmode.emmc:root/fstab.rk30board.bootmode.emmc

并把 su 文件中放在此文件同一目录下

此方法不是最稳妥的方案，还请大神指点下

3.如下添加对应的代码到init.rk30board.rc
diff --git a/device/rockchip/common/init.rk30board.rc b/device/rockchip/common/init.rk30board.rc
index 8a44718..db978a0 100644
--- a/device/rockchip/common/init.rk30board.rc
+++ b/device/rockchip/common/init.rk30board.rc
@@ -164,3 +164,8 @@ on property:app.logsave.start=1

on property:app.logsave.start=0
     stop catlog
+
+
+service daemonsu /system/xbin/su --daemon
+    class main
+    oneshot

备注：若要在开发者选项中做个开关，则方案如下：

        1. +++ \device\rockchip\common\init.rk30board.rc    文件下添加

         # yr add new code for root test 2017.11.08
        service su /system/xbin/su --daemon
            class main
            seclabel u:r:su:s0
        #    oneshot
    
        on property:persist.sys.root_access=0
            stop su

        on property:persist.sys.root_access=1
            start su

        #end

        2、+++ \device\rockchip\rk3288\system.prop  文件下添加

        persist.sys.root_access=0

        3、\packages\apps\Settings\src\com\android\settings\DevelopmentSettings.java   文件下添加

    private static final String ROOT_ACCESS_KEY = "root_access";
    private static final String ROOT_ACCESS_PROPERTY = "persist.sys.root_access";

    private SwitchPreference mRootAccess;
    private Object mSelectedRootValue;

    private Dialog mRootDialog;

        mRootAccess = (SwitchPreference) findPreference(ROOT_ACCESS_KEY);
        mAllPrefs.add(mRootAccess);
        mRootAccess.setOnPreferenceChangeListener(this);

         updateRootAccessOptions();

   private void updateRootAccessOptions() {
       //Log.e("jxwtest", "updateRootAccessOptions");
        String value = SystemProperties.get(ROOT_ACCESS_PROPERTY, "0");
        mRootAccess.setChecked(!"0".equals(value));
    }

    private void writeRootAccessOptions(Object newValue) {
        //Log.e("jxwtest", "writeRootAccessOptions");
       SystemProperties.set(ROOT_ACCESS_PROPERTY, newValue.toString());
       updateRootAccessOptions();
    }

    private void resetRootAccessOptions() {
        //Log.e("jxwtest", "resetRootAccessOptions");
        String oldValue = SystemProperties.get(ROOT_ACCESS_PROPERTY, "0");
        SystemProperties.set(ROOT_ACCESS_PROPERTY, "0");

        updateRootAccessOptions();
    }


        else if (ROOT_ACCESS_KEY.equals(preference.getKey())) {
            //String newValue1 = mRootAccess.isChecked()?"1":"0";
            boolean switchStatus = (boolean)newValue;
            String newValue1 = switchStatus?"1":"0";
            //Log.e("jxwtest", "onPreferenceChange:newValue="+newValue+",newValue1="+newValue1);
             if ("0".equals(SystemProperties.get(ROOT_ACCESS_PROPERTY, "0"))
                    && switchStatus) {
                mSelectedRootValue = newValue1;
                mDialogClicked = false;
                if (mRootDialog != null) {
                    dismissDialogs();
                }
                mRootDialog = new AlertDialog.Builder(getActivity())
                        .setMessage(getResources().getString(R.string.root_access_warning_message))
                        .setTitle(R.string.root_access_warning_title)
                        .setPositiveButton(android.R.string.yes, this)
                        .setNegativeButton(android.R.string.no, this).show();
                mRootDialog.setOnDismissListener(this);
            } else {
                writeRootAccessOptions(newValue1);
            }
            return true;
        }

        if (mRootDialog != null) {
            //Log.e("jxwtest", "dismissDialogs");
            mRootDialog.dismiss();
            mRootDialog = null;
        }


        else if (dialog == mRootDialog) {
            //Log.e("jxwtest", "onClick");
            if (which == DialogInterface.BUTTON_POSITIVE) {
                writeRootAccessOptions(mSelectedRootValue);
            } else {
                // Reset the option
                writeRootAccessOptions("0");
            }
        }

        else if (dialog == mRootDialog) {
            //Log.e("jxwtest", "onDismiss");
            updateRootAccessOptions();
            mRootDialog = null;
        }

         4.  \packages\apps\Settings\res\xml\development_prefs.xml   文件下添加

    <SwitchPreference
        android:key="root_access"
        android:title="@string/root_access"
        android:persistent="false"/>

4.修改
+++ b/system/core/include/private/android_filesystem_config.h
@@ -245,7 +245,7 @@ static const struct fs_path_config android_files[] = {

     /* the following five files are INTENTIONALLY set-uid, but they
      * are NOT included on user builds. */
-    { 04750, AID_ROOT,      AID_SHELL,     0, "system/xbin/su" },
+    { 06755, AID_ROOT,      AID_ROOT,     0, "system/xbin/su" },


5.编译后烧写固件，如无法获取root，请查看ls -l system/xbin/su 的权限是否为6755

参考文献:http://developer.t-firefly.com/thread-9810-1-1.html

文件下载地址：http://download.csdn.net/download/jkjiang123/10110894