Android SU

app -> SU daemon
 |         |
 |         ^
  ------> SU server
 stdin/out

 

Jorrit "Chainfire" Jongma - SuperSU, libsuperuser
Adam "ChainsDD" shanks - existing Superuser
Koushik Dutta - new Superuser, ClockworkMod Recovery

SuperSU:
安装img:
init.rc
  service recovery /sbin/recovery

  /sbin/recovery:
    /sbin/busybox mount -t rootfs -o remount,rw rootfs
    /sbin/symlink
    /sbin/cfautoroot --rgba

    /sbin/cfautoroot:
      /system/xbin/su --install

安装后：
  init.rc
    service flash_recovery /system/etc/install-recovery.sh

    install-recovery.sh
      /system/xbin/daemonsu --auto-daemon &