Root Pusher: Fix su remount hack

Apparently busybox has an 'su' command and that's what was being called by the remount exploit do to symlinks. This uses the direct path because the script fails to execute without it.