[Android Head-Units] Miwer:
Is Baidu Root "safe"?

Hi there,

I just want to share my rooting experience with version 2.7.28.

First I tried to root using the RootMyAN21U 1.4 as posted in the OP, but it did not work. I could not gain root after the 2nd step.

I did read about the chinese multi-device Baidu Root, but having a peek inside the apk, it seemed a little bloated, and I wasn't sure if it was only a rooting app or it was supposed to do something else than that.

Reluctantly, I tried it, and I got my device rooted (as I expected), but then I started to look a the file systems, to see what changes it had made.

I seems that it did not only install a new /system/xbin/su binary like the RootMyAN21U would, but also a bunch of other files (hence the "bloat").

Here's a list with comments.

/system/bin:

-rwsr-sr-x 1 root root 311904 Aug 4 18:05 us

binary executable (with SUID and SGID) with an embedded sqlite database (for copying into /data/data/com.baidu.easyroot i suspect). String references some su help text, and the mentioned directory.

/system/usr:

-rwsr-sr-x 1 root root 311904 Aug 4 18:05 .uv

identical to /system/bin/us (a backup copy?)

/system/app:

-rw-r--r-- 1 root root 2824574 Aug 4 18:08 BaiduRoot.apk

Some service app left behind and running in the background after rooting - even after uninstalling the Baidu Root app (BaiduRoot_2001_EN.apk)

Cannot be uninstalled from Settings, only deactivated. Need some system app removal tool or terminal with /system mounted rw to remove.

This app also popped up with some chinese notification right after I connected the radio to my home Wifi network. I don't know if any data was sent (but I súspect it).

/system/lib:

-rw-r--r-- 1 root root 25948 Aug 4 18:08 librootjni.so

Some root helper library for Baidu Root service app. String reference to "com/baidu/easyroot/root/RootHelper"

/system/etc:

-rwsr-xr-x 1 root root 38 Aug 4 18:48 resolv.conf

Created right after I connected to Wifi.

Contains DNS servers 8.8.4.4 and 8.8.8.8 (google DNS servers) - these are NOT the DNS servers configured in the DHCP server of my home router.

Why put a resolv.conf with SUID in an otherwise read-only file system (/system), with hard coded DNS servers? (to circumvent any DNS blocking?)

Baidu Root is also responsible for putting the following files in my /data and /sdcard partitions (excluding some empty directories):

/data/data/com.baidu.easyroot/databases/launcher.db

/data/data/com.baidu.easyroot/databases/launcher.db-journal

/data/data/com.baidu.easyroot/databases/permissions.sqlite

/data/data/com.baidu.easyroot/databases/permissions.sqlite-journal

/data/data/com.baidu.easyroot/files/__local_stat_cache.json

/data/data/com.baidu.easyroot/shared_prefs/__Baidu_Stat_SDK_SendRem.xml (contains some ID string and other settings)

/data/data/com.baidu.easyroot/shared_prefs/com.baidu.easyroot_preferences.xml (contains some sync settings)

/sdcard/baidu/.cuid (contains some ID string)

So basically Baidu Root does work (it gains root on the device), but at what cost. Less privacy and phone-home type of features, and other bloating stuff?

I for one don't really trust Baidu after this, and I would very much like to see the RootMyAN21U coming back into working condition, if possible.

After running the SuperUser app and installing the proper su binary, I deleted all of the above mentioned files, without any issues.

Edit:

Also to help out the author of RootMyAN21U, here's a log file attached from my failed attempt at rooting.