WO2018090452A1

WO2018090452A1 - Method and apparatus for protecting root permission

Info

Publication number: WO2018090452A1
Application number: PCT/CN2016/112615
Authority: WO
Inventors: 韩瑞峰
Original assignee: 深圳Tcl数字技术有限公司
Priority date: 2016-11-17
Filing date: 2016-12-28
Publication date: 2018-05-24
Also published as: CN106503570B; CN106503570A

Abstract

A method and apparatus for protecting root permission, comprising: adding a pseudo environment variable in an operating system of a terminal in advance (S10); obtaining reading priority of a storage directory corresponding to an environment variable for storing a switch user (SU) procedure in the operating system after the root of the operating system of the terminal is detected (S20); and configuring reading priority of a storage directory corresponding to the pseudo environment variable according to the obtained reading priority of the storage directory corresponding to the environment variable, the reading priority of the configured storage directory corresponding to the pseudo environment variable being higher than the obtained reading priority of the storage directory corresponding to the environment variable (S30). The present invention solves the technical problem in existing technology wherein the root permission of a terminal is completely exposed after the operating system of the terminal detects the root and improves the safety of data in the terminal.

Description

Method and device for protecting root authority

Technical field

The present invention relates to the field of mobile terminal technologies, and in particular, to a method and an apparatus for protecting root rights.

Background technique

With more and more Android products, its friendly operation interface, rich extension applications, and open source nature are the reasons why the Android system is currently leading the smart device market. With the user's in-depth understanding of the Android system, some users are not satisfied with only having ordinary user rights, and they have rooted the Android terminal to obtain higher privileges.

At present, users generally use some root tools to root the operating system of the terminal. The basic principles of these root tools basically use some security vulnerabilities to obtain the highest authority, and then any user can log in to the operating system. SU (Switch User switch user) program, any application can get root privileges by calling the SU program.

Although the root privilege can bring some convenience to the user, it also exposes the highest privilege of the system. If a malicious program uses the root privilege, it can almost access and modify all the files in the terminal, copy all sensitive information, photos, Video, etc., uploaded to any address specified by the malicious program, the consequences are very serious. In addition, improper operation with root privileges is quite dangerous. A slight delay may cause the terminal to crash, and a serious one may cause the terminal to fail to boot properly. Since the Android system is based on linux, there are many Linux vulnerabilities that can be exploited on the market, and there are many vulnerabilities in the hands of a few people that have not leaked out. Therefore, there is currently no way to completely prevent the terminal from being rooted, and the operating system of the terminal. Once rooted, the root privileges of the terminal are completely exposed, threatening the security of the data in the terminal.

Summary of the invention

The main purpose of the present invention is to provide a method and device for protecting the root privilege, which aims to solve the technical problem that the root privilege of the terminal is completely exposed after the operating system root of the terminal in the prior art, and improve the security of the data in the terminal. .

To achieve the above object, the present invention provides a method for protecting root rights, including:

Add a pseudo environment variable to the operating system of the terminal in advance;

After detecting the operating system root of the terminal, acquiring an environment variable of the SU program stored in the operating system corresponds to a read priority of the storage directory;

Setting a read priority of the storage directory corresponding to the pseudo environment variable according to the read priority of the storage directory corresponding to the obtained environment variable, wherein the read priority of the pseudo environment variable corresponding to the storage directory setting is higher than The obtained environment variable corresponds to the read priority of the storage directory.

Preferably, after the adding a pseudo environment variable in the operating system of the terminal in advance, the method further includes:

The pre-compiled pseudo-SU program is saved in a storage directory corresponding to the pseudo environment variable.

Preferably, after the operating system root of the terminal, the method further includes:

If a call instruction for calling the SU program sent by any application is detected, the pseudo-environment variable corresponding to the pseudo-SU program in the storage directory is sent to the application.

Preferably, after the pre-compiled pseudo-SU program is saved in the storage directory corresponding to the pseudo environment variable, the method further includes:

Setting the file attribute of the pseudo-SU program to read-only, or setting the file attribute of the pseudo-SU program to be non-deletable.

Preferably, the method further includes:

A reminder message or a warning message is added in advance to the pseudo-SU program. When any application receives the pseudo-SU program, the reminder message or the warning message is output to remind the user that the root authority fails to be obtained.

In addition, in order to achieve the above object, the present invention also provides an apparatus for protecting Root authority, the apparatus comprising:

Adding a module for adding a pseudo environment variable to the operating system of the terminal in advance;

An obtaining module, configured to acquire, after detecting an operating system root of the terminal, a read priority of a storage directory corresponding to an environment variable storing the SU program in the operating system;

a setting module, configured to set a read priority of the storage directory corresponding to the pseudo environment variable according to the read priority of the storage directory corresponding to the obtained environment variable, wherein the pseudo environment variable corresponds to the read after the storage directory is set The priority is higher than the read priority of the storage directory corresponding to the obtained environment variable.

Preferably, the adding module is further configured to:

Preferably, the device further comprises:

The calling module is configured to send the pseudo-SU variable corresponding to the pseudo-SU program in the storage directory to the application if a call instruction for calling the SU program sent by any application is detected.

Preferably, the adding module is further configured to:

After saving the pre-compiled pseudo-SU program in the storage directory corresponding to the pseudo environment variable, setting the file attribute of the pseudo-SU program to read-only, or setting the file attribute of the pseudo-SU program to be unavailable. delete.

Preferably, the device further comprises:

The reminding module is configured to add a reminder message or a warning message to the pseudo-SU program in advance. After receiving the pseudo-SU program, the application may output the reminder message or the warning message to remind the user that the root authority fails to be obtained.

The method and device for protecting the root privilege provided by the present invention include: adding a pseudo environment variable to the operating system of the terminal in advance, and acquiring the environment variable of the SU program stored in the operating system after detecting the operating system root of the terminal Corresponding to the read priority of the storage directory, setting the read priority of the storage directory corresponding to the pseudo environment variable according to the read priority of the storage directory corresponding to the obtained environment variable, so that the pseudo environment variable corresponds to the storage directory setting The read priority is higher than the read priority of the storage directory corresponding to the obtained environment variable. The invention adds a pseudo environment variable in the operating system of the terminal in advance, and sets the reading priority of the storage directory corresponding to the pseudo environment variable to be higher than the reading of the storage directory corresponding to the environment variable storing the SU program in the operating system after the root. The priority is that the application cannot call the stored SU program, and thus cannot obtain any root authority. After solving the problem of the operating system root of the terminal in the prior art, the root authority of the terminal is completely exposed, and the terminal is improved. The security of the data.

DRAWINGS

1 is a schematic flowchart of a first embodiment of a method for protecting root rights according to the present invention;

2 is a schematic flowchart of a second embodiment of a method for protecting root rights according to the present invention;

3 is a schematic flowchart of a third embodiment of a method for protecting root rights according to the present invention;

4 is a schematic diagram of functional modules of a first embodiment of a device for protecting root rights according to the present invention;

5 is a schematic diagram of functional modules of a second embodiment of an apparatus for protecting root rights according to the present invention;

FIG. 6 is a schematic diagram of functional modules of a third embodiment of the apparatus for protecting root rights according to the present invention.

The implementation, functional features, and advantages of the present invention will be further described in conjunction with the embodiments.

detailed description

The preferred embodiments of the present invention are described in conjunction with the accompanying drawings, and the preferred embodiments described herein are intended to illustrate and explain the invention, and not to limit the invention, and The embodiments and the features in the embodiments can be combined with each other.

Referring to FIG. 1 , FIG. 1 is a schematic flowchart of a method for protecting a root privilege according to a first embodiment of the present invention. In this embodiment, the method for protecting a root privilege is applied to an operating system of a terminal or a terminal, and the method includes:

In step S10, a pseudo environment variable is added in advance to the operating system of the terminal.

In this embodiment, it is necessary to add a pseudo environment variable to the operating system of the terminal in advance, and specifically, the terminal may be added before leaving the factory. For example, a pseudo environment variable "/security" is added to the operating system of the terminal before the terminal leaves the factory.

It can be understood that the environment variable generally refers to some parameters used in the operating system to specify the operating environment of the operating system, such as the temporary folder location and the system folder location. An environment variable is an object with a specific name in the operating system that contains information that one or more applications will use. For example, the path environment variable in Windows and DOS operating systems, when the system is required to run a program without telling the full path of the program, the system should look for the path specified in the path environment variable in addition to the current directory. To find. That is, environment variables are mainly used to specify a program software path, which contains strings such as drive, path or file name, and environment variables control the behavior of multiple programs, only administrators can add, modify or delete operations. System system environment variables.

Further, after adding the pseudo environment variable in the operating system of the terminal, which is described in the foregoing step S10, the method further includes:

The pseudo-SU program is pre-compiled, and then stored in the storage directory corresponding to the pseudo environment variable, for example, in the storage directory "/security" corresponding to the pseudo environment variable.

Among them, the normal SU program can make a normal user switch to super user or other users, and can temporarily have the rights of the switched user, and any application can obtain root privileges by calling the SU program. The pseudo-SU program described in this embodiment is an empty program file or a security program that does not include any rights, that is, the application cannot obtain any root authority by calling the pseudo-SU program described in this embodiment.

In step S20, after the operating system root of the terminal is detected, the read priority of the storage directory corresponding to the environment variable storing the SU program in the operating system is obtained.

In this embodiment, after the operating system of the terminal is rooted, the root root tool of the operating system stores the compiled SU program in a storage directory corresponding to the environment variable it establishes, for example, the compiled SU program. Stored in the storage directory "/system/bin" or "/system/xbin" corresponding to the environment variable it is created.

In the operating system, the storage directory corresponding to the environment variable has a read priority, that is, any application needs to call the read priority of the storage directory corresponding to the environment variable when calling the program in the environment variable, so the implementation For example, after the operating system root of the terminal is detected, the read priority of the storage directory corresponding to the environment variable storing the SU program in the operating system is obtained.

Step S30, setting a read priority of the storage directory corresponding to the pseudo environment variable according to the read priority of the storage directory corresponding to the environment variable, wherein the pseudo environment variable corresponds to the read priority after the storage directory is set. The level is higher than the read priority of the storage directory corresponding to the obtained environment variable.

In this embodiment, after obtaining the read priority of the storage directory corresponding to the environment variable, setting the read storage directory corresponding to the pseudo environment variable according to the read priority of the storage directory corresponding to the stored environment variable The priority is such that the read priority of the pseudo environment variable corresponding to the storage directory setting is higher than the read priority of the obtained storage directory corresponding to the environment variable.

Wherein, when the read priority of the pseudo environment variable corresponding to the storage directory is set to be higher than the read priority of the storage directory corresponding to the environment variable established after the operating system root, any application can only invoke the priority. The high pseudo environment variable corresponds to the pseudo-SU program in the storage directory, and the SU program in the storage directory corresponding to the lower-priority environment variable cannot be called, so that no root authority can be obtained.

The method for protecting the root privilege in the embodiment includes: adding a pseudo environment variable to the operating system of the terminal in advance, and after detecting the operating system root of the terminal, acquiring an environment variable corresponding to the SU program stored in the operating system The read priority of the storage directory is set, and the read priority of the storage directory corresponding to the pseudo environment variable is set according to the read priority of the storage directory corresponding to the obtained environment variable, so that the pseudo environment variable is corresponding to the storage directory setting. The read priority is higher than the read priority of the storage directory corresponding to the obtained environment variable. In this embodiment, a pseudo environment variable is added in the operating system of the terminal in advance, and the read priority of the storage directory corresponding to the pseudo environment variable is set to be higher than that of the storage directory corresponding to the environment variable of the SU program stored in the operating system after the root. The priority is obtained, so that the application cannot call the stored SU program, and thus the root authority cannot be obtained. The technical problem that the root authority of the terminal is completely exposed after the operating system root of the terminal in the prior art is solved, and the terminal is improved. The security of the internal data.

Further, referring to FIG. 2, FIG. 2 is a schematic flowchart of a second embodiment of a method for protecting a root privilege according to the foregoing embodiment of the present invention. In this embodiment, after the operating system root of the terminal, The above methods for protecting Root permissions include:

Step S40: If a call instruction for calling the SU program sent by any application is detected, the pseudo-SU variable corresponding to the pseudo-SU program in the storage directory is sent to the application.

After the operating system root of the terminal, the root tool adds a compiled SU program to the operating system of the terminal, and then any application can obtain the root authority by calling the SU program.

The pseudo-environment variable for storing the pseudo-SU program in the embodiment corresponds to the read priority of the storage directory, and is higher than the storage directory corresponding to the environment variable for storing the SU program established by the root tool in the terminal operating system. Read priority, so after detecting the call instruction for calling the SU program sent by any application, only the pseudo-SU program corresponding to the higher priority pseudo environment variable can be called, that is, if any random detection is detected, The application sends a call instruction for calling the SU program, and sends the pseudo-environment variable with a higher priority to the application in the storage directory corresponding to the pseudo-SU program.

In this embodiment, in the case that the read priority of the storage directory corresponding to the pseudo environment variable is higher than the read priority of the storage directory corresponding to the environment variable, the application can only extract the pseudo environment with higher priority. The variable corresponds to the pseudo-SU program in the storage directory, and the SU program in the storage directory corresponding to the environment variable having the lower priority cannot be extracted.

The method for protecting the root authority in the embodiment, after detecting the call instruction for calling the SU program sent by any application after the operating system root of the terminal, the pseudo environment variable is corresponding to the storage directory. The pseudo-SU program is sent to the application, so that the application cannot obtain the SU program established by the root tool, and thus cannot obtain any root authority, thereby realizing the purpose of effectively protecting the root authority after the operating system root of the terminal.

Further, based on the embodiment described in FIG. 1 above, in this embodiment, after the pre-compiled pseudo-SU program is saved in the storage directory corresponding to the pseudo environment variable, the method further includes:

In order to prevent the malware from modifying or deleting the pre-added pseudo-SU program, the SU program established by the root tool is extracted to obtain the root authority. In this embodiment, the pre-compiled pseudo-SU program is saved in the pseudo. After the storage directory corresponding to the environment variable, the file attribute of the pseudo-SU program is set to read-only, or the file attribute of the pseudo-SU program is set to be non-deletable.

In addition, the pseudo-SU program described in this embodiment may be a blank SU program, which does not include any command for invoking the root privilege, so any application cannot obtain any root privilege after obtaining the pseudo-SU program. of.

The method for protecting the root authority in the embodiment, after saving the pre-compiled pseudo-SU program in the storage directory corresponding to the pseudo environment variable, setting the file attribute of the pseudo-SU program to read-only, or The file attribute of the pseudo SU program is set to be undeleteable. In this embodiment, by setting the file attribute of the pseudo-SU program to read-only or non-deletable, it is possible to effectively prevent the malware from extracting the SU program established by the root tool to obtain the root authority by modifying or deleting the pseudo-SU program. The purpose of effectively protecting the root authority of the terminal after the operating system root of the terminal is implemented.

Further, referring to FIG. 3, FIG. 3 is a schematic flowchart of a third embodiment of a method for protecting a root privilege according to the present invention. The method for protecting a root privilege according to the embodiment described in FIG. 1 and FIG. Also includes:

Step S50: Add a reminder message or a warning message to the pseudo-SU program in advance. After receiving the pseudo-SU program, the application may output the reminder message or the warning message to remind the user that the root authority fails to be obtained.

In this embodiment, a reminder message or a warning message is added to the pseudo-SU program in advance, such as “failure to obtain root authority” or “prohibit obtaining root authority”, etc., to remind the user that the root authority fails to be obtained, or to warn the user for the terminal. The security of the internal data, prohibiting the acquisition of root privileges, and when a malicious application wants to obtain the root program, is used to prompt the user to prevent it. After any application receives the pseudo SU program, an alert message or a warning message in the pseudo SU program is output.

The reminder message or the warning message may be output to the operation interface of the application, or the reminder message or the warning message may be directly outputted to the display interface of the terminal to remind the user.

The method for protecting the root authority in the embodiment, by adding a reminder message or a warning message to the pseudo-SU program in advance, after receiving the pseudo-SU program by any application, outputting the reminder message or the warning message, In order to remind the user that the root authority fails, the user can be prompted to obtain the root failure after the terminal root, or the user is prompted to obtain the root permission for the security of the data in the terminal, thereby further protecting the data of the terminal after the root is in the terminal. Security.

Referring to FIG. 4, FIG. 4 is a schematic diagram of a functional module of a device for protecting a root privilege according to a first embodiment of the present invention. In this embodiment, the device for protecting the root privilege is a part of the terminal, and the device 100 for protecting the root privilege include:

The module 10 is added for adding a pseudo environment variable in the operating system of the terminal in advance.

Further, the above adding module 10 is further configured to:

After the pseudo environment variable is added to the operating system of the terminal, the pre-compiled pseudo-SU program is saved in the storage directory corresponding to the pseudo environment variable.

The obtaining module 20 is configured to acquire, after detecting the operating system root of the terminal, a read priority of the storage directory corresponding to the environment variable storing the SU program in the operating system.

In this embodiment, after the operating system root of the terminal is rooted, the root root tool of the operating system stores the compiled SU program in a storage directory corresponding to the environment variable it establishes, for example, the compiled SU program is stored. In the storage directory "/system/bin" or "/system/xbin" corresponding to the environment variable it establishes.

The setting module 30 is configured to set a read priority of the storage directory corresponding to the pseudo environment variable according to the read priority of the storage directory corresponding to the environment variable, where the pseudo environment variable corresponds to the storage directory setting The read priority is higher than the read priority of the storage directory corresponding to the obtained environment variable.

The device for protecting the root privilege in the embodiment includes: adding a pseudo environment variable to the operating system of the terminal in advance, and after detecting the operating system root of the terminal, acquiring an environment variable corresponding to the SU program stored in the operating system The read priority of the storage directory is set, and the read priority of the storage directory corresponding to the pseudo environment variable is set according to the read priority of the storage directory corresponding to the obtained environment variable, so that the pseudo environment variable is corresponding to the storage directory setting. The read priority is higher than the read priority of the storage directory corresponding to the obtained environment variable. In this embodiment, a pseudo environment variable is added in the operating system of the terminal in advance, and the read priority of the storage directory corresponding to the pseudo environment variable is set to be higher than that of the storage directory corresponding to the environment variable of the SU program stored in the operating system after the root. The priority is obtained, so that the application cannot call the stored SU program, and thus the root authority cannot be obtained. The technical problem that the root authority of the terminal is completely exposed after the operating system root of the terminal in the prior art is solved, and the terminal is improved. The security of the internal data.

Further, referring to FIG. 5, FIG. 5 is a schematic diagram of a functional module of a second embodiment of the apparatus for protecting the root privilege according to the embodiment of FIG. 4, in this embodiment, after the operating system root of the terminal The device 100 for protecting the root authority further includes:

The calling module 40 is configured to send a pseudo-SU program corresponding to the storage directory to the application if the calling instruction for calling the SU program sent by any application is detected.

The apparatus for protecting the root authority according to the embodiment, after detecting the call instruction for calling the SU program sent by any application after the operating system root of the terminal, the pseudo environment variable is corresponding to the storage directory. The pseudo-SU program is sent to the application, so that the application cannot obtain the SU program established by the root tool, and thus cannot obtain any root authority, thereby realizing the purpose of effectively protecting the root authority after the operating system root of the terminal.

Further, based on the embodiment described in FIG. 4 above, in the embodiment, the adding module 10 is further configured to:

The device for protecting the root authority in the embodiment, after saving the pre-compiled pseudo-SU program in the storage directory corresponding to the pseudo environment variable, setting the file attribute of the pseudo-SU program to read-only, or The file attribute of the pseudo SU program is set to be undeleteable. In this embodiment, by setting the file attribute of the pseudo-SU program to read-only or non-deletable, it is possible to effectively prevent the malware from extracting the SU program established by the root tool to obtain the root authority by modifying or deleting the pseudo-SU program. The purpose of effectively protecting the root authority of the terminal after the operating system root of the terminal is implemented.

Further, referring to FIG. 6, FIG. 6 is a schematic diagram of a functional module of a third embodiment of the apparatus for protecting the root privilege according to the embodiment of FIG. 4 and FIG. 5, in the embodiment, the protection of the root privilege The device 100 also includes:

The reminding module 50 is configured to add a reminder message or a warning message to the pseudo SU program in advance. After receiving the pseudo SU program, the application may output the reminder message or the warning message to remind the user that the root authority fails to be obtained. .

The apparatus for protecting the root authority in the embodiment, by adding a reminder message or a warning message to the pseudo SU program in advance, after receiving the pseudo SU program by any application, outputting the reminder message or the warning message. In order to remind the user that the root authority fails, the user can be prompted to obtain the root failure after the terminal root, or the user is prompted to obtain the root permission for the security of the data in the terminal, thereby further protecting the data of the terminal after the root is in the terminal. Security.

It is to be understood that the term "comprises", "comprising", or any other variants thereof, is intended to encompass a non-exclusive inclusion, such that a process, method, article, or device comprising a series of elements includes those elements. It also includes other elements that are not explicitly listed, or elements that are inherent to such a process, method, article, or device. An element that is defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in the process, method, item, or device that comprises the element.

The serial numbers of the embodiments of the present invention are merely for the description, and do not represent the advantages and disadvantages of the embodiments.

Through the description of the above embodiments, those skilled in the art can clearly understand that the foregoing embodiment method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is better. Implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium, including a plurality of instructions for causing a The terminal device performs the method described in various embodiments of the present invention.

The above are only the preferred embodiments of the present invention, and are not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformations made by the description of the present invention and the drawings are directly or indirectly applied to other related technical fields. The same is included in the scope of patent protection of the present invention.

Claims

A method for protecting a root privilege, wherein the method for protecting a root privilege includes:

Add a pseudo environment variable to the operating system of the terminal in advance;

After detecting the operating system root of the terminal, acquiring an environment variable of the SU program stored in the operating system corresponds to a read priority of the storage directory;

Setting a read priority of the storage directory corresponding to the pseudo environment variable according to the read priority of the storage directory corresponding to the obtained environment variable, wherein the read priority of the pseudo environment variable corresponding to the storage directory setting is higher than The obtained environment variable corresponds to the read priority of the storage directory.
The method for protecting a root privilege according to claim 1, wherein the adding a pseudo environment variable in the operating system of the terminal beforehand further comprises:

The pre-compiled pseudo-SU program is saved in a storage directory corresponding to the pseudo environment variable.
The method for protecting a root privilege according to claim 2, wherein after the operating system root of the terminal, the method for protecting the root privilege further comprises:

If a call instruction for calling the SU program sent by any application is detected, the pseudo-environment variable corresponding to the pseudo-SU program in the storage directory is sent to the application.
The method of claim 2, wherein the pre-compiled pseudo-SU program is saved in the storage directory corresponding to the pseudo environment variable, and further includes:

Setting the file attribute of the pseudo-SU program to read-only, or setting the file attribute of the pseudo-SU program to be non-deletable.
The method for protecting root rights according to claim 2, wherein the pseudo-SU program is an empty program file or a security program that does not include any root authority.
The method for protecting root rights according to claim 3, wherein the pseudo-SU program is an empty program file or a security program that does not include any root authority.
The method for protecting the root privilege of claim 2, wherein the method for protecting the root privilege further comprises:

A reminder message is added to the pseudo-SU program in advance. After any application receives the pseudo-SU program, the reminder message is output to remind the user that the root authority fails to be obtained.
The method for protecting a root privilege according to claim 7, wherein the method for protecting the root privilege further comprises:

A warning message is added in advance to the pseudo-SU program, and after any application receives the pseudo-SU program, the warning message is output to warn the user to prohibit obtaining root authority.
The method for protecting a root privilege according to claim 6, wherein the method for protecting the root privilege further comprises:

A reminder message is added to the pseudo-SU program in advance. After any application receives the pseudo-SU program, the reminder message is output to remind the user that the root authority fails to be obtained.
The method for protecting a root privilege according to claim 9, wherein the method for protecting the root privilege further comprises:

A warning message is added in advance to the pseudo-SU program, and after any application receives the pseudo-SU program, the warning message is output to warn the user to prohibit obtaining root authority.
An apparatus for protecting a root privilege, wherein the apparatus for protecting a root privilege includes:

Adding a module for adding a pseudo environment variable to the operating system of the terminal in advance;

An obtaining module, configured to acquire, after detecting an operating system root of the terminal, a read priority of a storage directory corresponding to an environment variable storing the SU program in the operating system;

a setting module, configured to set a read priority of the storage directory corresponding to the pseudo environment variable according to the read priority of the storage directory corresponding to the obtained environment variable, wherein the pseudo environment variable corresponds to the read after the storage directory is set The priority is higher than the read priority of the storage directory corresponding to the obtained environment variable.
The device for protecting root rights according to claim 11, wherein the adding module is further configured to:

The pre-compiled pseudo-SU program is saved in a storage directory corresponding to the pseudo environment variable.
The device for protecting the root privilege of claim 12, wherein the device for protecting the root privilege further comprises:

The calling module is configured to send the pseudo-SU variable corresponding to the pseudo-SU program in the storage directory to the application if a call instruction for calling the SU program sent by any application is detected.
The device for protecting root rights according to claim 12, wherein the adding module is further configured to:

After saving the pre-compiled pseudo-SU program in the storage directory corresponding to the pseudo environment variable, setting the file attribute of the pseudo-SU program to read-only, or setting the file attribute of the pseudo-SU program to be unavailable. delete.
The apparatus for protecting root rights according to claim 12, wherein the pseudo-SU program is an empty program file or a security program that does not include any root authority.
The apparatus for protecting root rights according to claim 13, wherein the pseudo-SU program is an empty program file or a security program that does not include any root authority.
The device for protecting the root privilege of claim 12, wherein the device for protecting the root privilege further comprises:

The reminding module is configured to add a reminder message to the pseudo-SU program in advance. After receiving the pseudo-SU program, the application may output the reminder message to remind the user that the root authority fails to be obtained.
The device for protecting the root privilege of claim 17, wherein the reminding module is further configured to:

A warning message is added in advance to the pseudo-SU program, and after any application receives the pseudo-SU program, the warning message is output to warn the user to prohibit obtaining root authority.
The device for protecting the root privilege of claim 16, wherein the device for protecting the root privilege further comprises:

The reminding module is configured to add a reminder message to the pseudo-SU program in advance. After receiving the pseudo-SU program, the application may output the reminder message to remind the user that the root authority fails to be obtained.
The device for protecting the root privilege of claim 19, wherein the reminding module is further configured to:

A warning message is added in advance to the pseudo-SU program, and after any application receives the pseudo-SU program, the warning message is output to warn the user to prohibit obtaining root authority.