Android Tool SuHide - Hide Root From Android Apps

Rook · August 31, 2016

suhide is an experimental (and officially unsupported) mod for SuperSU that can selectively hide root (the su binary) from other applications.

Pros
- Hides root on a per-app base, no need to globally disable root
- Doesn't need Xposed
- Even supports SuperSU's ancient app compatibility mode (BINDSYSTEMXBIN)
- Passes SafetyNet attestation by default on stock ROMs (last officially tested on 2016.08.31)

Cons
- Ultimately a losing game (see the next few posts)
- No GUI

Requirements
- SuperSU v2.76 or newer
- SuperSU installed in systemless mode
- Android 6.0 or newer
- TWRP (very latest version, with access to /data !) or FlashFire

Xposed
I am waiting for Rovo's official systemless xposed release (isn't everyone?). The newer releases of the unofficial version are currently not compatible with SuperSU.

Usage

Install
Flash the attached suhide-vX.YY.zip, followed by SuperSU. Failing to (re-)flash SuperSU may result in bootloop. At first install it automatically blacklists all Android-internal and Google packages.

Uninstall
Flash the attached suhide-rm-vX.YY.zip, followed by SuperSU. Failing to (re-)flash SuperSU will result in bootloop.

Upgrading
To upgrade, follow the instructions for Uninstall, and then for Install. Skipping the Uninstall part will leave you anywhere from subtle issues to full system crashes. You will lose your custom uid list in this process.

Blacklisting an app
You need the UID (10000 to 99999, usually 10xxx) of the app, which can be tricky to find. There may be a GUI for this at some point.

The commands below need to be executed from a root shell.

If you know the package name, ls -nld /data/data/packagename will show the UID - usually the 3rd column.

Similarly, for running apps, ps -n | grep packagename will also show the UID - usually the 1st column.

When you know the UID:
Add to blacklist: /data/adb/suhide-add UID
Remove from blacklist: /data/adb/suhide-rm UID

All running processes for that UID need to be killed/restarted for su binary hiding. For SuperSU GUI hiding, the device needs to be restarted. I recommend just rebooting your device after making any changes.

Please keep in mind that many apps store their rooted state, so you may need to clear their data (and then reboot).

Integration into SuperSU
This mod isn't stable, and probably will never be (see the next few posts). As SuperSU does aim to be stable, I don't think they're a good match. But who knows, it all depends on how things progress on the detection side.

Detections
This mod hides the su binary pretty well, and does a basic job of hiding the SuperSU GUI. The hiding is never perfect, and suhide itself is not undetectable either - in fact, there is quite a bit of detection bait (as in, these are easily fixable on my end, so I hope detectors will fall for those rather than make detectors that are more difficult to solve for).

Download