[QUESTION] c'est quoi mksh ?

Chainfire d XDA a écrit:

As lots of people seem to be around looking for the answer, the current situation on the mksh "ip route add" is as follows:

- mksh is just the name of the default command shell on Android devices, nothing special there

- the "ip route add" command comes from libChange.so in HTC Sense ROMs (thanks to chrisch1974 for finding it), which itself is already running as a system component

- the command itself is not malicious, but there's no clear reason why HTC Sense should run this command. Sense does not need to call "su" to perform this command. Suggestions have been some form of tracking done by HTC (knowing HTC, this would not surprise me at all), or maybe something that has simply been left over during development really does nothing. At this time, nobody but HTC knows for sure. I do not personally currently own any recent affected HTC devices, as such it is not something I will further deeply investigate

- the reason it shows up in SuperSU v0.97 and does not show up in older versions is because v0.97 no longer automatically grants root to the shell and system processes. This command is run as system. Normally, only code provided by the OEM, or from an app that has already previously been granted root access can run as system. However, I have been informed of exploits that can allow a malicious program to gain system (not root) user access, and as such the system user is no longer safe, and must be specifically granted permission

- my advise would be to set it to deny (without asking again next time) until we know more