APK detection about superuser

[lbdroid]

Applications shouldn't have access to sensitive at all. That is kind of the point of it, that it will only work for advanced users operating manually.

[lbdroid]

I'd be inclined to even restrict it to access through shell user and context exclusively, since I haven't been able to think of any way to enforce a manual password, except something crazy like an ASCII art captcha?

[phhusson]

I don't understand the problem with the user choosing a password himself?

You would want the users to have to select the app himself in the settings of Superuser to have the app get su_sensitive permission?

[phhusson]

Let's put this discussion in #4, and leave all discussions related to Policy.md in that #4 issue. (or it's time for a real mailing list...)