VR-25 / djs

Daily Job Scheduler
https://github.com/Magisk-Modules-Repo/djs
GNU General Public License v3.0
82 stars 12 forks source link

Update Magisk Modules Repo version (still on 2019.7.1, which is very insecure) #7

Closed mogzol closed 3 years ago

mogzol commented 4 years ago

The version of DJS available through Magisk is still 2019.7.1 which is outdated and has a major security issue. That version stores the config file in /sdcard, which essentially gives any app on the device with storage access full root permissions (since they can modify the djs config file to add whatever commands they want, which will be run as root). This is fixed in 2019.10.18, which moves the config file to /data/adb/djs-data/, and also adds a variety of other improvements.

Please either update the version of DJS available through Magisk to the latest version, or remove it from the Magisk Repo entirely and make it only available here.