busybox Permission denied

[mikebgrep]

Hi, I am getting this error when i try to run run scanner.misc.writablefiles com.android.providers.calendar.
Is for any application.

Discovered world-writable files in com.android.providers.calendar:
  sh: /data/data/com.withsecure.dz/bin/busybox: Permission denied

Environment:
Ubuntu with Docker instance
Android 14 rooted emulator

[Yogehi]

Can you provide:

• The exact commands you use, including output
• The exact emulator configuration you're using (like what image are you using and what hypervisor are you using)

[mikebgrep]

Hi, this is the exact command and emulator. Actually the command does not work on any emulator i have x86_64 or this I am attaching.

dz> run scanner.misc.writablefiles com.app.mobile
Discovered world-writable files in com.app.mobile:
  sh: /data/data/com.withsecure.dz/bin/busybox: Permission denied

[mikebgrep]

More info:
I am running drozer in docker container. I see that there needs to be given root permission to drozer which I don't give, maybe this is the reason for Permission issue with busybox. Any hint how to give root permission to drozer from the docker as when i type:

$ dz > shell
$ su &
# This give permissions but how to return back to dozer console from this stage.

[cyberMilosz]

Hey,

Yeah, it looks like running busybox/toybox the way we currently are is a no-go due to an Android change that got snuck in in Android 10 and above. See https://issuetracker.google.com/issues/128554619?pli=1

The scanner.misc.writablefiles module had some changes made to it which might help here (as long as your Android device/VM has find installed, which most of them should, busybox/toybox shouldn't really be required). These haven't yet made it to a proper console release, but you could give it a go and see how it works out for you. I expect that an SDK 35 AVD will have find natively available, so this should Just Work™️

As far as I can tell, the actions here should be:

1. Prefer the native find library whenever possible - this should cover most use cases. [Already done, pending next release]
2. Consider moving toybox to the drozer-agent's native libs directory and run it from there if/when needed