root alternative workaround for FireOS devices by using SYSTEM USER

[RinseRepeat]

Please check before submitting an issue

• [x] I am using the latest version of App Manager
• [x] I have searched the issues and haven't found anything relevant
• [x] I have read the docs

Describe a description of the new feature

Not sure how difficult this would be to add but considering there are probably a million Amazon Fire device users out there it might be handy for many

They found an alternative to pseudo-root by using SYSTEM USER

You can see it used in "Launcher Manager" and "LM Toolbox"

https://xdaforums.com/t/system-user-fire-cube-stick-tv-tablet-ps7704-fireos7-rs8149-fireos8.4759215/

Describe the solution you'd like

No response

Describe alternatives you've considered

No response

Additional context

No response

[MuntashirAkon]

This is very straight forward. In ADB shell, you can run the following command to go to the system shell:

settings put global hidden_api_blacklist_exemptions "LClass1;->method1(
10
--runtime-args
--setuid=1000
--setgid=1000
--runtime-flags=2049
--mount-external-full
--setgroups=3003
--nice-name=runnetcat
--seinfo=platform:targetSdkVersion=28:complete
--invoke-with
toybox nc -s 127.0.0.1 -p 4321 -L /system/bin/sh -l;
"
settings delete global hidden_api_blacklist_exemptions
sleep 2
toybox nc localhost 4321

Now, run the starter command that you copied from App Manager > Settings > Mode of Ops, and relaunch App Manager. It should show "System" as the mode of operation.

[kirt717n-cyber]

Does this work on other devices? I have no root so this would be very helpful.