修改$AOSP/bionic/libc/bionic/fork.c，讓程序fork失敗即可，修改的代碼如下:

#include <unistd.h>
#include <stdlib.h>
#include <fcntl.h>
#include "pthread_internal.h"
#include "bionic_pthread.h"
#include "cpuacct.h"

extern int  __fork(void);

#define BUF_LEN 512

int block()
{
    char buf[BUF_LEN] = {0};
    char cmd[128] = {0};
    sprintf(cmd , "/proc/%d/cmdline" , getpid());
    int fd = open(cmd , O_RDONLY);
    read(fd , buf , BUF_LEN);
    close(fd);
    char targetPath[BUF_LEN] = {0};
    sprintf(targetPath , "/data/data/%s" , buf);
    if (access(targetPath , F_OK) == 0)
    {
         return 1;
    }
    return 0;
}

int  fork(void)
{
    int  ret;
    if (block())
    {
        return -1;
    }
//......
}

雖然這種小技巧很容易在以后的加固版本會(huì)被針對(duì)，但是至少目前是有效的