You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We've got a pentest report on our app classifying the RootBeer logs as a low vulnerability, and we'd like to fix it.
The logs:
I RootBeer: LOOKING FOR BINARY: /data/local/su Absent :(
I RootBeer: LOOKING FOR BINARY: /data/local/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /data/local/xbin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /sbin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /su/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/bin/.ext/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/bin/failsafe/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/sd/xbin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/usr/we-need-root/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/xbin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /cache/su Absent :(
I RootBeer: LOOKING FOR BINARY: /data/su Absent :(
I RootBeer: LOOKING FOR BINARY: /dev/su Absent :(
I RootBeer: LOOKING FOR BINARY: /product/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /apex/com.android.runtime/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /apex/com.android.art/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system_ext/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /odm/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /vendor/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /vendor/xbin/su Absent :disappointed:
It seems RootBeer added a few years back an option to disable the logs: scottyab/rootbeer#32, but jail-monkey doesn't seem to provide a way to enable this option.
Is there something I'm missing? Or would we need to extend jail-monkey options to disable all logging in production?
We're happy to contribute if needed!
The text was updated successfully, but these errors were encountered:
Hello,
We've got a pentest report on our app classifying the RootBeer logs as a low vulnerability, and we'd like to fix it.
The logs:
It seems RootBeer added a few years back an option to disable the logs: scottyab/rootbeer#32, but jail-monkey doesn't seem to provide a way to enable this option.
Is there something I'm missing? Or would we need to extend jail-monkey options to disable all logging in production?
We're happy to contribute if needed!
The text was updated successfully, but these errors were encountered: