Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable RootBeer logs in production #117

Open
t-mdo opened this issue Feb 22, 2022 · 0 comments
Open

Disable RootBeer logs in production #117

t-mdo opened this issue Feb 22, 2022 · 0 comments

Comments

@t-mdo
Copy link

t-mdo commented Feb 22, 2022

Hello,

We've got a pentest report on our app classifying the RootBeer logs as a low vulnerability, and we'd like to fix it.

The logs:

I RootBeer: LOOKING FOR BINARY: /data/local/su Absent :(
I RootBeer: LOOKING FOR BINARY: /data/local/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /data/local/xbin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /sbin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /su/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/bin/.ext/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/bin/failsafe/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/sd/xbin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/usr/we-need-root/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system/xbin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /cache/su Absent :(
I RootBeer: LOOKING FOR BINARY: /data/su Absent :(
I RootBeer: LOOKING FOR BINARY: /dev/su Absent :(
I RootBeer: LOOKING FOR BINARY: /product/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /apex/com.android.runtime/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /apex/com.android.art/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /system_ext/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /odm/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /vendor/bin/su Absent :(
I RootBeer: LOOKING FOR BINARY: /vendor/xbin/su Absent :disappointed:

It seems RootBeer added a few years back an option to disable the logs: scottyab/rootbeer#32, but jail-monkey doesn't seem to provide a way to enable this option.
Is there something I'm missing? Or would we need to extend jail-monkey options to disable all logging in production?

We're happy to contribute if needed!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant