corona-warn-app/cwa-app-android

Does a failing RootBeer check prevent users from warning others using the SRS feature?

Ein-Tim opened this issue · 6 comments

Ein-Tim commented

Avoid duplicates

  • Question is not already answered in the FAQ
  • Question is specific for Android only, for general issues / questions that apply to iOS and Android please raise them in the documentation repository
  • Question has not already been asked in another issue

Your Question

The app perfroms RootBeer checks to detect if the device is rooted. If the RootBeer check fails, will this disable the ability to use others using the new SRS feature of version 3.0? Or will the SafetyNet attestation also fail in all cases where the RootBeer check fails?

thomasaugsten commented

The SafetyNet attestation is very similar to the RootBeer checks.
But only the SafetyNet attestation is used to ensure the rate limit for SRS submissions.

Ein-Tim commented

@thomasaugsten Thanks for the fest answer, however, I'm not sure, I fully understand. Let's get concrete:
If I root my device, which leads to a failing RootBeer check, will I be able to warn others using the SRS feature (because SafetyNet attestation succeeds) or will this not be possible (because attestation fails)?

thomasaugsten commented

SafetyNet will also check for root access and the attestation will fail

  • 👍1
Ein-Tim commented

Thanks, answered!

MikeMcC399 commented

@Ein-Tim

This case should probably also be added to the description on
https://www.coronawarn.app/en/faq/results/#rooted_devices "[Google/Android]: Can I use the app on a rooted device?"

Maybe you would like to propose a PR for this, since you initiated this topic?

  • 👍1
Ein-Tim commented

@MikeMcC399 I'll take care of that later today!

  • 👍1