Payback app detects root

[meiser79]

Please check before submitting an issue

• [X] I have searched the issues and haven't found anything relevant
• [X] I will upload bugreport file in KernelSU Manager - Settings - Report log
• [X] I know how to reproduce the issue which may not be specific to my device

Describe the bug

The Payback app version 24.01.1800 detects root and just a message about an insecure environment.

May I ask you to have a look how it does the detection? Uninstalling the manager app or clearing app data/cache do not solve the issue.

Thanks a lot, meiser

To Reproduce

1. Install the app
2. See the message about insecure environment

Expected behavior

No response

Screenshots

No response

Logs

No response

Device info

• Device: Poco F3
• OS Version: crDroid 9.13
• KernelSU Version: 0.7.6 (11461), manager app 0.7.6 (11458)
• Kernel Version: 4.19.305, InfiniR alioth with modules umount patch by wx1221

Additional context

No response

[tiann]

Uninstall all modules and try again.

[meiser79]

Still the same. I disabled the modules instead of uninstalling, but this should be the same, right?

[pckotzer]

Did yout tried it without kernelSU? It may be a Rom problem. Try with stock boot.img

[meiser79]

It's not custom ROM related as it works with previous Payback version 23.11.1403. Just the update to version 24.01.1800 triggers the root detection.

[pckotzer]

Did you tryed stock kernel. If you compile kernel by yourself try without localversion in defconfig. Google ban now various kernel names including crdroid in kernel name or other popular kernel names like lineageos or whatever is used. What does your localversion or kernel name show?

[meiser79]

Sorry, but your comments are not helpful. If you read my bug report carefully, you would see the link to the used kernel tree. There, you could have checked that the LOCALVERSION is "~InfiniR_Alioth_v2.87". BTW, I do pass Google PI with device integrity. I assume, the Payback app does not use PI for root detection, but something different.

[meiser79]

Am I right that any app can find KernelSU by just checking "mount". There are KSU mount names. Any chance to rename these ones?

[pckotzer]

Try do do backup of data and then do clean install without a kernelsu kernel to be 100% sure

[meiser79]

If I fully remove kernelsu, the app works fine.

[pckotzer]

Another kernel?

[meiser79]

What do you mean? I recompiled the kernel tree without kernelsu. With this kernel, the app starts fine.

[meiser79]

@tiann even if I uninstall all modules by renaming the modules.img, the app detects root. So it's not the mountpoint, right?

[pckotzer]

Perfect, thats what i wanted to hear xd

[goldwoods2005]

Same as the bank app Vietbank https://play.google.com/store/apps/details?id=com.vnpay.vietbank

Ksu with no module install, lastest version of the app find root Change the kernel without ksu, app start normally Still not find a way to bypass this app

[ToucH9000]

Same as the bank app Vietbank https://play.google.com/store/apps/details?id=com.vnpay.vietbank

Ksu with no module install, lastest version of the app find root Change the kernel without ksu, app start normally Still not find a way to bypass this app

same here

[meiser79]

Thanks so much! I really appreciate your work! I verified that it works with this commit.

[Niemandausduisburg]

@meiser79 How you get latest Payback working? I picked this commit and it doesn't work for me. Only downgrade Payback seems to be help.

[meiser79]

@Niemandausduisburg You have to either freeze the manager app with e.g. Ice Box or deinstall it.

[Niemandausduisburg]

@meiser79 Don't work for me

[meiser79]

You might be right, I just got a broken Payback app again. It seems that KernelSU_v0.7.6-55-g20c19d7_11513-release.apk broke it again, but KernelSU_v0.7.6-51-gabf0dac_11509-release.apk works fine.

Which version do you run exactly (kernel and app)?

[Niemandausduisburg]

@meiser79

[Niemandausduisburg]

@meiser79 The issue isn't KernelSU. Payback is looking if you have unlocked your bootloader (custom ROM).

[sd535682]

@meiser79 The issue isn't KernelSU. Payback is looking if you have unlocked your bootloader (custom ROM).

I guess no. I was using the def KSU kernel on my device. After flashing any module the Yono app crashes. If there was an issue with unlocked BL it would have been detected earlier.

[sd535682]

You might be right, I just got a broken Payback app again. It seems that KernelSU_v0.7.6-55-g20c19d7_11513-release.apk broke it again, but KernelSU_v0.7.6-51-gabf0dac_11509-release.apk works fine.

Which version do you run exactly (kernel and app)?

have you tried Shamiko?

[hummermann87]

You might be right, I just got a broken Payback app again. It seems that KernelSU_v0.7.6-55-g20c19d7_11513-release.apk broke it again, but KernelSU_v0.7.6-51-gabf0dac_11509-release.apk works fine. Which version do you run exactly (kernel and app)?

have you tried Shamiko?

Shamiko user here, doesn't work on LineageOS 20. :(

[hummermann87]

You might be right, I just got a broken Payback app again. It seems that KernelSU_v0.7.6-55-g20c19d7_11513-release.apk broke it again, but KernelSU_v0.7.6-51-gabf0dac_11509-release.apk works fine. Which version do you run exactly (kernel and app)?

have you tried Shamiko?

Shamiko user here, doesn't work on LineageOS 20. :(

It finally works! I have used the module posted here: https://github.com/Magisk-Modules-Alt-Repo/ezme-nodebug/issues/1

[meiser79]

Latest Payback app (version 24.04.2501) detects root running KernelSU version 11848.

Payback app version 24.04.1101 is the latest working version.

[Niemandausduisburg]

Latest Payback app (version 24.04.2501) detects root running KernelSU version 11848.

Payback app version 24.04.1101 is the latest working version.

I have the same issue. Payback was working fine before update playcurl

[meiser79]

Got it working by using a different app to freeze/hide the manager app.

[Niemandausduisburg]

Got it working by using a different app to freeze/hide the manager app.

Which app do you use to hide/freeze the manager? I tried Icebox without any luck