Summary
Tracking issue for a documented, out-of-scope known limitation so researchers can find it.
redroid leaks a set of emulator tells that Beetroot cannot patch because they live below the container boundary:
/dev/socket/qemud, /dev/qemu_pipe, /sys/module/qemu_pipe- CPU feature-flag mismatches (
AT_HWCAP differences, missing AES-NI, etc.)
- Missing or obviously-simulated sensors (e.g.
SENSOR_TYPE_ACCELEROMETER returning perfectly flat data forever)
Disposition
These are redroid's responsibility, not Beetroot's — won't fix here. Documented as a "known emulator tells" limitation. Researchers who need hardware-grade stealth should use the adb device backend against a physical rooted phone.
Source: docs/design/stealth-posture.md §8 "Out of scope".
Summary
Tracking issue for a documented, out-of-scope known limitation so researchers can find it.
redroid leaks a set of emulator tells that Beetroot cannot patch because they live below the container boundary:
/dev/socket/qemud,/dev/qemu_pipe,/sys/module/qemu_pipeAT_HWCAPdifferences, missing AES-NI, etc.)SENSOR_TYPE_ACCELEROMETERreturning perfectly flat data forever)Disposition
These are redroid's responsibility, not Beetroot's — won't fix here. Documented as a "known emulator tells" limitation. Researchers who need hardware-grade stealth should use the adb device backend against a physical rooted phone.
Source:
docs/design/stealth-posture.md§8 "Out of scope".