Magisk

rl9nb13i

Hello,

Just installed GrapheneOS and everything is nearly perfect, my only problem is that, one app i need (Smart-ID) does not function properly, because my phone has root "enabled"

Is there a way to hide root access from the app or any other work around?

I've found that Magisk has this feature to hide that phone has been rooted, but i've installed and have no access to Superuser/Modules or Zygisk, not sure how to install it properly, help would be appreciated on how to solve this, or any other workaround to fix my problem.

I've also read that installing Magisk is not recommended for GrapheneOS due to possible security flaws. So what would be my options? If nothing can be done, i guess i could change authentication method for my bank, but preferably i'd like to solve the problem.

Thank you.

other8026

rl9nb13i Rooting isn't secure. After rooting, you no longer have genuine GrapheneOS running on your phone.

We can't really help you hide the fact that your phone has been rooted. Depending on how the app is checking, it might not be possible. The best advice anyone here can give you is to run GrapheneOS without any modifications.

edit: Did I misread this? Did you root your phone, or is this a generic error you're seeing but your phone isn't rooted?

edit 2: yes I misread it

rl9nb13i

other8026 Nope, phone is not rooted, stock GrapheneOS. The app itself for some reason thinks it's been rooted though.

p338k

GrapheneOS does not have "root enabled." I suspect that Smart-ID reports "root enabled" as a generic error.

other8026

rl9nb13i Sorry! I guess I did misread.

Considering what the app's intended use, I wouldn't be surprised if they're checking the device's "integrity" using Play Integrity, which won't pass since GrapheneOS isn't a Google Certified OS. Some apps just show generic errors (like in this case) saying something about rooting, or some other nonsense.

You can try contacting the developers to see if they can help (you can even share this link with them on how to add GrapheneOS using hardware attestation). GrapheneOS is more secure than even the stock OS, so it's kind of ironic that so many apps refuse to work on GrapheneOS.

rl9nb13i

Update for anyone reading this in the future: went into a bank's branch office to set up smart-id there, setup went as i expected, no errors and app works as it should. A win!