react-native-device-defense 1.0.8 → 1.0.9

package/android/src/main/cpp/device-security.cpp

@@ -485,15 +485,9 @@ static bool performRootDetection() {
         return true;
     }
 
-    // Check system properties
-    if (checkSystemProperties()) {
-        return true;
-    }
-
-    // Check mount points
-    if (checkMountPoints()) {
-        return true;
-    }
+    // Check system properties and mount points are skipped here as they
+    // frequently cause false positives on unrooted userdebug/developer devices
+    // (e.g., when USB debugging is enabled).
 
     return false;
 }

package/android/src/main/java/com/devicedefense/RootDetection.kt

@@ -28,7 +28,15 @@ class RootDetection(private val context: Context) {
      */
     fun performDetection(): RootDetectionResult {
         val rootBeer = RootBeer(context)
-        val hasRootBeerDetected = rootBeer.isRooted
+        // Only use reliable RootBeer checks to avoid false positives (like checkForDangerousProps or checkForRWPaths)
+        val hasRootBeerDetected = rootBeer.detectRootManagementApps() || 
+                                  rootBeer.detectPotentiallyDangerousApps() || 
+                                  rootBeer.checkForSuBinary() || 
+                                  rootBeer.checkForBusyBoxBinary() || 
+                                  rootBeer.detectTestKeys() || 
+                                  rootBeer.checkSuExists() || 
+                                  rootBeer.checkForRootNative() || 
+                                  rootBeer.checkForMagiskBinary()
 
         // Native detection (JNI)
         val hasNativeRootDetected = NativeSecurityCheck.isRooted()
@@ -39,7 +47,7 @@ class RootDetection(private val context: Context) {
         // Check for root management apps
         val hasRootApps = checkRootApps()
 
-        // Check system properties
+        // Check system properties (keep for details, but don't use for blocking)
         val hasSystemPropsModified = checkSystemProperties()
 
         val details = mapOf(
@@ -54,11 +62,11 @@ class RootDetection(private val context: Context) {
             "dangerous_props" to checkDangerousSystemProperties()
         )
 
+        // Exclude system properties from the final isRooted flag to avoid false positives on userdebug/developer devices
         val isRooted = hasRootBeerDetected ||
                 hasNativeRootDetected ||
                 hasDangerousBins ||
-                hasRootApps ||
-                hasSystemPropsModified
+                hasRootApps
 
         return RootDetectionResult(
             isRooted = isRooted,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-device-defense",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "Multi-layer device security detection for React Native (root, hook, debugger, emulator detection)",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",