Do not really understand how Android sandboxing works for system apps.

  • FarLine99@lemm.eeOP
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    2 years ago

    The problem is that GServices can’t work without these permissions, they crash. So the phone becomes mostly pointless.

    • TheAnonymouseJoker@lemmy.ml
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      2 years ago

      How does it crash? I neutered its permissions long before ProtonAOSP/GrapheneOS made “sandboxed play services” concept known to privacy community. SafetyNet apps work ideally for me, and the only data that Google can siphon off of me is the IP address and the CTS attestation keys for GMS certification verification purpose. Normally, GMS takes location, sensor data, storage/installed apps scanning and dozens of other metrics every 7 minutes.

      • FarLine99@lemm.eeOP
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 years ago

        sorry, what’s the way to do it? manually editing config files? or some app? App Manager from GitHub f.e. can’t do it.

        • TheAnonymouseJoker@lemmy.ml
          link
          fedilink
          arrow-up
          1
          ·
          2 years ago

          This can be done on any Android, regardless of root or bootloader unlock status, post Nougat 7.0 version. You use Shizuku from F-Droid (requires root or USB debugging via PC), and install from the same developer’s website AppOps. You can manipulate any and all permissions for both main and work profile apps. This is the AppOps core mechanism of AOSP that supersedes the permissions GUI that people normally use.

          There is a weaker option via ADB with AppOpsX, but I prefer the superior Shizuku method for additional work profile control.

          • FarLine99@lemm.eeOP
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 years ago

            Thank you so much. i tried it, all permissions were indeed revoked. checked on the camera app - it works. THANK YOU!!!

            • TheAnonymouseJoker@lemmy.ml
              link
              fedilink
              arrow-up
              1
              ·
              2 years ago

              A little bonus. What I want you to try is with AppOps, you remove the camera permission from your camera app, and then from the normal permission GUI (yes/no buttons), turn on camera permission. Turn on camera app. It will be funny.

              Of course, reverse it from AppOps again.

              A little note on the GMS part in previous comment – you need to keep internet on for Play Services and Google Services Framework packages, in order for Safetynet apps to work, if you use such apps.

              • FarLine99@lemm.eeOP
                link
                fedilink
                English
                arrow-up
                1
                ·
                2 years ago

                Nothing happened, permission resets itself and in AppOps, the camera just worked fine :)

                Yes. I didn’t disable the internet for services, SafetyNet goes through without a problem. Thank you for this information, it is invaluable to me. Now I will be able to use GApps again instead of microG without losing functionality and staying private ❤️

              • FarLine99@lemm.eeOP
                link
                fedilink
                English
                arrow-up
                1
                ·
                2 years ago

                But I’m wondering if gapps doesn’t make any changes to the system itself, maybe it creates new users to bypass broken permissions).

                • TheAnonymouseJoker@lemmy.ml
                  link
                  fedilink
                  arrow-up
                  1
                  ·
                  2 years ago

                  New users can be enlisted with the ADB command

                  adb shell pm list users

                  It has never been observed that Google is creating new users automatically without any kind of sophisticated user confirmations. There is only an “Admin” user for Find My Device, for example.

                  Privacy is not that hard until a point unless you are a serious activist or journalist, in which case things can become inconvenient. Android is very deterministic, its just that some people and devs in privacy community want to thrive from the unnecessary confusion and drama circus they create and fuel. I have documented the past 5 years of privacy community to mostly destroy that kind of nonsense, with a decent amount of success, and am doing that here too.