Do not really understand how Android sandboxing works for system apps.

  • TheAnonymouseJoker@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    2 years ago

    This can be done on any Android, regardless of root or bootloader unlock status, post Nougat 7.0 version. You use Shizuku from F-Droid (requires root or USB debugging via PC), and install from the same developer’s website AppOps. You can manipulate any and all permissions for both main and work profile apps. This is the AppOps core mechanism of AOSP that supersedes the permissions GUI that people normally use.

    There is a weaker option via ADB with AppOpsX, but I prefer the superior Shizuku method for additional work profile control.

    • FarLine99@lemm.eeOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      Thank you so much. i tried it, all permissions were indeed revoked. checked on the camera app - it works. THANK YOU!!!

      • TheAnonymouseJoker@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        2 years ago

        A little bonus. What I want you to try is with AppOps, you remove the camera permission from your camera app, and then from the normal permission GUI (yes/no buttons), turn on camera permission. Turn on camera app. It will be funny.

        Of course, reverse it from AppOps again.

        A little note on the GMS part in previous comment – you need to keep internet on for Play Services and Google Services Framework packages, in order for Safetynet apps to work, if you use such apps.

        • FarLine99@lemm.eeOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 years ago

          Nothing happened, permission resets itself and in AppOps, the camera just worked fine :)

          Yes. I didn’t disable the internet for services, SafetyNet goes through without a problem. Thank you for this information, it is invaluable to me. Now I will be able to use GApps again instead of microG without losing functionality and staying private ❤️

        • FarLine99@lemm.eeOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 years ago

          But I’m wondering if gapps doesn’t make any changes to the system itself, maybe it creates new users to bypass broken permissions).

          • TheAnonymouseJoker@lemmy.ml
            link
            fedilink
            arrow-up
            1
            ·
            2 years ago

            New users can be enlisted with the ADB command

            adb shell pm list users

            It has never been observed that Google is creating new users automatically without any kind of sophisticated user confirmations. There is only an “Admin” user for Find My Device, for example.

            Privacy is not that hard until a point unless you are a serious activist or journalist, in which case things can become inconvenient. Android is very deterministic, its just that some people and devs in privacy community want to thrive from the unnecessary confusion and drama circus they create and fuel. I have documented the past 5 years of privacy community to mostly destroy that kind of nonsense, with a decent amount of success, and am doing that here too.