DroidForums.net is the original Verizon Android Forum! Registered Users do not see these ads. Please Register - It's Free!
Results 1 to 5 of 5

Thread: Android SECURITY - Selectively control App's permissions?

  1. Senior Droid
    samsonite801's Avatar
    Member #
    76700
    Join Date
    Jun 2010
    Posts
    150
    Phone
    M Droid
    #1

    Android SECURITY - Selectively control App's permissions?

    Is there some way to selectively control an application's permissions? Since the app's apk is signed it doesn't look like I could edit its AndroidManifest.xml file. If there was some way to edit an app's permissions from the Android side of the system, or even just a selective firewall so I can control which apps can send out SMS, or access the internet connection (WiFi or 3G). I just see too many apps on the market that look interesting, but since they have no business at all reading my contact info, or having full internet access, I just cannot install them. But if I could just figure out how to turn off a permission manually for specific apps, then I could just make it so none of them can even connect to the internet in the first place, so that it would be a true sandbox with no HOLES in it. Because what good is a sandbox that has a hole going to your personal info, and a hole going to your contacts list, and a hole going to the WWW, etc. Why would they ever need root access to your stupid phone when they could just get all your private data and sell it for enough money to buy 1000 of your phones.

    I also don't like the nature of how an app can just have generic access to reading/writing to your entire SD card. This way, one app with access to your personal info (but does not have full internet access) can write personal data to a cache file in your SD card, and then they can have another app with the same certificate or have a group permission in their AndroidManifest.xml so their company (using a different company name in the market), could use that unsuspecting app to read that same cache file (which has full internet access) and can send that data out the pipe to their server. Each app should be a granted a sandbox space on the SD card that only that app can R/W to.

    Heck they could even upload all of your Nandroid backups to their server if they wanted which have all your data in them. All from some music app say, that has full internet access and has full R/W access to your SD Card.

    I just wanna turn off full internet access to several apps which I regularly use.

    Could anybody here who knows this, please, pretty please, point me in the right direction?
    .
    If you use ADW or LauncherPro and if after using your browser, email or any other apps for awhile, then if you press the 'HOME' button, if it takes forever to redraw your home screen, and you are sick of that HORRIBLE LAG, then try this: In a terminal, type su and enter. Then type echo ro.HOME_APP_ADJ=1 >> /data/local.prop and enter. Then reboot. Now evaluate whether or not this fixes your lag. If you want to undo what this command does, simply remove that toggle from: /data/local.prop
    .
  2.  
     
     
     
  3. Droid Ninja
    aminaked's Avatar
    Member #
    25714
    Join Date
    Jan 2010
    Location
    California, USA
    Posts
    2,187
    Liked
    1 times
    Phone
    Droid
    #2
    I don't have your answer but I like your idea.
  4. Senior Droid
    samsonite801's Avatar
    Member #
    76700
    Join Date
    Jun 2010
    Posts
    150
    Phone
    M Droid
    #3
    Found the answer! ( code.google.com/p/droidwall/ )

    Droid Wall + IPtables = selective control over which apps can use WiFi or 3g.

    Droid Wall has now just been released into the market but it won't work without root access, and it also needs iptables v1.4.7 installed or it will have errors. If you download this zip file:

    http://i2x.de/~oclock/Eight-Minutes-...-AM-signed.zip


    ...and extract the /system/bin/iptables bin from it and copy it to your /system/bin folder then you will have the v1.4.7 version (just for kicks, back up your old iptables binary just in case).

    Then, install Droid Wall. Now, for me, in order for it to work, I had to toggle the setting from checking box 'whitelists' app, to instead be set to checking box 'blacklists' the app. This was the only way that the firewall would actually block the apps from being able to connect, but low and behold, it does work. It is a full fledged, turn-key firewall solution.

    And the good news is that the battery lasts longer when you block most all apps you don't use or have no business needing internet anyway, and I also notice the phone seems like it is not as 'busy' under the covers or after waking up now. It also seems like the internet for the other things you use now is faster since other apps can't hog up all the pipe anymore.
    .
    .
    Last edited by samsonite801; 09-01-2010 at 01:19 PM.
    .
    If you use ADW or LauncherPro and if after using your browser, email or any other apps for awhile, then if you press the 'HOME' button, if it takes forever to redraw your home screen, and you are sick of that HORRIBLE LAG, then try this: In a terminal, type su and enter. Then type echo ro.HOME_APP_ADJ=1 >> /data/local.prop and enter. Then reboot. Now evaluate whether or not this fixes your lag. If you want to undo what this command does, simply remove that toggle from: /data/local.prop
    .
  5. Junior Droid
    dandv's Avatar
    Member #
    27488
    Join Date
    Jan 2010
    Location
    Silicon Valley, CA
    Posts
    9
    Phone
    Nexus One
    #4

    Question Droidwall

    DroidWall is great, but it's only a partial answer.

    Some apps genuinely need Internet access, but not address book access; or you don't need the social networking features that require access to contacts. So you want to allow the app Internet access, but not Contact or Messages access.

    We still need a solution to this: how to deny an app access to contacts or messages or calendar etc.
  6. Junior Droid
    dandv's Avatar
    Member #
    27488
    Join Date
    Jan 2010
    Location
    Silicon Valley, CA
    Posts
    9
    Phone
    Nexus One
    #5
    There are several Google Code issues that try to resolve this problem. Users beg for permissions to be grantable selectively:

    Issue 6266 - the most voted on, but has an idiotic title
    Issue 6600 - well described, but only 3 comments
    Issue 3778 - the original issue, which developers deemed "Won't Fix"

Links

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Similar Threads

  1. Android, Security, Google, Vigilance!
    By Bateluer in forum Android General Discussions
    Replies: 28
    Last Post: 08-13-2010, 10:40 AM
  2. Replies: 8
    Last Post: 06-16-2010, 06:56 PM
  3. Android Security Alarm Pro
    By appomaticsoftware in forum App Announcements
    Replies: 0
    Last Post: 04-05-2010, 12:29 AM
  4. Android Security Solutions
    By paulglen in forum Android General Discussions
    Replies: 0
    Last Post: 03-08-2010, 12:36 AM
  5. Can we control an apps permissions?
    By searayman in forum Android Applications
    Replies: 2
    Last Post: 02-14-2010, 05:25 PM

Search tags for this page

android block access to contacts
,

android change app permissions

,
android permission modifier
,
android permission remove
,

block permissions android

,

change android app permissions

,

how to change app permissions android

,
how to change app permissions on android
,
how to change permissions on android apps
,
restrict app permissions android
Click on a term to search our site for related topics.
Find us on Google+