Advanced permission management? - Honor 5C Questions & Answers

Hi! Is there any way to manage permissions in more advanced way in EMUI 4.1.2? For example I would like to grant access to read contacts and to deny to modify them instead of grant full access to contacts. Do I need to use 3rd party app to achieve that?

longer83 said:
Hi! Is there any way to manage permissions in more advanced way in EMUI 4.1.2? For example I would like to grant access to read contacts and to deny to modify them instead of grant full access to contacts. Do I need to use 3rd party app to achieve that?
Click to expand...
Click to collapse
I don't know if this is doable at all, but you definitely can't do that with EMUI alone. The best privacy manager I know is the Xprivacy module from the Xposed repository, but it doesn't allow such a thing.

Zarou said:
I don't know if this is doable at all, but you definitely can't do that with EMUI alone. The best privacy manager I know is the Xprivacy module from the Xposed repository, but it doesn't allow such a thing.
Click to expand...
Click to collapse
There has to be a way. I was able to manage permissions in advanced way on my previous phone with 5.1.1 on board...

This app can allow you to do more refined permission control and doesn't require root - you need to run an adb command to start it, but its changes remain even after the app is stopped.
https://play.google.com/store/apps/details?id=rikka.appops
It allows the refined control you want - read contacts but disallow modification of contacts.
Hope it helps! I've tried it on my Honor 8 and it works.

Related

[Q] setcpu unable to gain root access questions?

I have rooted my phone however when I install setCPU the application is unable to obtain root access. I have to tried to grant access to the application in the Superuser application however, the application does not seem to allow that option.
BTW, I have search both google and the forum to see if there was a fix for this before posting this message.
Any advise or direction would be greatly appreciated.
Thank you in advance
driodfreakz said:
I have rooted my phone however when I install setCPU the application is unable to obtain root access. I have to tried to grant access to the application in the Superuser application however, the application does not seem to allow that option.
BTW, I have search both google and the forum to see if there was a fix for this before posting this message.
Any advise or direction would be greatly appreciated.
Thank you in advance
Click to expand...
Click to collapse
Used to happen once in a while when I used to use SetCPU.
Try this:
1. In superuser, delete the entry for set cpu. (I would suggest reinstalling super user app.)
2. If u have any protection apps like protector pro, disable that.
3. Run the setcpu app. This should now prompt superuser dialog.
4. Grant access and make sure u have check box selected to grant access always.
Reinstalling super user app always resolved this issue for me.

[CUSTOM ROM][Xperia T][SECURITY] which custom ROM sends least data to google?

Hi guys,
i was wondering which custom ROM has limited or completely cancelled functionality of sending data to Google. Which custom ROM is "safest" and "most secure" in this area? if it is possible to use some application, which limits/prevents apps (or OS directly) to access sensitive data and send them "anywhere" in an uncontrolled way - please let me know. Thank you.
Kind regards,
tlsty
tlsty said:
Hi guys,
i was wondering which custom ROM has limited or completely cancelled functionality of sending data to Google. Which custom ROM is "safest" and "most secure" in this area? if it is possible to use some application, which limits/prevents apps (or OS directly) to access sensitive data and send them "anywhere" in an uncontrolled way - please let me know. Thank you.
Kind regards,
tlsty
Click to expand...
Click to collapse
Try using CM10 with Orbot app enabled (=TOR, network anonymizer), also use Xposed and the module XPrivacy.
It is hard to prevent Google from observing your device if the device os itself os made by Google. ^^
I think that's not a question in between the different ROM's. But of you ask this question, the general answer would be the older the "better".
Than higher the version no. of Google services and then more Google apps installed than more meta-date transfers.
The easiest solution is not installing Gapps, and disabling "let Google apps use this device's location any time it is on".
peter-k said:
I think that's not a question in between the different ROM's. But of you ask this question, the general answer would be the older the "better".
Than higher the version no. of Google services and then more Google apps installed than more meta-date transfers.
The easiest solution is not installing Gapps, and disabling "let Google apps use this device's location any time it is on".
Click to expand...
Click to collapse
Hi peter-k,
thx for suggestion. it makes sense i already disabled the location providing and anything what i know as IT guy, but i am considering to choose a custom rom (CMpreferably). do custom roms have google services running? is it possible to actually stop them / prevent them from starting on the boot?
thx
tlsty said:
Hi peter-k,
thx for suggestion. it makes sense i already disabled the location providing and anything what i know as IT guy, but i am considering to choose a custom rom (CMpreferably). do custom roms have google services running? is it possible to actually stop them / prevent them from starting on the boot?
thx
Click to expand...
Click to collapse
Even on stock ROM you can totally prevent any and all google services from running. You can try with Autostart Manager, System Tuner, and I think there even might be an Xposed module that does that too.
I for one disable/freeze some of the Google Services/apps, and only enable them when I need access to the Play Store; I use a script with Smanager, takes about 10 seconds and is a lot easier and practical than looking for and disabling receivers every time I flash a new ROM.
Antiga Prime said:
Even on stock ROM you can totally prevent any and all google services from running. You can try with Autostart Manager, System Tuner, and I think there even might be an Xposed module that does that too.
I for one disable/freeze some of the Google Services/apps, and only enable them when I need access to the Play Store; I use a script with Smanager, takes about 10 seconds and is a lot easier and practical than looking for and disabling receivers every time I flash a new ROM.
Click to expand...
Click to collapse
Hi Antiga Prime,
would you be so kind and explain to me step by spet how to apply the script? THX
tlsty said:
Hi Antiga Prime,
would you be so kind and explain to me step by spet how to apply the script? THX
Click to expand...
Click to collapse
1.- Install Smanager from the Play Store.
2.- Copy the attached files to your sdcard (skip to step 4), or
3.- Use Smanager to create two new scripts with the following code:
Filename 1: enableplaystore
Code:
#!/system/bin/sh
# enable play store
pm enable com.android.vending
pm enable com.google.android.gsf
pm enable com.google.android.location
pm enable com.google.android.gms
Filename 2: disableplaystore
Code:
#!/system/bin/sh
# disable play store
pm disable com.android.vending
pm disable com.google.android.gsf
pm disable com.google.android.location
pm disable com.google.android.gms
4.- Use Smanager to navigate to the location where you copied/saved the scripts, select one of the scripts and mark the "SU" box so that it runs with Superuser access, then press the "Save" button. Repeat for the second script.
To run the scripts you can either:
- Open SManager and press the Menu button, then press Scripts, then select the script you want to run and press the "Run" button
- Create widgets on your home screen that point to the script you want to run
- Install SMwidgets from the Play Store and create shortcuts to your scripts (which is more organized since you can put all your shortcuts in a folder).
Then, you can use the "disableplaystore" to disable the selected packages, and "enableplaystore" to enable it whenever you need access to the Google Services Framework/Location Services/Play Store, etc.
Just so you know, this will prevent apps that use Google's GCM service to deliver notifications to your phone, but I figured you already knew that since you want to disable everything from contacting Google.

MobileIron detects Magisk's systemless root

Has anyone been able to get Magisk to work with MobileIron (enterprise device admin app)? I'm on a Nexus 6p with Magisk 13 beta and it detected that my device was rooted and disabled the MobileIron app.
Note: my devices passes the SafetyNet checks just fine
Have you added the app to the Hide list?
More things an app might detect can be found here: https://forum.xda-developers.com/apps/magisk/magisk-magisk-hide-troubleshooting-tips-t3561828
Check under "Other things to try".
I did try hiding without luck. I wonder if MobileIron's Device Administrator status somehow bypasses that.
Try uninstall the magisk manager app, any sudo management apps, etc.
Then if that doesn't work, try uninstall some of the well known root apps like titanium backup etc.
thedeejay said:
Try uninstall the magisk manager app, any sudo management apps, etc.
Then if that doesn't work, try uninstall some of the well known root apps like titanium backup etc.
Click to expand...
Click to collapse
Yup, this is probably it. Out of curiosity i decompiled the apk, and it looks like mobileiron relies pretty strongly on package names, I didn't get the list (pulls from a server), but its probably looking for known root related apps.
Dont know how to solve that.
That mobileiron stuff looks terrible.
Nye-uhls said:
Yup, this is probably it. Out of curiosity i decompiled the apk, and it looks like mobileiron relies pretty strongly on package names, I didn't get the list (pulls from a server), but its probably looking for known root related apps.
Dont know how to solve that.
That mobileiron stuff looks terrible.
Click to expand...
Click to collapse
That's a very interesting way for it to be done.
If you are using an adblock, maybe check where it is polling from and block that IP through your hosts file.
Otherwise, you don't actually need the MagiskManager once everything is set up. If you uninstall, you still have root and MagiskHide working in the background, so maybe go for this and ensure that MobileIron is included in the MagiskHide list.
tried removing all suspicious apps (old SU apps, busybox, Magisk, etc) but still seems to see it
edit: nevermind, looks like Root File Explorer was the culprit
Please elaborate for the culprit,
Do you manage to run mobileiron with magisk?
cikenkari said:
Please elaborate for the culprit,
Do you manage to run mobileiron with magisk?
Click to expand...
Click to collapse
Well it stopped giving me the root error message, yes. However, the email app doesn't seem to work for me, but that may be a separate issue.
elenaran said:
Well it stopped giving me the root error message, yes. However, the email app doesn't seem to work for me, but that may be a separate issue.
Click to expand...
Click to collapse
Try to reinstall the app. I've Magisk V13 beta on Android 7.1. Secure Mail app (another type of enterprise email app) works fine. One time, it stopped working. I had to reinstall it to make it work again.
zrzhu said:
Try to reinstall the app. I've Magisk V13 beta on Android 7.1. Secure Mail app (another type of enterprise email app) works fine. One time, it stopped working. I had to reinstall it to make it work again.
Click to expand...
Click to collapse
Well the problem is the email app doesn't seem to accept my user/pass. I've tried uninstalling/reinstalling.
elenaran said:
Well the problem is the email app doesn't seem to accept my user/pass. I've tried uninstalling/reinstalling.
Click to expand...
Click to collapse
Try previous versions?
elenaran said:
Well the problem is the email app doesn't seem to accept my user/pass. I've tried uninstalling/reinstalling.
Click to expand...
Click to collapse
I had the same issue (firm is shifting all their Android users onto [email protected]). Spent untold hours with support and finally they realized there was a problem with my account ActiveSync at their end. The Mail+ app wasn't supposed to be asking for password at all.
Once they flipped the switch on that, everything worked.
at the moment i have the some problem with that root detection.. i don't know how to solve :-/ in the pasted it worked with magisk-hide.. but now :'-(
months later.. anykind of solutions?
When the company I worked at moved to MobileIron, I refused to put it on my device. They bought me (and paid service for) an iPhone for work and installed it on that.
If they require your off-hours attention, but don't consider you valuable enough for that investment, you may want to consider moving to a company that considers you less expendable.
it is not really a solution if you are independently, but thanks for you reply
I have been trying to achieve this as well, removed all root apps but still got an email saying that my device is rooted
Unfortunately, this is still an issue with the latest beta (16.6).
Any update here? I am experiencing the same issue

Convert user app to system app without root (Or with root but then unroot)

Hello guys! I've been an android user since 2011. I have experience in rooting and unrooting some of my devices but with this phone, P10, I don't want to have root for personal reasons.
There are some personal apps that I need to convert as a system app though.
So does anybody know how to convert a user app to a system app without root? Or root -> convert apps to system app -> unroot.
Most of the guides here about unrooting seems to be flashing to stock.
I have also seen (through searching) threads about moving user apps to system apps and those actually don't answer my question.
If anyone could help me, I would be very grateful!
Thanks!
You could convert most applications to system using Titanium Backup with ease, you will need root, there is no way to write to system without it. You could unroot after it, and uninstall TiB, still, I don't get why you would want to do that, but it's doable.
Floodland said:
You could convert most applications to system using Titanium Backup with ease, you will need root, there is no way to write to system without it. You could unroot after it, and uninstall TiB, still, I don't get why you would want to do that, but it's doable.
Click to expand...
Click to collapse
I'd like some apps to be installed as a system app but I don't want root as some bank apps don't play well with them.
So which method of root should I use so that I can unroot and still have my apps as a system app?
Magisk released version 16 specifically to support Huawei devices and our issues. You can pass safety net with it and hide su to damaged applications with it.
On the other hand, not sure if I would trust an Bank which puts the security on the client side as prerequisite to operate.
Do Banks require to their Windows clients not to have administrator user? No, right? (in fact, Windows OS needs a local admin account to operate). As clients we should request equal treatment. Administrator in Windows is as dangerous as root in Linux, so Banks should be honest and stop bothering clients, instead of us having to hide from them...

Question How to backup app data no root

Tried helium but gives error
Any other apps or better way?
speedspeedspeed said:
Tried helium but gives error
Any other apps or better way?
Click to expand...
Click to collapse
No, you need root. No other app has more permissions than you as normal user.
But if helium can do it by debugging mode its posible no root
Must be other apps capable then no?
speedspeedspeed said:
But if helium can do it by debugging mode its posible no root
Must be other apps capable then no?
Click to expand...
Click to collapse
Debugging mode is not the same as root permissions on your device. With debugging mode you are logged in (shell) as user_shell and with root you are user_root. The user_shell doesn't have the permissions to read the app specific directories in /data/data/PACKAGES to do a backup of all your apps. Only user_root, user_system and apps themselves (only for own directory, but others not) can access these directories r/w and read all the data within.
Exception: An ADB backup is able to backup app data of those apps, that are included in the Google Backup ('device settings > System > Backup' or open settings > searchbar > 'backup').
For a detailed overview visit: drive.google.com/drive/backups
with root my bank apps stop working right?
speedspeedspeed said:
with root my bank apps stop working right?
Click to expand...
Click to collapse
You can use DenyList within Magisk so they will keep working.
Can anybody who is rooted see if after install can register an account and it keeps working
McDonald's - Apps on Google Play
Download the McDonald’s App to have all the offers in the palm of your hand!
play.google.com

Categories

Resources