(Need to Know) Android apps "Full Access" ? - General Questions and Answers

I want to know about android apps Full access permission?
What should I beware of?
I heard that some access are considerally danger which will record down your internet banking details (When you use Internet Browsers) & SMS.
Please kindly describe about "Full access permission"
Thanks alot!

Every app you want to install has its own permissions shown in very detailed form before installation. Never heard of full access permission- but is sounds very unlikely that an app will require this kind of approval, so avoid installing it.
If you still want to get risky, and you got android 4.3 and above. I suggest downloading 'App ops' from the market, which will let you control apps permission using google's privacy feature.
Sent from my GT-I9300 using Tapatalk

Related

[JB][ICS][GB][CM10/10.1]LBE privacy Master V4 - : How Safe Is Your Private Data?

Guys,
Android has an excellent array of security apps to protect you against threats of malware and viruses. But in my opinion, privacy issues are a far greater concern. Thanks for the user zagzag99 who translated it in English from Google Translator.
What permissions and elements of my phone are newly installed apps using? How safe is the private data I store on my phone? This was a gap in my knowledge that I wanted to fill – and LBE Privacy is a great tool for this job.
The app protects my privacy, and safeguards services that could cost me money if the wrong apps gained control of them. It does all this with a beautiful and intuitive interface.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
LBE Privacy has a well-designed interface with a simple colour scheme of white and blue. At the forefront of the design is a welcoming main screen displaying the Internet, Privacy, Money, Applications and Settings options.
This great design found through the app makes using it easier and more intuitive – but more than that, it helped me, psychologically, to trust it; the fact they’ve thought out the design makes me feel more comfortable with the app, and lets me assume that the code behind the scenes is also well-designed.
LBE Privacy Guard’s/master privacy offerings were the main draw for me; while the ROM I run (Cyanogenmod) already allows me to decide what permissions to grant apps, it’s nowhere near as powerful or easy to use as LBE Privacy Guard/Master.
This app lets you restrict access to SMS, Contacts, Call Logs, Positioning, and your Phone ID. By default, when an app on your phone attempts to use one of the previously mentioned permissions on your phone LBE Privacy Guard/Master will ask you whether to allow it or not.
For those of you interested, there is also an events log showing the history of requests by all the apps on your phone.
Money​
This function of LBE Privacy Guard/Master protects your pocket! It blocks apps from accessing permissions that could cost you money: SMS and the ability to make phone calls. This section also appears in the aforementioned event log.
By default, all non-system apps are set to prompt you when requesting access to such features. Although this wasn’t a feature I was looking out for, I feel now that its quite an important one and something I should have wanted much earlier.
Application Monitoring​
The section allows you to browse each app on your phone and change the permissions each app has access to. I’ll run through the options for Angry Birds which you can see in the screenshot. The first option, Trust. allows you to automatically allow the app access to everything: SMS, Contacts, Call Logs, Positioning and your Phone ID. It’s also possible to adjust access to these items separately; for instance, to help ensure I don’t go over my download limit I’ve denied a lot of apps access to my Data.
Internet:​
The Internet section of LBE Privacy Guard isn’t really related to privacy, apart from giving you the ability to restrict certain apps from accessing the net. You’ll see a graph showing how much data you’ve used from your plan, as well as your Wi-Fi usage. Once you set a limit for your data plan, LBE Privacy Guard will alert you if you cross 90% of your allocated amount.
The options included are pretty useful: you’re able to set the billing day for the month so the app keeps prefect track of the amount of data you have left on your plan for the billing month, not the actual month! For those of you just installing the app now, there’s also the option to adjust monthly data usage so LBE Privacy Guard is on track from day one.
Settings Available​
The settings area allows you to toggle the different features I’ve already gone through. It’s also possible to turn off notifications – though I find this pretty useful as it shows how much of my data plan I’ve used – and to stop the app starting on boot-up, though in my opinion that’s not something you should do without thinking about first; this app needs to be running all the time to ensure it’s protecting your privacy.
Conclusion
LBE Privacy Guard/Master keeps impressing me the more I use it. Not only has it excelled at guarding my privacy (as its name would suggest), it’s also helped me cut down on my data usage. Thanks to this, I’ll be able to get a cheaper contract in January when my contract needs renewing – so the app has saved me money!
Regarding privacy: be sure to spend a few minutes going through the settings, both overall and for each app, as this is what will make this app so powerful and easy to use. There are many features on offer, so if you’re not interested in some please don’t decide against using this great app – just turn them off. LBE Privacy Guard will keep your data safe.
Link for ICS/GB -> Click here for downloading from play store
Link for JB/CM -> Click here for Downloading
There official Site -> http://www.lbesec.com/
Also, read [Suggestions & Discussions] Why mobile security matters
FAQ​
How can I disable on screen number / country code while calling / receiving calls..??
Just Go to Communication Toolbox > Comm. Enhanx. Disable "Calling number region box".
Vikesh, Please give credit to the orginal developer or you can give the link of orginal thread instead of your dropbox so that members can thank him and it would be a great appreciation for his work as you know.. Otherwise its unfair
Sent from my GT-I9103 using Tapatalk 2
shaheen7m said:
Vikesh, Please give credit to the orginal developer or you can give the link of orginal thread instead of your dropbox so that members can thank him and it would be a great appreciation for his work as you know.. Otherwise its unfair
Sent from my GT-I9103 using Tapatalk 2
Click to expand...
Click to collapse
Thanks for reminding me, actually I downloaded it from my mobile & then flashed CM10 AGAIN. I lost his thread. Now I m searching on Google & my thread is coming instead of that. Please give me his Link & name so that I can add his name.:angel: BTW, I uploaded it in My drop box coz I lost his link. My mean not to obtain all credit for the same. Also, i m using LBE since GB & also suggested the same in Security thread of mine.
Edit: puuufffff...link found Edited in OP BTW the user is what you are asking is not developing that application. he is translating the LBE Privacy Guru application from Chinese to English. Here is the link of Play Store -> Click here
& then use Google translator.
kataria.vikesh said:
Thanks for reminding me, actually I downloaded it from my mobile & then flashed CM10 AGAIN. I lost his thread. Now I m searching on Google & my thread is coming instead of that. Please give me his Link & name so that I can add his name.:angel: BTW, I uploaded it in My drop box coz I lost his link. My mean not to obtain all credit for the same. Also, i m using LBE since GB & also suggested the same in Security thread of mine.
Edit: puuufffff...link found Edited in OP BTW the user is what you are asking is not developing that application. he is translating the LBE Privacy Guru application from Chinese to English. Here is the link of Play Store -> Click here
& then use Google translator.
Click to expand...
Click to collapse
As your words, hitting thanks speakes louder in xda than writing thanks. . And about the play store stuff, it will not work for CM10. It was charm in GB but causing problems with CM10. Not sure abt AOSP builds. And its interface is completely different and dont have these much options. I am using LBE for 2 years
Sent from my GT-I9103 using Tapatalk 2
shaheen7m said:
As your words, hitting thanks speakes louder in xda than writing thanks. . And about the play store stuff, it will not work for CM10. It was charm in GB but causing problems with CM10. Not sure abt AOSP builds. And its interface is completely different and dont have these much options. I am using LBE for 2 years
Sent from my GT-I9103 using Tapatalk 2
Click to expand...
Click to collapse
Yes, I perhaps i removed that line too. Might be, not workable but signing APK willn't include Devs thing in it. So, let Cut this topic & move ahead.
After using it, my battery power is increased. So, anybody who is facing issue for Battery draining issue can install it & share there view here.:laugh:
kataria.vikesh said:
Yes, I perhaps i removed that line too. Might be, not workable but signing APK willn't include Devs thing in it. So, let Cut this topic & move ahead.
After using it, my battery power is increased. So, anybody who is facing issue for Battery draining issue can install it & share there view here.:laugh:
Click to expand...
Click to collapse
Its an awesome application and highly reconended to use.. Great share indeed
Sent from my GT-I9103 using Tapatalk 2
Any idea how to disable the country name dialog box from incoming and outgoing calls?
Sent from my GT-I9103 using xda app-developers app
bluesky747 said:
Any idea how to disable the country name dialog box from incoming and outgoing calls?
Sent from my GT-I9103 using xda app-developers app
Click to expand...
Click to collapse
I tried everything but did find the setting of this. If anybody can do this please let me know also.
bluesky747 said:
Any idea how to disable the country name dialog box from incoming and outgoing calls?
Sent from my GT-I9103 using xda app-developers app
Click to expand...
Click to collapse
Go to Communication Toolbox > Comm. Enhanx. Disable "Calling number region box".
whitepony said:
Go to Communication Toolbox > Comm. Enhanx. Disable "Calling number region box".
Click to expand...
Click to collapse
Thanks buddy. You saved my day. Adding this one in FAQ. Great :good:
Don't know if here are any Desire HD owners but if, maybe you guys can help me out.
I'm on an unofficial CM10.1 4.2.1 rom and even LBE Security Master gives me a reboot as soon as I open it.
Normally LBE Security Master worked on 4.2.1 :-/
l33ch0r said:
Don't know if here are any Desire HD owners but if, maybe you guys can help me out.
I'm on an unofficial CM10.1 4.2.1 rom and even LBE Security Master gives me a reboot as soon as I open it.
Normally LBE Security Master worked on 4.2.1 :-/
Click to expand...
Click to collapse
Just allow ur home launcher as system app. May b it will work.
Sent from my GT-I9103 using Tapatalk 2

[Q] Do I need Mobile Security, along with those following root necessary apps?

1)I have rooted the Android phone. Xperia Tipo.
2)Installed the Root explorer, Permissions Denied, Droidwall, Startup Manager, Adfree, Busybox, Titanium Backup.
3)I was planning to use the Comodo Mobile Security (including antivirus and a live monitoring firewall)
Do I need to remove anything from the previously installed set of apps? Because even if I have droidwall, It only blocks applications as a whole. I cannot stop the apps from doing specific spying like- phonebook photo, access. etc.
The ****ty google has lot of apps that keep logged in. I tried to block one service from startup, and youtube stopped working.
I dont want to permanently block them. I only want these apps to login and access only when I need.
What should I do?
I know I asked two or more questions in one topic, despite of the title. But, hope someone tells me.
Dude I can understand what you want because I also hate such google apps running in background so do the following
Go to (settings<apps<all)and find the app you want "for example" take YouTube select it and click "Disable"
(before tat click force stop to save RAM) The app will be freezed and will not run until you again go and enable it...
PS:The disabled app will be in the dead bottom in (settings<apps<all) you can go there and "Enable" it again when you really need to use the app.
HIT THANKS IF I HELPED YOU:thumbup:
Sent from my
xperia tipo rooted
using xda app-developers app
Yup...he's right dude....
Try Anti Theft Mobile Security
Try out Mobisecurity.net
It not only tracks location of lost mobile but also lock mobile remotely, send SIM change alert along with switched SIM number, wipe personal data when fallen into wrong hands.

List of useful "root apps"??

Hi all, I'm looking to root my note 10.1 and perhaps install a new rom . However, I can't seem to find a list of apps that are for root only.
I am aware of a couple of essentials like the add one and triangle away one but what do you boys and girls consider to be the essential apps or fun apps to have for your rooted device?
I have tried searching for root apps in Google and I just get how to root in return so that hasn't been any help at all. So I thought I would ask you all.
So what are the essential root apps that work with the note 10.1?
Many thanks in advance?
Sent from my GT-I9300 using xda app-developers app
I like
full!screen+ - gets rid of nav bar on bottom of screen
MobileODIN Pro (LOVE this one)
Triangle Away
Root Explorer
Methaq
Sent from my SGH-I747 using xda app-developers app
Hey... Thank you. X. was beginning to think nobody used any root apps... Lol. I would love to hear any suggestions you might have regarding root apps or essential apps to have one rooted. I'll certainly consider the ones already mentioned.
Once again thank you so much xx
Sent from my GT-I9300 using xda app-developers app
I often connect my note to my television to get a big screen feel, but on the dock, the screen stays on. Solution?
Screen Standby! Get it!
Sent from my GT-N8013 using xda app-developers app
Titanium Backup Pro = to back and restore all your apps +data
Lucky Patcher = needed for some cracked apps
AD Away
CWM
thermax04 said:
Titanium Backup Pro = to back and restore all your apps +data
Lucky Patcher = needed for some cracked apps
AD Away
CWM
Click to expand...
Click to collapse
Cool... It also seems like mobile odin and triangle away is essential. Are there any others?
Sent from my GT-I9300 using xda app-developers app
lisa2blonde said:
Cool... It also seems like mobile odin and triangle away is essential. Are there any others?
Sent from my GT-I9300 using xda app-developers app
Click to expand...
Click to collapse
yes they very essential, i did not write them because they were mentioned already
I do not think there is any other very essential apps, yes there more apps for rooted mobiles but the importance is different from someone to another
thermax04 said:
yes they very essential, i did not write them because they were mentioned already
I do not think there is any other very essential apps, yes there more apps for rooted mobiles but the importance is different from someone to another
Click to expand...
Click to collapse
thank you sooo much
I understand (importance differs now).
I guess I would love to know which root apps people are using as im a bit of a noob to the root thing. I have done it in the past (long time ago) on sgs1 but only to flash a new rom. On this occasion i only want to root and keep stock for now. knowing what apps were being used by 'experts' (anyone rooted -lol) would help me install the right things. IM beginning to get a picture now of what could be possible. I couldn't find any 'list' so your input and the input of others has helped me gather a list of about 6 root apps to install. So any other info would be gratefully accepted
here are all mine...
of course don't forget supersu..
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
@igkahn - wow - you have loads thanks for the screen shots - that really helps
that means I can now root and go ahead and try some of these things. Im not sure what Gtalk enabler is - isn't that hangouts or is that google 'telephone' chat thing and will it work in the UK?
As for the emulator - Ill have to check that out to. that is a really cool list! I hope others follow suit with lists similar. very helpful indeed
Try lmt launcher .
Sent from my GT-N8000 using xda premium
Must Have Root App
To me, Multiwindow Manager Pro is a MUST. It make all apps multi window enabled (or just the ones you choose).
I second the Multi Window Manager and Titanium. I also use the XPosed Framework with the XPosed App Settings module allowing display customization of individual apps including DPI and removal of title bar - very handy particularly when reducing how much screen space an app takes up in multi window.
Sent from my GT-N8013 using xda app-developers app
I don't have a Note 10.1 (my uncle does) but for me it all depends on what you want them to do on your particular device, and your needs. For instance, my galaxy player didn't manage memory well so I needed an app to do that.
Also if you want to see most of the root apps in the play store, just type in "root". You still have to do a bit of digging to see which ones suit you but at least it gives you a better start. Anyways my list is as follows:
SuperSU/Super User- This is a mandatory install because you need to give root apps super user permission to work with your system. It doesn't matter which one you pick, because they both work really well.
SuperSU- https://play.google.com/store/apps/...51bGwsMSwxLDEsImV1LmNoYWluZmlyZS5zdXBlcnN1Il0.
SuperUser - https://play.google.com/store/apps/...wsMSwxLDEsImNvbS5ub3NodWZvdS5hbmRyb2lkLnN1Il0.
/system/app mover - It can set/remove apps as a system app, meaning you can remove all the bloatware off a device or set apps of your choosing that can't be uninstalled from the launcher. https://play.google.com/store/apps/details?id=de.j4velin.systemappmover&hl=en
AdFree- Gets rid of Ads (no longer in the playstore)
Auto Memory Manager- As the name states it automatically frees up your ram in order to keep your device running smoothly. You can set thresholds, tell which apps to ignore, and etc to customize when you want it to start managing your ram. You don't have to have root, but it works much better with it.
https://play.google.com/store/apps/...wxLDEsImNvbS5saW0uYW5kcm9pZC5hdXRvbWVtbWFuIl0.
Clean Master- This app is almost a jack of all trades. Not only does it also manager your ram. It cleans out junk files that are unneeded, deletes private data (i.e web browers data), and can move to SD, Uninstaller, or Backup your apps. It is very easy to use. I think of it as the CCleaner for Android.
https://play.google.com/store/apps/...GwsMSwxLDEsImNvbS5jbGVhbm1hc3Rlci5tZ3VhcmQiXQ.
CPU Master Free- This is a cpu controller that can set your max, min, scaling, have profiles (if using pro), can control your i/o scheduler, and voltage. This pretty much means your can increase the performance of a device, or increase battery life. It's really nice for a free app. However, almost any cpu controller app does just fine. I heard SetCPU and Tegrak were the best.
https://play.google.com/store/apps/...sMSwxLDEsImNvbS5hbnR1dHUuQ3B1TWFzdGVyRnJlZSJd
DSPManager 1.0 (not in the playstore anymore either) - This app really helps out with the quality of music, and you can set profiles for headset, BT, and speaker
Root Uninstaller- This is one of the best and most essential root apps imo. This backs up apps as an actual apk file automatically. It also treats updates for apps as a separate file too. On top of that it can restore apps, reset apps to their original state, freeze apps, and etc.
https://play.google.com/store/apps/...sMSwxLDEsImNvbS5yb290dW5pbnN0YWxsZXIuZnJlZSJd
Titanium BackUp Free- If something doesn't work in root uninstaller I use this. It does everything that root uninstall does, and a bit more. The only thing is it doesn't back up apps as apk files. I still consider it to be a 5 star root app. Just make sure you have Busy Box installed.
Titanium BackUp Free- https://play.google.com/store/apps/...DEsImNvbS5rZXJhbWlkYXMuVGl0YW5pdW1CYWNrdXAiXQ..
Busy Box https://play.google.com/store/apps/...51bGwsMSwxLDEsImV1LmNoYWluZmlyZS5zdXBlcnN1Il0.
Have fun searching and looking for the apps that best suit you.
that list was from my phone on the tablet you don't need gtalk enabler unless you have a tablet with phone service and your carrier like at&t here doesn't allow video calls in Google talk aka hangouts over cell service... it gets around that...
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
samandhi said:
To me, Multiwindow Manager Pro is a MUST. It make all apps multi window enabled (or just the ones you choose).
Click to expand...
Click to collapse
+1
Sent from my SGH-I747 using xda app-developers app
Well... I started by rooting my s3. Haven't rooted the note just yet. Wanted to play around with some of the things there first. It was rally easy to do. So far downloaded:
Tasker - amazing app!
Add away - woks on most things but couldn't handle chomp sms
LMT - nice launcher!
CPU - works well but not sure if i have the setting correct on that
secure settings - this works well with tasker
Helper - works with tasker.
Mobile Odin - just in case
Greenify - excellent battery saver - that's for sure!
still to play with titanium back up. and a few others... any other tips... gratefully accepted Still trying to get used to a number of things listed above and figure out how to make them work for me but at least im gaining experience.
So... now I need to root my note 10.1 and see what works on that.
I have a slightly different question, although I think it fits in this thread.
I've rooted my N8010. Installed SuperSU, BusyBox, DropBear Server II.
Where can I find typical command line tools like scp, sftp and rsync? Many apps mention these tools, but none of them seem to install these tools in /system/[x]bin for global access.

[Q] App that lets you select permissions for apps?

Hello.
You download an app, it gives you a big list of what permissions it wants, and you can either agree to it or not use the app...
Is there someway of limiting those permissions? Or provide fake permissions?
Like in most iphone apps you can choose if you want to allow gps, contacts, etc.
I am searching for an app thats will limit those permissions prior to installing it. Won't do me any good if I want to deny contacts access but I do it after its already taken it.
Cheers and thanks
P.S. I'm using a rooted LG G2 d802 with android 4.4.2
I don't think it's possible, even Google's last Play Store update doesn't reveal every single permission when you update stuff, dunno if this limitation affects it or no.
You can use "app ops" (search for it in google play). It is a hidden menu from android os. Obviously it works after installation (iOS works the same, you first install the app and later you decide which permission accept/deny).
PoOoZaQ said:
Hello.
You download an app, it gives you a big list of what permissions it wants, and you can either agree to it or not use the app...
Is there someway of limiting those permissions? Or provide fake permissions?
Like in most iphone apps you can choose if you want to allow gps, contacts, etc.
I am searching for an app thats will limit those permissions prior to installing it. Won't do me any good if I want to deny contacts access but I do it after its already taken it.
Cheers and thanks
P.S. I'm using a rooted LG G2 d802 with android 4.4.2
Click to expand...
Click to collapse
Try to search "3c toolbox" in Google.
This app has many integrated tools within it.
You can change permission also.
Good luck

[Question] [Magisk rooted Android phone]. Is it possible for an app to obtain root access without asking for it or if root access is denied by user?

If I install some tweaks with root access and then block internet access of those tweaks. I think whatever possible risk these apps pose is neutralized by the fact that the stolen info (if any) will stay on the device and will not be transmitted to a remote server.
I worry about apps that require internet operation for their basic functionality in general (these apps are not necessarily or exclusively for rooted phones. Can be any app for Android, from Play store or a third party store). I do not block their internet access for obvious reasons as they do not work in that case. But I do not provide root access to them. So if I deny root access to these apps or if an app never prompts me for it, is it possible for these apps to stealthily obtain super user permission, reach and control the kernal, or see other apps data (sandbox breach)? A virus can do this even on unrooted phones. Will the root installed on a device will help a virus to circumvent superuser access protection even when the same is denied?
hellodrsoul said:
If I install some tweaks with root access and then block internet access of those tweaks. I think whatever possible risk these apps pose is neutralized by the fact that the stolen info (if any) will stay on the device and will not be transmitted to a remote server.
I worry about apps that require internet operation for their basic functionality in general (these apps are not necessarily or exclusively for rooted phones. Can be any app for Android, from Play store or a third party store). I do not block their internet access for obvious reasons as they do not work in that case. But I do not provide root access to them. So if I deny root access to these apps or if an app never prompts me for it, is it possible for these apps to stealthily obtain super user permission, reach and control the kernal, or see other apps data (sandbox breach)? A virus can do this even on unrooted phones. Will the root installed on a device will help a virus to circumvent superuser access protection even when the same is denied?
Click to expand...
Click to collapse
In order to answer this question fully, I would need to explain many things that you're probably not interested in. Understanding android as an ecosystem requires a decent understanding of Unix-like security concepts (such as UID and GID) as well, but I can maybe answer some questions regardless.
In order of importance, here is what you should check upon first to make sure the possibility of a Rootkit (what it's called) is slim to none:
SeLinux status should be enforcing ; why? Even if your device isn't rooted, malware could still spawn dangerous processes with elevated privileges (uid 0 or root) and install themselves. You can find out if your ROM is permissive or not by using the command getenforce after using su in a terminal app. If it returns Enforcing or 1 then you're good to go.
Make sure that the magisk manager app is from a legitimate source (github). Some malware/rootkits disguise themselves as magisk and inject malicious code in your system, rendering the whole grant/deny process useless.
Only grant root access to trusted apps.
Magisk has very strong checks in place to make sure all root access requests/operations are funneled through only the manager. Leaving what happens after you grant access up to User discretion. Which is why point 3 is important.
Slim K said:
In order to answer this question fully, I would need to explain many things that you're probably not interested in. Understanding android as an ecosystem requires a decent understanding of Unix-like security concepts (such as UID and GID) as well, but I can maybe answer some questions regardless.
In order of importance, here is what you should check upon first to make sure the possibility of a Rootkit (what it's called) is slim to none:
SeLinux status should be enforcing ; why? Even if your device isn't rooted, malware could still spawn dangerous processes with elevated privileges (uid 0 or root) and install themselves. You can find out if your ROM is permissive or not by using the command getenforce after using su in a terminal app. If it returns Enforcing or 1 then you're good to go.
Make sure that the magisk manager app is from a legitimate source (github). Some malware/rootkits disguise themselves as magisk and inject malicious code in your system, rendering the whole grant/deny process useless.
Only grant root access to trusted apps.
Magisk has very strong checks in place to make sure all root access requests/operations are funneled through only the manager. Leaving what happens after you grant access up to User discretion. Which is why point 3 is important.
Click to expand...
Click to collapse
Thank you for the reply and your insights. On my device;
1. SeLinux status is enforcing
2. Magisk is from the official gethub source.
3. Root access is granted to only 5 apps, all are reputable as for as I could ''investigate''
I have about 30 other regular apps (not requiring root) installed, most are from Play store but some are from Fdroid and some are moded apks (please don't judge me on it. I like trying apps before purchasing). The moded apks have no root access during the installed period as these are apps for nonrooted devices, apparently. I directly purchase apps that require root access.
Are there any loopholes in this setting? Do moded apks and apps from Fdroid (or other third-party sources) are as safe as on non-rooted devices? Or it is more injurious to use such apps on rooted devices than on non-rooted devices?
My POV: Any app what grants these dangerous runtime permissions - defined in app's AndroidManifest.xml -
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
can be considered to be a trojan.
Hence it's highly recommended to remove all apps with those permissions.
hellodrsoul said:
Thank you for the reply and your insights. On my device;
1. SeLinux status is enforcing
2. Magisk is from the official gethub source.
3. Root access is granted to only 5 apps, all are reputable as for as I could ''investigate''
I have about 30 other regular apps (not requiring root) installed, most are from Play store but some are from Fdroid and some are moded apks (please don't judge me on it. I like trying apps before purchasing). The moded apks have no root access during the installed period as these are apps for nonrooted devices, apparently. I directly purchase apps that require root access.
Are there any loopholes in this setting? Do moded apks and apps from Fdroid (or other third-party sources) are as safe as on non-rooted devices? Or it is more injurious to use such apps on rooted devices than on non-rooted devices?
Click to expand...
Click to collapse
After an App is installed, it will be granted all the requested permissions (dangerous or not) regardless of it being a root or non-root App. If you're afraid of the App making permanent damage to your phone, then you won't have to worry about that. If what concerns you is the theft of your data (contacts, media, banking details and such), then there are ways around that as well.
Android 5.0+ devices have a peculiar solution to that problem in a form of different/work profiles. Solutions such as Island or Riru storage isolation minimize the risk of i.e. modded apps by creating a new user profile with an isolated environment, think of like a small VM environment where you specify what the App has access to in terms of storage and permissions.
Personally, I won't install a modded apk for any reason, the risk isn't worth the reward IMHO. Apps from F-droid are usually safe to install, since they're scanned for malware on the website itself.
Hope I helped you with this answer.
Slim K said:
Slim K said:
Android 5.0+ devices have a peculiar solution to that problem in a form of different/work profiles. Solutions such as Island or Riru storage isolation minimize the risk of i.e. modded apps by creating a new user profile with an isolated environment, think of like a small VM environment where you specify what the App has access to in terms of storage and permissions.
Click to expand...
Click to collapse
Click to expand...
Click to collapse
My primary concern is theft of my data such as credentials of banking apps, some app posting nudes to my whatsapp contact, my photos circulating on the web and may be pasted in a nude video or something.... It may sound like a paranoia, but still I want to plug any patent holes if I can....
I tried the storage isolation app you suggested. Unfortunately it does not isolate some of the root apps I have on my phone (they do not appear in the app management section).
The easier solution may be a sandbox environment where a particular app could be run without other apps seeing it. I have about 10 apps in total that I think should run in an environment where neither of the root apps nor any moded app with accessibility access should see them or their data.
Does the Island app you mentioned can achieve this environment? Or is there any other solution?
Kind regards.

Categories

Resources