Database Info

[APP][GPL]SecDroid - Android Hardening [BETA] [Hiatus]

SecDroid V 1.1 Beta
Created by x942
Released under GPLV2​
PROJECT IS ON HIATUS
New project over here
Introduction​
SecDroid hardens the android kernel by disable certain binaries that have internet access or can be used as an attack vector. Some of these are:
SSH
SSHD
Telnet
NC (net cat)
Ping
PM (Package Manager - Can't install apps via CLI/ADB)
ADBD (ADB is disabled until reboot)
And by securing the TCP Stack using Systctl (Until Next boot).
Click to expand...
Click to collapse
More info
Why disable ADB and PM?
ADB and PM are both disabled to help prevent an attacker from being able to install apps via the command line or adb shell. Both of these are potential attack vectors. You can install apps via the playstore and GUI
Click to expand...
Click to collapse
What license is this released under?
All code is released under GPLV2 Unless otherwise noted.
Click to expand...
Click to collapse
Thanks/Credits
Many Thanks to Adam Outler for his Shell class that was used in this project (until V0.3 - See Changelog).
Many thanks to XDA-TV and XDA for their hard work!
And thanks to SANS for their Android Security whitepaper which inspired this project.
Click to expand...
Click to collapse
Downloads:
View attachment SecDroid.apk
Source Code
Latest Version (always up to date)
Play Store ] [URL="http://forum.xda-developers.com/showpost.php?p=41204527&postcount=101"](OUT-OF-DATE) [/URL]
Click to expand...
Click to collapse
Please note this is my first android app. As such bugs may be present and the code may not be pretty. If anyone can help me make it look nicer and more efficient that would be great
UPDATE 2013-05-06:
Version 1.1 Beta
* Fixed script to properly handled errors on some devices
* Fixed layout issue
* Added disable bluetooth feature (Disabled bluetoothd )
* Added enable bluetooth feautre ( Reverses above action)
Click to expand...
Click to collapse

x942 - Thanks for letting me know this is in the works - looks really promising. With things like SSH/SSHD being disabled, will apps (like Connectbot) still work, allowing for SSH/SSHD on a per app basis?

Does this just disable these things during the current running session?
IE after rebooting it does everything go back to normal?
If not is there a way to enable them again?

I have to assume that it's a good thing if the application wasn't able to find any of the noted application to harden.

fluxgfx said:
I have to assume that it's a good thing if the application wasn't able to find any of the noted application to harden.
Click to expand...
Click to collapse
I assume it's not a good thing because the applications are missing (which is unlikely) or they are moved to a different location

http://www.xda-developers.com/android/secure-your-android-device-with-secdroid/
featured on Xda portal!

So the "hardening" is only applied after running the app and upon next boot everything should be back to normal correct?

Mika83AC said:
I assume it's not a good thing because the applications are missing (which is unlikely) or they are moved to a different location
Click to expand...
Click to collapse
I agree with you. Although after a manual verification the application in questions aren't located on the device in any folders Internel, External or within any of the root folder.
Cheers,

fluxgfx said:
I agree with you. Although after a manual verification the application in questions aren't located on the device in any folders Internel, External or within any of the root folder.
Cheers,
Click to expand...
Click to collapse
I also has the same issue when running the app and I confirmed the apps are not located on my device.

First of all thank you so much for the effort to keep our devices safe. Im using Droidwall to block certain programs and would like to install SecDroid but not sure if it would conflict in any way. Could you please confirm?

koz said:
x942 - Thanks for letting me know this is in the works - looks really promising. With things like SSH/SSHD being disabled, will apps (like Connectbot) still work, allowing for SSH/SSHD on a per app basis?
Click to expand...
Click to collapse
Sadly no. The apps are disabled by removing their permisions to execute (chmod 000). This means no one can run it. I suppose I could have it set to only allow Connectbot to run it based on UID or something. But something like Droidwall or AFWall+ is better suited for that. I am planning to add in a switch for each item. So you could for example leave ssh enabled but disabled everything else.
Richy19 said:
Does this just disable these things during the current running session?
IE after rebooting it does everything go back to normal?
If not is there a way to enable them again?
Click to expand...
Click to collapse
Yes at this time everything is reset on reboot. I am looking into having it auto-run every boot.
fluxgfx said:
I have to assume that it's a good thing if the application wasn't able to find any of the noted application to harden.
Click to expand...
Click to collapse
Correct. I have tested on CM9/10/10.1 and AOKP on both of these if it can't find anything then they aren't present in the system. Stock roms may be different. All AOSP should all be the same though.
hisname said:
http://www.xda-developers.com/android/secure-your-android-device-with-secdroid/
featured on Xda portal!
Click to expand...
Click to collapse
Nice! xD That is awesome!
PnoT said:
So the "hardening" is only applied after running the app and upon next boot everything should be back to normal correct?
Click to expand...
Click to collapse
Yes. Everything is reset upon reboot. i will add an auto-run version shortly
bushako said:
First of all thank you so much for the effort to keep our devices safe. Im using Droidwall to block certain programs and would like to install SecDroid but not sure if it would conflict in any way. Could you please confirm?
Click to expand...
Click to collapse
No problem. I have no issues with Droidwall or AFWall+ SecDroid doesn't touch iptables so everything should be fine

Are these vulnerabilities dependent upon whether USB debugging is enabled or disabled?
...and will this interfere with Apps that require USB debuggin enabled such as Titanium Backup and Gemini Apps manager.

electricpete1 said:
Are these vulnerabilities dependent upon whether USB debugging is enabled or disabled?
...and will this interfere with Apps that require USB debuggin enabled such as Titanium Backup and Gemini Apps manager.
Click to expand...
Click to collapse
The only vulnerabilities dependant on USB Debugging is Kos' p2p-adb. The rest prevent network (remote) attacks. Some of which could be used over ADB but don't depend on it (installing malware). I have not tested with TB but it may break it. I am trying to make individual on/off switches for each option so you can only disable what you want to and leave the rest alone
I have posted a Play Store link now too!

fluxgfx said:
I have to assume that it's a good thing if the application wasn't able to find any of the noted application to harden.
Click to expand...
Click to collapse
WattB006 said:
I also has the same issue when running the app and I confirmed the apps are not located on my device.
Click to expand...
Click to collapse
Same result here. Does that mean our devices are more secure since we don't have these files? I'm running pure AOSP, BTW.

I'm having the same problem.
Sent from my INO_ONE using xda premium

apatal said:
Same result here. Does that mean our devices are more secure since we don't have these files? I'm running pure AOSP, BTW.
Click to expand...
Click to collapse
No, you are not "safe". All the things are not located in system/xbin, but in system/bin! So the pathes which the app checks are wrong...
Under system/xbin are many many links, but the real "files" are located elsewhere! So the dev should chance his app so that it can check the right locations
Sent from my GT-I9300 using xda app-developers app

I checked and scp is located in the system/bin folder. All the other ones though I cannot find. Here is a screen shot of mine.
Sent from my SGH-I747 using xda premium

Can you also include in this app ARP, DOS,and MITM type of attack protection. That would be cool.

apatal said:
Same result here. Does that mean our devices are more secure since we don't have these files? I'm running pure AOSP, BTW.
Click to expand...
Click to collapse
New version coming in a few days I will post a patched version today, it looks like I uploaded the wrong version by mistake.
jas0nsg said:
I'm having the same problem.
Sent from my INO_ONE using xda premium
Click to expand...
Click to collapse
Mika83AC said:
No, you are not "safe". All the things are not located in system/xbin, but in system/bin! So the pathes which the app checks are wrong...
Under system/xbin are many many links, but the real "files" are located elsewhere! So the dev should chance his app so that it can check the right locations
Sent from my GT-I9300 using xda app-developers app
Click to expand...
Click to collapse
Oops looks like I messed up and uploaded the wrong version I will fix this. Originally it did use xbin and also disabled more things (bluetooth and NFC) but I corrected this as most users don't want those disabled. I will post the proper APK With the proper paths. It's alread compiled so expect it in a few min.
SkyandDirt said:
Can you also include in this app ARP, DOS,and MITM type of attack protection. That would be cool.
Click to expand...
Click to collapse
I can include these I will do so in a future update.

Fixed the issue. It doesn't give any errors on CM10/10.1 on my N4. Path is now /system/bin for the binaries that are there and xbin is only used for a couple binaries that are only in that folder.
Also moved repo to github as google code is annoying. Update also pushed to Play Store.

[Q] Auto Call answer issue

Using SLT-Nexus_phailin custom rom v3.0 for MMX a110.
Getting an issue of call getting answered automatically after one ring. Please provide solution.

maheshparmar said:
Using SLT-Nexus_phailin custom rom v3.0 for MMX a110.
Getting an issue of call getting answered automatically after one ring. Please provide solution.
Click to expand...
Click to collapse
That might be something in the settings or an Auto-Answer app on your android
Try check in Settings and try to see if you have any apps to do with this
If none of the above works please reply!

unded2012 said:
That might be something in the settings or an Auto-Answer app on your android
Try check in Settings and try to see if you have any apps to do with this
If none of the above works please reply!
Click to expand...
Click to collapse
I have not installed any app. But this ROM has got MKT engineering app which has got setting for auto answering but the same is disabled still facing this issue.
Please guide

maheshparmar said:
I have not installed any app. But this ROM has got MKT engineering app which has got setting for auto answering but the same is disabled still facing this issue.
Please guide
Click to expand...
Click to collapse
That's weird you try check in Settings>Applications>All Apps and if you see any Delete it
If you dont see it You might have to change/remove the ROM by using Odin also back up your Default ROM before going to a custom one!
Please reply if nothing works with more detail

Bloatware

Hi guys,
Quick question... I got this phone three days ago... I rooted it mostly to delete some of the bloatware... The thing is, I tried to delete the apps on the system folders, but it won't allow it... It returns an error message saying it is not possible to delete the files...
Anyone knows why this is happening and if there's a workaround?
Thanks!!!

mariolcneto said:
Hi guys,
Quick question... I got this phone three days ago... I rooted it mostly to delete some of the bloatware... The thing is, I tried to delete the apps on the system folders, but it won't allow it... It returns an error message saying it is not possible to delete the files...
Anyone knows why this is happening and if there's a workaround?
Thanks!!!
Click to expand...
Click to collapse
First check you have full root or not.

Sent from my D2306 using XDA Free mobile app

It's not my first phone and definitely not the first rooted device.. I'm a serial flasher... Lol...
Just never had this happen to me before...
Sent from my D2306 using XDA Free mobile app

mariolcneto said:
It's not my first phone and definitely not the first rooted device.. I'm a serial flasher... Lol...
Just never had this happen to me before...
Sent from my D2306 using XDA Free mobile app
Click to expand...
Click to collapse
To be easier use clean master app from play store, to remove bloatware!!

Tried two apps and both failed to delete g+...
Sent from my D2306 using XDA Free mobile app

no recommended uninstall system application
mariolcneto said:
Tried two apps and both failed to delete g+...
View attachment 2967513View attachment 2967514
Sent from my D2306 using XDA Free mobile app
Click to expand...
Click to collapse
why uninstall system applications,it is not recommended either one developers that is risky.
try this application work good.Make sure the app you are going to uninstall is not a system app.
Code:
https://play.google.com/store/apps/details?id=zsj.android.systemappremover&hl=en
install and Open Root app delete on your android phone and,Tap on System apps and tap on Pro when prompted to choose from Junior or Pro mode.
Scroll through the list of system apps and tap on any of the apps which you want to be removed from your phone.
Next tap on Uninstall to remove the unwanted app and again tap on OK to confirm your selection.
In case the app cannot be remove properly, you will see the following error. Tap on OK and then tap on #1 to force uninstall the app.
Now the unwanted app / bloatware will be removed from your android phone.

What!!!!!!!??!????
Sent from my D2306 using XDA Free mobile app

mariolcneto said:
What!!!!!!!??!????
Sent from my D2306 using XDA Free mobile app
Click to expand...
Click to collapse
Use titanium backup .

mariolcneto said:
Hi guys,
Quick question... I got this phone three days ago... I rooted it mostly to delete some of the bloatware... The thing is, I tried to delete the apps on the system folders, but it won't allow it... It returns an error message saying it is not possible to delete the files...
Anyone knows why this is happening and if there's a workaround?
Thanks!!!
Click to expand...
Click to collapse
What version are you running? How did you get root?

Hi guys...
First of all, the "What???" wasn't meant for this post, for some strange reason when I replied on another forum post it did here... I'm really sorry about that...
Anyway... The phone was bugging and the root wasn't working right, that's why I wasn't able to delete the apps... I wasn't trying to delete system apps, but things like Google+ which I don't use at all...
Anyway, I'm on a D2306 from Brazil... I flashed the 4.4.2 global to get rid of the carrier apps, but I probably did something wrong while flashing and rooting it, so it was't working... I reflashed it yesterday and did the root again and it worked flawlessly...
I deleted the integrated apps I don't use and the phone is perfect now...
Thanks for all the help...

That's first thing I also do after rooting. There is so much delivered with the phone, and not few of it completely useless to me.
I think the advice not deleting system apps, hmmm .... what is a system app? Sony Home? SystemUI ? Or Google+, Gmail, Maps, Sony Select, ... all in system and unremovable without root. I understand that we need to be protected from doing harm to the phone we bought. But still I think the phone should come with a kind of admin function or semi-root to remove what is not needed. As it is it has more the smell of forcing people to using certain things.
For other apps I have different needs than what is supplied. I am lucky I can change things. As examples, for email I can use a normal email program such as K9, for sms I can use an sms messenger that actually does give repeat notifications, such as Evolve, QuicPic to me is the superior Album at 1/10 of the size, for navigation and maps I use Mapfactor bcs it has real offline navigation, and so on and on.

Android version

How can i install incompatible apps from play store, I use sgs gt-s5282, with cm11...

$amoxinH said:
How can i install incompatible apps from play store, I use sgs gt-s5282, with cm11...
Click to expand...
Click to collapse
You can't .and even if you download an apk of the preferred app it won't work .

[email protected] said:
You can't .and even if you download an apk of the preferred app it won't work .
Click to expand...
Click to collapse
Dear @Querty@, I already did it, I found the way...
As you see in the main post, I use cm, and that means my android is updated, but not information for Google play store...
Sent from my GT-S5282 using XDA-Developers mobile app

$amoxinH said:
Dear @Querty@, I already did it, I found the way...
As you see in the main post, I use cm, and that means my android is updated, but not information for Google play store...
Sent from my GT-S5282 using XDA-Developers mobile app
Click to expand...
Click to collapse
Sorry for the hurried response.
There are a handful of reasons why app is incompatible.
1) android version - some apps are not compatible with android versions .updating your android version will work .
2)hardware -let's say that I want to shoot a 360 panorama. But my device has no gyromerter ,so I may get incompatible or they may let me download but the app won't work perfectly.
3)geo restrictions- some apps cannot be installed in some country or the app hasn't been released yet for that country. Enabling proxy and changing your location may or may not work.
Now for by " already did it " you mean you already installed then good for you.
But keep in mind that cm11=KitKat that is android4.4.x
Using cm11 don't mean that your device is updated there is still cm12/12.1(lollipop) cm13(marshmallow).
If you want more help cite the app you want installed and I'll go over the device requirement.
PS:if the problem is geo restrictions ,then using apps like tunnelbear,market helper and searching for the app in chrome store may help

[email protected] said:
Sorry for the hurried response.
There are a handful of reasons why app is incompatible.
1) android version - some apps are not compatible with android versions .updating your android version will work .
2)hardware -let's say that I want to shoot a 360 panorama. But my device has no gyromerter ,so I may get incompatible or they may let me download but the app won't work perfectly.
3)geo restrictions- some apps cannot be installed in some country or the app hasn't been released yet for that country. Enabling proxy and changing your location may or may not work.
Now for by " already did it " you mean you already installed then good for you.
But keep in mind that cm11=KitKat that is android4.4.x
Using cm11 don't mean that your device is updated there is still cm12/12.1(lollipop) cm13(marshmallow).
If you want more help cite the app you want installed and I'll go over the device requirement.
PS:if the problem is geo restrictions ,then using apps like tunnelbear,market helper and searching for the app in chrome store may help
Click to expand...
Click to collapse
Thanks for the information...
I use market helper with Galaxay S5 activated as my device...
Sent from my GT-S5282 using XDA-Developers mobile app

$amoxinH said:
Thanks for the information...
I use market helper with Galaxay S5 activated as my device...
Sent from my GT-S5282 using XDA-Developers mobile app
Click to expand...
Click to collapse
Anytime

Unable to change GPS joystick as a system app

Hello Everyone,
I have rooted my phone and am using GPS joystick Fake GPS location app from the play store. I am using a private mode within this app which helps me to create a copy of the app with a different name so that POGO does not detect it.
Everything works fine till here. I am using Lucky patcher to change the installed cloned app as a system app and it asks for a restart, after restart the cloned app goes missing.
I have no idea what is gng wrong and would need some light and help on this.
I am using a Xiaomi Mi Max
Android Version : 7.0 NRD90M
Android Security Patch Level: 2017-11-01
MIUI Version: MIUI Stable 9.2

Anish3591 said:
Hello Everyone,
I have rooted my phone and am using GPS joystick Fake GPS location app from the play store. I am using a private mode within this app which helps me to create a copy of the app with a different name so that POGO does not detect it.
Everything works fine till here. I am using Lucky patcher to change the installed cloned app as a system app and it asks for a restart, after restart the cloned app goes missing.
I have no idea what is gng wrong and would need some light and help on this.
I am using a Xiaomi Mi Max
Android Version : 7.0 NRD90M
Android Security Patch Level: 2017-11-01
MIUI Version: MIUI Stable 9.2
Click to expand...
Click to collapse
As long as you use banned apps (lucky patcher) you will find no help here.

zelendel said:
As long as you use banned apps (lucky patcher) you will find no help here.
Click to expand...
Click to collapse
I was told that was one of the apps to use, I do not mind using any other apps to get an app changed to a system app.
Lucky patcher was an option that i got through one of the threads on google, but couldnt get it to work too, so posted to check if someone could help on here

Anish3591 said:
I was told that was one of the apps to use, I do not mind using any other apps to get an app changed to a system app.
Lucky patcher was an option that i got through one of the threads on google, but couldnt get it to work too, so posted to check if someone could help on here
Click to expand...
Click to collapse
You can't use Titainium backup that does it but other then that I don't know. I don't mess with things like that.
Also just be careful. They are banning people caught cheating. To the point of banning the device itself.

zelendel said:
You can't use Titainium backup that does it but other then that I don't know. I don't mess with things like that.
Also just be careful. They are banning people caught cheating. To the point of banning the device itself.
Click to expand...
Click to collapse
I am doing this for a friend, he is using 2 iphones and one android and facing issues on the android
He is aware of all the rules, but some people learn it the hard way
Thank You for your help, i hope i get something from someone else

Anish3591 said:
I am doing this for a friend, he is using 2 iphones and one android and facing issues on the android
He is aware of all the rules, but some people learn it the hard way
Thank You for your help, i hope i get something from someone else
Click to expand...
Click to collapse
Use titanium backup. Saw the auto correct was a mistake. That is really the only way but even then it has been detected by the game.

zelendel said:
Use titanium backup. Saw the auto correct was a mistake. That is really the only way but even then it has been detected by the game.
Click to expand...
Click to collapse
Can we not make an app a system app without using any of these apps?
IF i am right does it not just move the data/app to priv/app folder?

Anish3591 said:
Can we not make an app a system app without using any of these apps?
IF i am right does it not just move the data/app to priv/app folder?
Click to expand...
Click to collapse
It does but it requires root. You could try just moving it with a file explorer but no promises it will work. Normally system apps only work when flashed. Also they tend to code things to look in the data partition. So moving it to system can cause issues.
You can try a few but no promises.

zelendel said:
It does but it requires root. You could try just moving it with a file explorer but no promises it will work. Normally system apps only work when flashed. Also they tend to code things to look in the data partition. So moving it to system can cause issues.
You can try a few but no promises.
Click to expand...
Click to collapse
The phone is rooted for sure, but moving the data/app to priv/app then when I reboot it.. the files go missing! As if it was never pasted there...! That is what is causing all the issues!

Anish3591 said:
The phone is rooted for sure, but moving the data/app to priv/app then when I reboot it.. the files go missing! As if it was never pasted there...! That is what is causing all the issues!
Click to expand...
Click to collapse
That's most likely due to the signature. All apps in system need to have the same signature. Without it the apk won't run at all.
I can't help any more then that. People here don't use multiple versions of the same app.