this post was submitted on 29 Sep 2023
105 points (100.0% liked)

Privacy

789 readers
10 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Do not really understand how Android sandboxing works for system apps.

you are viewing a single comment's thread
view the rest of the comments
[–] onlinepersona@programming.dev 6 points 1 year ago* (last edited 1 year ago) (2 children)

In order to have google apps and google services on an android installation that doesn't have them yet, you need to sideload them. LineageOS has a list of GApps zips and here's an example of how to install them for a FairPhone running LineageOS.

If you look into the zip /system/system_ext/etc/permissions/privapp-permissions-google-system-ext.xml, you can see all the permissions given to it a system application.

android.permission.RECOVERY, android.permission.MANAGE_USERS, android.permission.INTERACT_ACROSS_USERS stand out the most. These permissions allow the phone to be started, arbitrary apps to be installed and users to be created with new permissions.

Google Services doesn't need to have access to camera or any other component as it can install whatever it likes that has access to those.

Let's not kid ourselves, if you have Google Services installed, you have a rootkit installed with a bunch of proprietary code.

~~Here's the entire file for reference and you can look up each permission individually to see what access will be given.~~ lemmy doesn't handle XML in triple backticks well (at all).

[–] ViciousTurducken@lemmy.one 4 points 1 year ago

How well do you think Graphene's sandboxed play services alleviates these concerns?

[–] FarLine99@lemm.ee 3 points 1 year ago

Thanks for the detailed response. Creating/interacting between new users is a serious opportunity for permission bypass. Content of the file won't load for some reason, but still :)