Jillian Ke
Mar 16, 2018
7:26 pm

list of (internet permission) pkgs to be safely disabled

Hi

I'm trying to disable pkgs for we want to minimize the number of apps that can "talk "to network.

on my J7,  I use below code to get list of packages, and then try to disable every pkgs that has  android.permission.INTERNET

 pm.getInstalledApplications(PackageManager.GET_META_DATA);

on J7, I found 255 installed apps (including mine), 121 has internet permission.

 

Now, my phone will be in a state where it constantly complains about "Context" or "com.android.phone" ..etc.

Ideally, the phone will be a single usage device , which means only my app can be launched.

 

I tried to put some apps to whielist and only disable the others. However, I couldn't really find a proper combination of list of apps to be safely disabled.

Could you please help me identify what are the "essential apps" for system to startup properly in below list that I should NOT disable??

 

Thank you

===============

package:com.android.bluetooth
package:com.android.calendar
package:com.android.captiveportallogin
package:com.android.certinstaller
package:com.android.chrome
package:com.android.managedprovisioning
package:com.android.pacprocessor
package:com.android.phone
package:com.android.providers.calendar
package:com.android.providers.downloads
package:com.android.proxyhandler
package:com.android.settings
package:com.android.statementservice
package:com.android.systemui
package:com.android.vending
package:com.dsi.ant.service.socket
package:com.enhance.gameservice
package:com.facebook.appmanager
package:com.facebook.services
package:com.gd.mobicore.pa
package:com.google.android.apps.docs
package:com.google.android.apps.maps
package:com.google.android.apps.photos
package:com.google.android.apps.tachyon
package:com.google.android.configupdater
package:com.google.android.feedback
package:com.google.android.gm
package:com.google.android.googlequicksearchbox
package:com.google.android.gsf
package:com.google.android.gsf.login
package:com.google.android.marvin.talkback
package:com.google.android.music
package:com.google.android.partnersetup
package:com.google.android.printservice.recommendation
package:com.google.android.setupwizard
package:com.google.android.syncadapters.calendar
package:com.google.android.syncadapters.contacts
package:com.google.android.tts
package:com.google.android.videos
package:com.google.android.youtube
package:com.hancom.office.viewer
package:com.osp.app.signin
package:com.policydm
package:com.samsung.android.allshare.service.fileshare
package:com.samsung.android.allshare.service.mediashare
package:com.samsung.android.app.assistantmenu
package:com.samsung.android.app.notes
package:com.samsung.android.app.simplesharing
package:com.samsung.android.app.soundpicker
package:com.samsung.android.app.watchmanager
package:com.samsung.android.app.watchmanagerstub
package:com.samsung.android.app.withtv
package:com.samsung.android.bbc.bbcagent
package:com.samsung.android.calendar
package:com.samsung.android.communicationservice
package:com.samsung.android.contacts
package:com.samsung.android.coreapps
package:com.samsung.android.dlp.service
package:com.samsung.android.dqagent
package:com.samsung.android.easysetup
package:com.samsung.android.email.provider
package:com.samsung.android.fmm
package:com.samsung.android.incallui
package:com.samsung.android.lool
package:com.samsung.android.messaging
package:com.samsung.android.networkdiagnostic
package:com.samsung.android.provider.filterprovider
package:com.samsung.android.provider.shootingmodeprovider
package:com.samsung.android.providers.context
package:com.samsung.android.scloud
package:com.samsung.android.securitylogagent
package:com.samsung.android.SettingsReceiver
package:com.samsung.android.sm.devicesecurity
package:com.samsung.android.svcagent
package:com.samsung.android.themestore
package:com.samsung.android.video
package:com.samsung.android.weather
package:com.samsung.dcmservice
package:com.samsung.klmsagent
package:com.samsung.knox.appsupdateagent
package:com.samsung.knox.securefolder
package:com.samsung.oh
package:com.samsung.safetyinformation
package:com.samsung.SMT
package:com.samsung.tmowfc.wfccontroller
package:com.samsung.ucs.agent.boot
package:com.samsung.upsmtheme
package:com.sec.android.app.billing
package:com.sec.android.app.camera
package:com.sec.android.app.clockpackage
package:com.sec.android.app.DataCreate
package:com.sec.android.app.dictionary
package:com.sec.android.app.launcher
package:com.sec.android.app.myfiles
package:com.sec.android.app.popupcalculator
package:com.sec.android.app.safetyassurance
package:com.sec.android.app.samsungapps
package:com.sec.android.app.sbrowser
package:com.sec.android.app.soundalive
package:com.sec.android.daemonapp
package:com.sec.android.diagmonagent
package:com.sec.android.easyMover.Agent
package:com.sec.android.emergencylauncher
package:com.sec.android.gallery3d
package:com.sec.android.inputmethod
package:com.sec.android.mimage.photoretouching
package:com.sec.android.soagent
package:com.sec.android.widgetapp.samsungapps
package:com.sec.app.RilErrorNotifier
package:com.sec.enterprise.knox.attestation
package:com.sec.enterprise.knox.cloudmdm.smdms
package:com.sec.factory
package:com.sec.factory.camera
package:com.sec.imsservice
package:com.sec.internal.ims.util.httpclient
package:com.sec.location.nsflp2
package:com.sec.spp.push
package:com.sec.vsim.ericssonnsds.webapp
package:com.sec.vsimservice
package:com.wssnps
package:com.wssyncmldm
 

 

Similar topics

No similar topics found.
Samuel Goldwax
Mar 19, 2018
4:59 pm

Hi Jillian,

I think the solution here is to use Knox's container-only mode (COM) or KioskMode, depending on the intended functionality. Both of these allow you to limit and control which apps the end user has access to without needed to disable any packages explicitly. If you can elaborate a little more on what your intended functionality is, I'd be happy to give you a better idea of how it can be done using Knox APIs.

Thanks,

Sam