Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

It seems ifw won't block implicit broadcast #1050

Open
RichardLuo0 opened this issue Oct 13, 2024 · 1 comment
Open

It seems ifw won't block implicit broadcast #1050

RichardLuo0 opened this issue Oct 13, 2024 · 1 comment

Comments

@RichardLuo0
Copy link

RichardLuo0 commented Oct 13, 2024

I used blocker to disable a boot receiver of a app. In the meantime I used my own Xposed module to monitor the app's behavior (basically hooked ActivityThread). And it turns out the app indeed received the boot complete intent. I also checked the /data/ifw, and the receiver is blocked in the file.
Though, other blocked components will be blocked. Sending broadcast to them will throw a security exception.
I tried to find the related source code in android source. But its too complicated for me. Is there any document related to this issue?
Maybe you could mention this in blocker's document. I also wish someone could verify my theory. Or probably it's only in my ROM.

Android 14, Lineage os 21

@RichardLuo0
Copy link
Author

RichardLuo0 commented Oct 13, 2024

I think I know what's happening. It's a broadcast, so it doesn't know which component to be matched when it's being sent. Thus ifw will not match any component rule. When the broadcast arrives app, the app won't check the ifw.
To fix this, according to https://carteryagemann.com/pages/android-intent-firewall.html , you need to add intent-filter instead of component-filter.

@RichardLuo0 RichardLuo0 changed the title It seems ifw won't block system broadcast It seems ifw won't block implicit broadcast Oct 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant