白名单优化.

Author: liuhuo.xd

sample/src/main/java/com/xdandroid/sample/misc/GenOpsActivity.java

@@ -8,6 +8,8 @@
 import java.io.*;
 import java.util.stream.*;
 
+import static com.xdandroid.sample.misc.RevokeActivity.*;
+
 /**
  * uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE"
  * android:theme="@android:style/Theme.NoDisplay"
@@ -18,7 +20,7 @@ static String genOp(String pkg, String op) {
         String mode;
         switch (op) {
             case "RUN_IN_BACKGROUND":
-                mode = "ignore";
+                mode = WHITE_LIST_APPS.contains(pkg) ? "allow" : "ignore";
                 break;
             default:
                 mode = "ignore";
@@ -48,9 +50,7 @@ protected void onCreate(Bundle savedInstanceState) {
                                    .filter(i -> (i.applicationInfo.flags & ApplicationInfo.FLAG_SYSTEM) == 0)
                                    .filter(i -> (i.applicationInfo.flags & ApplicationInfo.FLAG_UPDATED_SYSTEM_APP) == 0)
                                    .map(i -> i.applicationInfo.packageName)
-                                   .flatMap(n -> Stream
-                                           .of("WIFI_SCAN", "WAKE_LOCK", "RUN_IN_BACKGROUND", "WRITE_SETTINGS", "SYSTEM_ALERT_WINDOW")
-                                           .map(op -> genOp(n, op)))
+                                   .flatMap(n -> Stream.of(BLACK_LIST_OPS).map(op -> genOp(n, op)))
                                    .forEach(op -> {
                                        try { fos.write(op.getBytes("UTF-8")); } catch (IOException e) { throw asUnchecked(e); }
                                    });

sample/src/main/java/com/xdandroid/sample/misc/KillActivity.java

@@ -6,6 +6,8 @@
 
 import java.lang.reflect.*;
 
+import static com.xdandroid.sample.misc.RevokeActivity.*;
+
 /**
  * uses-permission android:name="android.permission.FORCE_STOP_PACKAGES"
  * android:theme="@android:style/Theme.NoDisplay"
@@ -18,15 +20,14 @@ protected void onCreate(Bundle savedInstanceState) {
         if (Build.VERSION.SDK_INT < Build.VERSION_CODES.N) return;
         new Thread(() -> {
             try {
-                String thisApp = getPackageName();
                 Method m = ActivityManager.class.getMethod("forceStopPackage", String.class);
                 ActivityManager am = getSystemService(ActivityManager.class);
                 getPackageManager().getInstalledPackages(0)
                                    .stream()
                                    .filter(i -> (i.applicationInfo.flags & ApplicationInfo.FLAG_SYSTEM) == 0)
                                    .filter(i -> (i.applicationInfo.flags & ApplicationInfo.FLAG_UPDATED_SYSTEM_APP) == 0)
                                    .map(i -> i.packageName)
-                                   .filter(n -> !thisApp.equals(n))
+                                   .filter(n -> !WHITE_LIST_APPS.contains(n))
                                    .forEach(n -> {
                                        try { m.invoke(am, n); } catch (Exception e) { e.printStackTrace(); }
                                    });

sample/src/main/java/com/xdandroid/sample/misc/RevokeActivity.java

@@ -14,6 +14,26 @@
  */
 public class RevokeActivity extends Activity {
 
+    static final List<String> WHITE_LIST_APPS = Arrays.asList(
+            "com.github.shadowsocks",
+            "com.tencent.mm",
+            "com.xdandroid.kill",
+            "me.piebridge.brevent"
+    );
+
+    static final List<String> WHITE_LIST_PERMISSIONS = Arrays.asList(
+            "android.permission.READ_EXTERNAL_STORAGE",
+            "android.permission.WRITE_EXTERNAL_STORAGE"
+    );
+
+    static final String[] BLACK_LIST_OPS = {
+            "WIFI_SCAN",
+            "WAKE_LOCK",
+            "RUN_IN_BACKGROUND",
+            "WRITE_SETTINGS",
+            "SYSTEM_ALERT_WINDOW"
+    };
+
     @Override
     protected void onCreate(Bundle savedInstanceState) {
         super.onCreate(savedInstanceState);
@@ -33,7 +53,7 @@ protected void onCreate(Bundle savedInstanceState) {
                       String n = i.applicationInfo.packageName;
                       try { setModeMethod.invoke(aom, 10, uid, n, AppOpsManager.MODE_IGNORED); } catch (Exception e) { e.printStackTrace(); }
                       try { setModeMethod.invoke(aom, 40, uid, n, AppOpsManager.MODE_IGNORED); } catch (Exception e) { e.printStackTrace(); }
-                      try { setModeMethod.invoke(aom, 63, uid, n, AppOpsManager.MODE_IGNORED); } catch (Exception e) { e.printStackTrace(); }
+                      try { setModeMethod.invoke(aom, 63, uid, n, WHITE_LIST_APPS.contains(n) ? AppOpsManager.MODE_ALLOWED : AppOpsManager.MODE_IGNORED); } catch (Exception e) { e.printStackTrace(); }
                       if (i.applicationInfo.targetSdkVersion < Build.VERSION_CODES.M && i.requestedPermissions != null) {
                           Arrays.stream(i.requestedPermissions)
                                 .map(p -> {
@@ -43,8 +63,7 @@ protected void onCreate(Bundle savedInstanceState) {
                                 .filter(pi -> (pi.protectionLevel & PermissionInfo.PROTECTION_MASK_BASE) == PermissionInfo.PROTECTION_DANGEROUS)
                                 .map(pi -> pi.name)
                                 .filter(pn -> pn.startsWith("android"))
-                                .filter(pn -> !"android.permission.READ_EXTERNAL_STORAGE".equals(pn))
-                                .filter(pn -> !"android.permission.WRITE_EXTERNAL_STORAGE".equals(pn))
+                                .filter(pn -> !WHITE_LIST_PERMISSIONS.contains(pn))
                                 .map(AppOpsManager::permissionToOp)
                                 .filter(op -> !TextUtils.isEmpty(op))
                                 .forEach(op -> {