App Manager
ユーザーマニュアル
v3.1.0
24 3月 2023
Copyright © 2020–2022 Muntashir Al-Islam
“賢明に、そして、ゆっくりと。速く走る者たちは、つまずきますからな” — 修道士ロレンス, ロメオとジュリエット
App Manager は、Android 用の高度なパッケージマネージャです。
数え切れないほどの機能を備えているため、ユーザーを支援するためのユーザーマニュアルが必要です。
このドキュメントは、App Manager
が提供するすべての機能を説明することを目的としており、App Manager
のユーザーマニュアルとして機能します。 また、このドキュメントは、App
Managerの「公式」ガイドラインと考えることもでき、App
Managerに期待される動作を表しています。
翻訳によって、このドキュメント(英語で書かれている)が誤解される可能性があります。
したがって、すべての有能なユーザは、App
Managerを最大限に活用するために、英語版のドキュメントを読む必要があります。
ブログ記事、ビデオ、チャットグループなど、他の非公式またはサードパーティのリソースも同様に存在するかもしれません。
これらのリソースは多くの人にとって有用かもしれませんが、App
Managerの最新バージョンに対応していない可能性があります。App
Managerでこのドキュメントからの逸脱が検出された場合、App Managerのイシュートラッカーからご報告ください。 AM — App Managerの略称です。 ブロック/ブロック解除 —
コンポーネントのブロックまたはブロック解除に使用されます。コンポーネントをどのようにブロックするかは、ユーザーの設定に依存します。 IFW —
インテントファイアウォールの略称です。 Ops —
Operations(操作)の略称です。例:AppOps、バッチ操作 SSAID —
トラッカー — スキャナーページを除き、このドキュメント全体およびApp
Managerでトラッカーコンポーネントのことを表します。トラッカーには、クラッシュレポーター、アナリティクス、プロファイリング、識別、広告、位置情報などのライブラリが含まれます。したがって、これらの機能は同等ではありません。また、トラッキングを促進するライブラリにはオープンソース、クローズドソースの区別や偏りはありません。 現在、サポートされているバージョンは、v2.6.0 (安定版)、 v3.0.0 (alpha
と デバッグビルド)です。 App
Managerの旧バージョンは、セキュリティ上の脆弱性が含まれている可能性があるため、使用しないでください。 App
Managerは、以下のソースを使用して配布されています。非公式なソースは、App
Managerの修正されたバージョンを配布する可能性があり、
そのようなバージョンを使用した結果について、一切の責任を負わないものとします。 Official F-Droid repository.1 GitHub repository. Telegram. GitHub以外はそのミラーです。タグは常に最新であるべきですが、masterブランチが最新であることは保証されていません。
masterブランチのクローンを作成することが目的であれば、他のリンクではなくGitHubのリンクを使用してください。 App
Managerは、プル/マージリクエストによる翻訳を直接受け付けていません。翻訳は、Weblate
を介して自動的に管理されます。 翻訳チームに参加するには、https://hosted.weblate.org/engage/app-manager/をご覧ください。 ユーザーは、役に立つ課題の作成、議論への参加、ドキュメントや翻訳の改善、未認識のライブラリやトラッカーの追加、
ソースコードのレビュー、セキュリティ脆弱性の報告など、さまざまな方法でAppManagerの開発に貢献することができます。 ビルド手順は、ソースコードのルートディレクトリにあるBUILDINGファイルに記載されています。 現在、GitHub以外のリポジトリはそのミラーであり、これらのサイトで提出されたプル/マージリクエストは受け付けていません。2
その代わり、パッチ( Notice. 電子メールでパッチを提出する場合、将来的に会話全体が公にアクセス可能となる可能性があります。
そのため、名前とメールアドレス以外の個人を特定できる情報(PII)は記載しないでください。 App
Managerを使用するのに、寄付や購入は必須ではありません。App
Managerは購入をサポートしていませんが、 Open Source
Collectiveを通じてApp Managerの開発者に寄付を送ることができます。 Open Source
Collectiveは、オープンソースプロジェクトの財政管理を支援するOpen
Collectiveプラットフォーム内の財政ホストです。
現在は銀行振り込み、PayPal、クレジットカード、デビットカード、暗号通貨による寄付に対応しています。 リンク: https://opencollective.com/muntashir. 寄付を送ることにより、あなたは寄付を利用して要求された機能を優先させないことに同意するものとします。
機能リクエストは、賞金や寄付を必要とせず、開発者の好みに応じて優先順位がつけられます。 App
Managerは、資金提供や助成金の申し出を受け付けています。利害関係のある組織の代表者は、§1.6に記載されている連絡先を使用して開発者に直接連絡することができます。 Muntashir Al-Islam31.1 用語の定義
Settings.Secure.ANDROID_ID
の略称です。各アプリに割り当てられる端末識別子(Android
Oreo以降)で、
アプリの署名証明書とパッケージandroid
に設定されたSSAIDの組み合わせから生成されます。
そのため、ユーザーが端末のフォーマットを選択しない限り、
アプリに対して同一であることが保証されます。ユーザーの追跡に広く利用されています。1.2 対応バージョン
1.3 公式ソース
1.3.1
バイナリ配布ソース
リンク: https://f-droid.org/packages/io.github.muntashirakon.AppManager
安定版: https://github.com/MuntashirAkon/AppManager/releases
デバッグビルド: https://github.com/MuntashirAkon/AppManager/actions
安定版: https://t.me/AppManagerChannel
デバッグビルド: https://t.me/AppManagerDebug1.3.2
ソースコードへのリンク
1.3.3
翻訳
1.4 貢献する
1.4.1
ビルド手順
1.4.2
パッチを提出する
.patch
ファイル)を電子メールに添付して提出することができます。コミットにサインオフを行う必要があります。
詳細は、ソースのルートディレクトリにあるCONTRIBUTINGファイルをご参照してください。1.5 寄付、出資
1.6 連絡先
Eメール: muntashirakon [at]
riseup [dot] net
GPG鍵フィンガープリント:
7bad37c2981e41f8f6abea7f58f0b4f26c346fce
GitHub: https://github.com/MuntashirAkon
Twitter: https://twitter.com/Muntashir
メインページには、インストールされているアプリケーション、アンインストールされているアプリケーション、バックアップされているアプリケーションがすべて表示されます。
インストールされているアプリケーションの項目をタップすると、それぞれのアプリケーションの詳細ページが表示されます。
アンインストールされたシステムアプリの場合は、アプリの再インストールを行うことができるプロンプトが表示されます。
表示オプションの並び替え
を使用して、アプリの項目をさまざまな方法でソートし、終了時に保存することができます。
また、フィルタを使用して、項目を絞り込むことも可能です。
検索バーを使ったフィルタリングも可能で、正規表現もサポートされています。 このページでは、一括操作や複数のアプリケーションに対する操作も可能です。
複数選択モードは、アプリのアイコンをタップするか、リスト内の任意の項目を長押しすることで有効になります。
一度アクティブにすると、アプリの詳細ページを開く代わりに、リストの項目をシングルクリックすることでそのアプリが選択されます。
このモードで、一括操作はページ下部の複数選択メニューに表示されます。次のような操作が含まれます: 選択したアプリケーションをプロファイルに追加する アプリケーションのバックアップ、リストア、削除 アプリケーションからのトラッカーをブロックする アプリケーションのデータまたはキャッシュを消去する アプリケーションの有効化/無効化/強制停止/アンインストール App Managerに保存したブロッキングルールをエクスポート アプリケーションのバックグラウンド動作を禁止する(Android
7以降) APKファイルを ネット接続ポリシーを適用する Accessibility. 複数選択モードを有効にした後、キーボードまたはリモコンの左右キーで複数選択メニューにナビゲートすることが可能です。 ライトグレーオレンジ(ライトモード) /
紺色 (ナイトモード) –
バッチ処理で選択したアプリ 薄い赤色(ライトモード) / 茶色(ナイトモード) –
無効化されたアプリ 黄色 – デバッグ可能なアプリ オレンジ色の 日付 –
アプリはシステムログにアクセス可能 オレンジ色の UID –
複数のアプリでユーザーIDを共有している オレンジ色の SDK –
アプリケーションが平文(HTTPなど)のトラフィックを使用している可能性がある 赤色の パッケージ名 –
データの消去を許可していないアプリ 赤色の バックアップ –
AppManager に 1
つ以上のバックアップが存在するアンインストールされたアプリケーション オレンジ色の
バックアップ –
古いバックアップ,つまり、ベースバックアップにインストールされたアプリケーションの古いバージョンが含まれています シアン色の
バックアップ – 最新のバックアップ,
つまり、ベースバックアップには、インストールされたアプリケーションと同じかそれ以上のバージョンが含まれています シアン色の
パッケージ名 – 強制停止されたアプリ シアン色の
バージョン – 非アクティブなアプリ マゼンダ –
永続的なアプリケーション、つまり、常に実行状態のままです アプリには、ユーザーアプリとシステムアプリがあり、次の接尾辞が付きます: バージョン名の後には、次の接頭辞が付きます:2.1.1
バッチ処理
AppManager/apks
に保存する2.1.2
カラーコード
2.1.3
アプリケーションタイプ
X
–
マルチアーキテクチャをサポートしています0
– アプリにDEXファイルが存在しません°
– 休止したアプリ#
–
アプリはシステムに大きなヒープ、すなわち大きな実行時メモリを割り当てるよう要求しています?
–
アプリは仮想マシンをセーフモードにするよう要求しています2.1.4
バージョン情報
_
–
ハードウェアアクセラレーションを使用していません(アプリ内のアニメーションや透明度が壊れる)~
– テストビルドのアプリdebug
– デバッグ可能なアプリ
アプリ詳細ページは、11個のタブで構成されています。
マニフェストのすべての属性、AppOps、署名情報、ライブラリなど、
アプリが持ちうるほぼすべての情報が記述されています。 このページで使用している背景色とその意味の一覧です: 赤 (ライト) / 紅赤
(ナイト) – Dangerousフラグを持つAppOpsや権限、またはApp
Manager内でブロックされたコンポーネントを表します。 うすだいだい (ライト) / 茶色
(ナイト) – App
Managerの外部で無効化されているコンポーネントを表します。 Note. 無効とマークされたコンポーネントは、必ずしもユーザーによって無効化されたことを意味するものではありません。
システムによって無効にされているか、マニフェストで無効とマークされている可能性もあります。
無効なアプリケーションのコンポーネントは、システム (および App Manager)
によっても無効とみなされます。 オレンジ (ライト) / うすいオレンジ (night) –
トラッカーコンポーネントを表します。 Soft magenta (day) / very dark violet (night) –
実行中のサービスを表します。 アプリ情報タブには、アプリケーションに関する一般的な情報が含まれています。
また、このタブ内で実行可能な多くのアクションが表示されます。 以下のリストは、アプリ情報タブに記載されている順番と同じです。 アプリ名
アプリのアイコンです。アプリにアイコンがない場合は、システムデフォルトのアイコンが表示されます。 アプリ名 アプリの名称です。 バージョン
アプリケーションのバージョンは、2つの部分に分かれています。最初の部分はバージョン名と呼ばれ、この部分のフォーマットは様々ですが、多くの場合ドットで区切られた複数の整数から構成されています。2つ目の部分はバージョンコードと呼ばれ、バージョン名の横の括弧内に記載されています。バージョンコードは整数で、通常はアプリのバージョンを区別するために使用されます。(バージョン名は機械では読めないことが多いため)一般に、新しいバージョンのアプリは、古いバージョンのアプリよりもバージョンコードが高くなります。たとえば、あるアプリのバージョンコードが タグ
タグには、アプリの基本的で簡潔な、有用な情報が含まれています。例えば、トラッカー情報(トラッカーコンポーネントの数など)、アプリの種類(ユーザーアプリかシステムアプリか、アプリがシステムアプリの更新版かMagiskを使ってシステムレスでインストールされたか)、実行中(アプリのサービスがバックグラウンドで実行されているか)、分割APK情報(例.
split APK
info(分割数)、debuggable(アプリはデバッグバージョン)、test
only(アプリはテスト専用アプリ)、ラージヒープ(アプリは大きなヒープサイズを要求)、停止(アプリは強制停止)、無効(アプリは無効)、キーストア(アプリはAndroid
KeyStoreにアイテムがある)、no
code(アプリにはコードが関連付けられていない)、SSAID、netpolicy(バックグラウンドデータ使用などネットワークポリシー)、バッテリー最適化が表示されます。test
onlyとdebuggableを含めることの重要性は、これらのプロパティを持つアプリが追加のタスクを実行できること、またはこれらのアプリが個人情報を保存する場合、セキュリティ上の問題を引き起こす可能性のあるルートなしで実行できることにあります。ラージヒープは、アプリが必要に応じてより多くのメモリ(RAM)を割り当てられることを意味します。ほとんどの場合、これは有害ではないかもしれませんが、大きなヒープを要求する不審なアプリは慎重に考慮する必要があります。 アクションパネル
アプリに関する様々なアクションを含むアクションパネルです。ここで利用できるアクションの一覧は、2.2.2.3節を参照してください。 パスとディレクトリ
アプリディレクトリ(APK
ファイルが格納される場所)、データディレクトリ(内部、デバイス保護、外部)、分割
APK ディレクトリ(分割名と共に)、ネイティブ JNI
ライブラリ(存在する場合)を含むアプリケーションパスに関するさまざまな情報が含まれています。JNI
ライブラリは、通常 C/C++
で記述されたネイティブコードを呼び出すために使用されます。ネイティブライブラリを使用すると、アプリの実行速度が向上したり、ほとんどのゲームのようにJava以外の言語で書かれたサードパーティライブラリをアプリが使用できるようになります。これらのディレクトリは、各項目の右側にある起動アイコンをクリックして、お気に入りのファイルマネージャ(サポートしており、必要なパーミッションがある場合)を使用して開くこともできます。 最終起動時からのデータ使用量
説明不要のオプションです。しかし、いくつかの問題のために、結果はしばしば誤解を招き、単に間違っている可能性があることに注意してください。この部分は、新しいデバイスで使用状況へのアクセス許可が与えられていない場合、隠されたままになります。 ストレージとキャッシュ
アプリ(APKファイル)、データ、キャッシュのサイズに関する情報を表示します。古い端末では、外部データ、キャッシュ、メディア、OBBフォルダのサイズも表示されます。この部分は、新しいデバイスで
使用状況へのアクセス許可が与えられていない場合、隠されたままになります。 詳細情報 次のような情報を表示します。 SDK Android
SDKに関連する情報を表示します。値は2つ(古い端末では1つ)あります。最大はターゲットSDK、最小は最小SDKを表します(後者はそれ以上古い端末では利用できません)。現在プラットフォームがサポートしている最大のSDKを持つアプリを使用するのが好ましいです。SDKは、APIレベルとも呼ばれます。 こちらもご覧ください: Androidのバージョン履歴 フラグ The application flags used at the time of
building the app. For a complete list of flags and what they do, visit
the official
documentation.
アプリのビルド時に使用するアプリケーションフラグです。フラグの完全なリストとその役割については、公式ドキュメントを参照してください。 インストール日時
アプリが最初にインストールされた日時です。 アップデート日時
アプリが最後に更新された日時です。アプリが更新されていない場合は、インストール日時と同じになります。 インストール日時
このアプリをインストールしたアプリです。すべてのアプリが、インストーラアプリを登録するためにパッケージマネージャに使用する情報を提供するわけではありません。そのため、この値を鵜呑みにするべきではありません。 ユーザーID
Androidシステムがアプリに設定した固有のユーザーIDです。共有アプリケーションの場合、同じ共有ユーザーIDを持つ複数のアプリケーションに同じユーザーIDが割り当てられます。 共有UID
一緒に共有するアプリケーションに適用されます。IDとありますが、実際は文字列の値です。共有するアプリケーションは、同じ署名を持つ必要があります。 メインアクティビティ アプリ起動時のアクティビティです。アプリにアクティビティがあり、そのいずれかがランチャーから開くことができる場合にのみ表示されます。また、右側には起動ボタンがあり、このアクティビティを起動するために使用することができます。 前項のアクションパネルは、次のようなアプリに関連するさまざまなアクションで構成されています。 起動 ランチャーアクティビティを持つアプリケーションは、このボタンから起動することができます。 無効化
アプリを無効化します。アプリがすでに無効になっている場合や、RootアクセスやADBを持っていないユーザーには、このボタンは表示されません。アプリを無効にすると、そのアプリはランチャーアプリに表示されなくなります。また、そのアプリのショートカットも削除されます。ユーザーアプリを無効にした場合、App
Managerまたはそれに対応する他のツールからのみ有効にすることができます。Androidの設定には、無効にしたユーザーアプリを有効にするオプションはありません。 アンインストール
アプリをアンインストールします。 有効化
アプリを有効化します。アプリがすでに有効化されている場合や、RootアクセスやADBを持っていないユーザーには、このボタンは表示されません。 強制終了 アプリを強制停止します。
アプリを強制停止すると、明示的にアプリを開いてからでないと、そのアプリはバックグラウンドで実行できなくなります。しかし、これは必ずしも正しいとは限りません。 データを消去
アプリのデータを消去します。これには、アカウント(アプリによって設定されている場合)、キャッシュなど、内部および多くの場合外部のディレクトリに保存されているすべての情報が含まれます。例えば、App
Managerからデータを消去すると、アプリ内に保存されているすべてのルールが削除されます(ただし、ブロックは削除されません)。そのため、ルールのバックアップを常に取っておく必要があります。このボタンは、RootアクセスまたはADBを持っていないユーザーには表示されません。 キャッシュを消去
アプリのキャッシュのみをクリアします。アプリのキャッシュをクリアする方法は、Android自体にはありません。そのため、アプリの内部ストレージからキャッシュをクリアするには、Root権限が必要です。 インストール
サードパーティのアプリで開いたAPKをインストールします。このボタンは、インストールされていない外部APKの場合のみ表示されます。 最新情報
インストールされているAPKよりもバージョンコードの高いAPKに対して表示されるボタンです。このボタンをクリックすると、バージョン間の差分がダイアログで表示されます。表示される情報は、バージョン、トラッカー、パーミッション、コンポーネント、署名情報(チェックサムの変更)、機能、共有ライブラリ、SDKなどです。 アップデート
インストールされているアプリよりバージョンコードが高いアプリに対して表示されます。 再インストール
インストールされているアプリと同じバージョンコードを持つアプリに対して表示されます。 ダウングレード
インストールされているアプリよりバージョンコードが低いアプリに対して表示されます。 マニフェスト
このボタンをクリックすると、アプリのマニフェストファイルが別ページで表示されます。マニフェストファイルは、対応するトグルボタン
(右上)
を使用してラップまたはアンラップすることができ、保存ボタンを使用して共有ストレージに保存することができます。 スキャナー
このボタンをクリックすると、アプリのトラッカーとライブラリの情報が表示されます。まず、アプリをスキャンして、クラスのリストを抽出し、クラス一覧と複数のシグネチャをマッチングさせます。その後、スキャン結果が表示されます。 こちらもご覧ください: スキャナーページ 共有設定
このボタンをクリックすると、アプリで使用されている共有環境設定の一覧が表示されます。リスト内の設定項目をクリックすると、共有設定エディターが表示されます。このオプションは、Rootユーザーのみに表示されます。 データベース
このボタンをクリックすると、アプリが使用しているデータベースの一覧が表示されます。これはもっと改良が必要で、将来的にはデータベース・エディターが追加されるかもしれません。このオプションは、Rootユーザーのみに表示されます。 F-Droid
任意のF-Droidクライアントでアプリのページを開きます。 ストア Aurora
Storeでアプリのページを開きます。このオプションは、Aurora
Storeがインストールされている場合のみ表示されます。 デフォルトでは、Termuxはサードパーティアプリケーションからのコマンドの実行が許可されていません。
このオプションを有効にするには、 Info. このオプションを有効にしても、Termuxのセキュリティは低下しません。
サードパーティアプリは、他の権限と同様に、Termuxで任意のコマンドを実行できるようにユーザーに要求する必要があります。 アクティビティ、サービス、レシーバ(ブロードキャストレシーバ)、プロバイダ(コンテンツプロバイダ)を合わせてアプリケーションコンポーネントと呼びます。
それらは多くの点で同様の機能を共有しているからです。例えば、それらはすべて名前とラベルを持っています。
コンポーネントは、あらゆるアプリケーションの構成要素であり、そのほとんどはアプリケーションマニフェストで宣言されなければなりません。
アプリケーションマニフェストは、アプリケーション固有のメタデータが格納されるファイルです。
Androidシステムは、メタデータを読み取ることで、アプリケーションで何を行うかを学習します。
これらのタブで使用される色については、§2.2.1で説明しています。
また、オーバーフローメニューのソートオプションを使用して、ブロックされたコンポーネントやトラッカーコンポーネントをリストの上位に表示するよう、
コンポーネントのリストを並び替える機能があります。 アクティビティは、アプリ内の閲覧できるウィンドウやページです(例えば、メインページとアプリ詳細ページは別のアクティビティです)。つまり、アクティビティは、ユーザーインターフェース(UI)のコンポーネントです。各アクティビティは、ウィジェットやフラグメントと呼ばれる複数のUIコンポーネントを持つことができ、同様に、後者のコンポーネントも、それぞれ複数のものを入れ子にしたり、オーバーレイすることができます。しかし、アクティビティはマスターコンポーネントです。アクティビティを2つネストさせることはできません。アプリケーションの開発者は、インテントフィルターと呼ばれる方法を使用して、アクティビティ内で外部ファイルを開くことを選択することもできます。ファイルマネージャーを使ってファイルを開こうとすると、ファイルマネージャーかシステムがインテントフィルターをスキャンして、どのアクティビティーがその特定のファイルを開けるかを決め、これらのアクティビティーでファイルを開けるように提案します。(したがって、アプリケーション自体には何の関係もありません) エクスポート可能なアクティビティは、通常、サードパーティアプリで開くことができます(一部のアクティビティには権限が必要なため、その場合はその権限を持つアプリケーションのみが開くことができます)。アクティビティタブでは、アクティビティ名(各リスト項目の上部)がボタンとなっています。これは、エクスポート可能なアクティビティでは有効で、それ以外では無効になっています(Rootユーザーはどのアクティビティでも開くことができます)。ボタンをクリックすると、App
Managerでアクティビティを直接開くことができます。また、アクティビティを長押しすることで、インタセプターのページを開くことができます。現在は、エクスポート可能なアクティビティに対してのみ機能します。 Notice. 例えば、アプリ詳細アクティビティは、少なくともパッケージ名を提供する必要があるため、開くことができません。これらの依存関係は、常にプログラムで推論することはできません。したがって、App
Managerを使用してそれらを開くことはできません。 また、これらのエクスポート可能なアクティビティのショートカットを作成し(専用ボタンを使用)、必要であれば、ショートカットの編集ボタンでショートカットも編集することができます。 Caution. App Managerをアンインストールすると、App
Managerで作成したショートカットはすべて失われます。 ユーザーが閲覧することができるアクティビティとは異なり、サービスはバックグラウンドタスクを処理します。
例えば、スマートフォンのブラウザを使ってインターネットからファイルをダウンロードする場合、ブラウザはコンテンツをダウンロードするためにバックグラウンドサービスを使用しています。 アクティビティを終了すると、通常はすぐにメモリ上から破棄されます(端末の空きメモリの量など、多くの要因に依存します)。しかしサービスは、必要に応じて無期限に実行することができます。より多くのサービスがバックグラウンドで実行されている場合、メモリや処理能力が不足するため、携帯電話の動作が遅くなり、携帯電話のバッテリーがより速く消耗する可能性があります。新しいAndroidのバージョンでは、すべてのアプリでバッテリーの最適化機能がデフォルトで有効になっています。この機能を有効にすると、システムは任意のサービスをランダムに終了させることができます。 ところで、アクティビティもサービスもメインルーパーと呼ばれる同じルーパーで実行されるため、サービスが本当にバックグラウンドで実行されているとは限りません。それを保証するのは、アプリケーションの開発者の仕事です。アプリケーションとサービスはブロードキャストレシーバーを使って通信しています。 レシーバー(ブロードキャストレシーバーとも呼ばれる)は、特定のイベントに対して特定のタスクの実行を呼び出すために使用することができます。これらのコンポーネントは、ブロードキャストメッセージを受信するとすぐに実行されるため、ブロードキャストレシーバーと呼ばれます。これらのブロードキャストメッセージは、インテントと呼ばれるメソッドを使用して送信されます。インテントはAndroidの特別な機能で、アプリケーションやアクティビティ、サービスを開いたり、ブロードキャストメッセージを送信したりするために使われます。そのため、アクティビティと同様に、ブロードキャストレシーバもインテントフィルターを用いて、必要なブロードキャストメッセージのみを受信することができます。ブロードキャストメッセージは、システムまたはアプリケーション自体のいずれかによって送信することができます。ブロードキャストメッセージが送信されると、対応するレシーバーはシステムによって起動され、タスクを実行できるようになります。例えば、メモリが少ない場合、モバイルデータを有効にしたり、Wifiに接続した後に、端末がフリーズしたり、一瞬ラグが発生することがあります。なぜだか不思議に思ったことはありませんか?これは、「android.net.conn.CONNECTIVITY_CHANGE」を受信できるブロードキャストレシーバーが、データ接続を有効にすると同時に、システムによって起こされるからです。多くのアプリがこのインテントフィルタを使っているため、これらのアプリはすべて、システムによってほとんどすぐに起こされ、フリーズや遅延の原因になっています。要するに、レシーバはプロセス間通信(IPC)、つまり異なるアプリ間(必要な権限がある場合)、あるいは単一アプリケーションの異なるコンポーネント間の通信に使用できます。 プロバイダ(コンテンツプロバイダともいう)は、アプリ内のデータ管理に使用されます。例えば、App
ManagerでAPKファイルの保存やルールのエクスポートを行う場合、「androidx.core.content.FileProvider」というコンテンツプロバイダを使用します。データベース管理、トラッキング、検索など、様々なコンテンツ関連のタスクを管理するために、他のコンテンツプロバイダや、カスタムプロバイダーもあります。各コンテンツプロバイダは、パッケージ名と同様に、Androidエコシステム全体でその特定のアプリケーションに固有のAuthorityと呼ばれるフィールドを持っています。 これらのタブでは非Rootユーザーよりも、Rootユーザーは様々な操作を行うことができます。 各コンポーネント項目の右端には、「ブロック」ボタンがあります。(ブロックされているときは「ブロック解除」ボタンとなります)
このボタンを使って、そのコンポーネントのブロックの状態を切り替えることができます。
インスタントブロッキングを有効にしていない場合、
または以前にアプリケーションにブロックを適用していない場合は、
3点メニューのルールを反映オプションで変更を適用する必要があります。
また、ルールを除去オプションから、すでに適用されたルールを削除することもできます。 こちらもご覧ください: FAQ:
アプリのコンポーネント トラッカーコンポーネントを無効にするには、三点メニューの「トラッカーをブロック」を使用します。
現在表示されているタブに関係なく、すべてのトラッカーコンポーネントがブロックされます。 Info. トラッカーコンポーネントは、アプリのコンポーネントの部分集合です。
したがって、他のコンポーネントのブロックに使用されるのと同じ方法によりブロックされます。 App Ops、Uses
Permissions、Permissionsタブは、権限に関連しています。
Androidでは、同じID(共有IDとして知られます)を持たないアプリやプロセス間の通信は、しばしばパーミッション(複数可)を必要とします。
これらの権限は、権限コントローラーによって管理されます。
アプリケーションのマニフェストに記載されていれば自動的に付与される通常の権限もありますが、
dangerous、developmentパーミッションはユーザーの確認が必要です。
これらのタブで使用される色については、2.2.1節で説明しています。 App Ops は、Application
Operations(アプリケーションの操作)の略です。 Android
4.3以降、App
OpsはAndroidシステムによってアプリ権限の大部分を制御するために使用されています。
各AppOpsは、それらに関連付けられた一意の番号を持っており、それはApp
Opsタブの最初の括弧内に閉じられています。
また、プライベート名を持ち、任意でパブリック名を持つことができます。
いくつかのAppOpsは、権限とも関連付けられています。
AppOpsの保護レベルは、関連付けられた権限に基づいて決定されます。
フラグ、権限名、権限の説明、パッケージ名、グループのような情報は、
関連付けられた権限から取得されます。
その他の情報としては、以下のようなものがあります: モード 現在の認可状態を表し、
allow、deny(やや語弊がありますが、単にエラーを意味します)、
ignore(実際には拒否を意味します)、default(ベンダーが内部で設定したデフォルトのリストから推測されます)、
foreground(新しいAndroidシステムでは、アプリケーションがフォアグラウンドで実行中のときのみAppOpsが使用できることを意味します)があります。
また、ベンダーが設定したいくつかのカスタムモード(例えば、MIUIの場合はask)があります。 使用した時間
このAppOpsが使用された時間を表します。 許可した時間
このAppOpsが最後に許可された時間を表します。 拒否した時間
このAppOpsが最後に拒否された時間を表します。 Info. このタブの内容は、ADBにてtextttandroid.permission.GET_APP_OPS_STATS権限が付与されている場合、非Rootユーザーでも見ることができます。 各AppOpsの項目の横にトグルボタンがあり、AppOpsを許可または拒否(無視)するために使用することができます。
デバイスで利用可能な他のモードを設定する必要がある場合は、項目を長押ししてください。
タブに表示されていないAppOpsを追加で設定する必要がある場合は、
メニューのカスタムAppOpsを適用オプションを使用します。
また、デフォルトに戻すオプションを使用して変更内容をリセットしたり、
メニューの対応するオプションを使用して危険なAppOpsをすべて拒否したりすることができます。
また、AppOpsの名前と関連する一意の番号(または値)で昇順に並べ替えることもできます。
また、対応するソートオプションを使用して、拒否されたAppOpsを最初に表示することができます。 Warning. AppOpsを拒否すると、アプリケーションが誤動作することがあります。
そのような場合は、デフォルトに戻すオプションを使用してください。
AppOpsの動作の性質上、システムがそれを適用するのに時間がかかることがあります。 こちらもご覧ください: 付録: App
Ops Uses
Permissionsは、アプリケーションで使用される権限です。マニフェストで RootおよびADBユーザーは、各権限項目の右側にあるトグルボタンを使用して、
dangerous権限とdevelopment権限を許可したり、取り消したりすることができます。
また、メニューの対応するオプションを使用して、危険なパーミッションを一度に取り消すこともできます。
Androidは通常の
パーミッション(そのほとんどがそうですが)を変更することができないので、
この2種類のパーミッションのみ取り消すことができます。
唯一の選択肢は、アプリケーションマニフェストを編集し、そこからこれらの権限を削除することです。 Info. dangerous権限はシステムによってデフォルトで拒否されているため、
すべてのdangerous権限を取り消すことは、すべての権限をリセットすることと同じです。 Notice. API23以前を対象としたアプリは、権限を変更することができません。
そのため、そのようなアプリではパーミッションの切り替えは無効です。 ユーザーは、権限名でソートしたり(昇順)、メニューの対応するオプションを使用して、拒否された権限や
dangerous権限を最初に表示するように選択することができます。 パーミッションは通常、アプリケーション自身によって定義されるカスタム権限です。
主に古いアプリケーションでは、通常の権限も含まれることがあります。そこに表示される各項目の完全な説明は次の通りです: 権限名
各権限は アイコン
各権限は任意のアイコンを持つことができます。
他の権限タブでは、アプリケーションマニフェストにアイコンが含まれていないため、アイコンを持ちません。 詳細
このフィールドは、権限についての詳細な説明です。権限に関連する説明がない場合、このフィールドは表示されません。 フラグ
(フラグシンボルまたは保護レベル名を使用)
textitnormal, development, dangerous,
instant, granted, revoked,signature,
privilegedなどの権限フラグを表します。 パッケージ名
権限に関連するパッケージ名、すなわちその権限を定義したパッケージを表します。 グループ
権限に関連するグループ名を表します。新しいAndroidシステムではグループ名を使用しないため、
通常 署名は、実際には署名情報と呼ばれ、アプリケーションは公開する前に、
アプリケーション開発者によって1つ以上の署名証明書によって署名されます。
アプリケーションの完全性(そのアプリケーションが実際の開発者のものかどうか、
他の人によって変更されていないかどうか)は、署名情報を使って確認できます。
なぜなら、アプリケーションを第三者が変更した場合、署名情報は実際の開発者によって秘密にされているため、
元の証明書を使って再び署名することができないからです。
これらの署名はチェックサムで検証することができます。チェックサムは、証明書自体から生成されます。
開発者がチェックサムを提供する場合、署名タブで表示されたチェックサムを照合することができます。
例えば、Github、Telegramチャンネル、IzzyOnDroidのリポジトリからApp
Managerをダウンロードした場合、次のSHA256チェックサムをこのタブに表示されるものと照合するだけで、そのアプリケーションが実際に私がリリースしたものかどうか確認することができます: ここに表示されるチェックサムは、MD5、SHA1、SHA256の3種類です。 Caution. 署名情報の検証には、SHA256チェックサムのみ、もしくはこれら3つすべてを使用することを推奨します。
MD5やSHA1のチェックサムだけでは、複数の証明書に対して同じハッシュを生成する可能性あるので、
それらのみに依存しないようにしてください。 その他のタブは、機能、設定、共有ライブラリ、署名などのAndroidマニフェストのコンポーネントを一覧表示します。
これらのタブに関する完全な説明は、近日中に公開される予定です。2.2.1
カラーコード
2.2.2
アプリ情報タブ
2.2.2.1 基本情報
123
と125
の場合、後者のバージョンコードの方が高いので、後者は前者よりも更新されていると言えます。プラットフォーム(モバイル、タブ、デスクトップなど)に依存するアプリケーションの場合、これらのバージョン名は、プラットフォームごとに接頭辞を使用しているため、誤解を招く可能性があります。2.2.2.3 横長アクションパネル
2.2.2.5 Termuxを構成
~/.termux/termux.properties
に allow-external-apps=true
を追加し、 Termux v0.96
以降を実行している必要があります。2.2.3
コンポーネントタブ
2.2.3.1 アクティビティ
2.2.3.2 サービス
2.2.3.3 レシーバ
2.2.3.4 プロバイダ
2.2.3.5
Root化された端末向けの追加機能
2.2.3.5.1
コンポーネントをブロックする
2.2.3.5.2
トラッカーをブロックする
2.2.4
権限タブ
2.2.4.1 App Ops
2.2.4.2 使用する権限
uses-permission
タグを使用して宣言されます。
フラグ、パーミッション名、パーミッションの説明、パッケージ名、グループなどの情報は、
関連する権限から取得されます。2.2.4.3 権限
android.permission.INTERNET
のような一意の名前を持っており、
複数のアプリケーションがその権限を要求することができます。android.permission-group.UNDEFINED
やグループ名が全く表示されないことになるでしょう。2.2.5
署名情報タブ
320c0c0fe8cef873f2b554cb88c837f1512589dcced50c5b25c43c04596760ab
2.2.7
その他のタブ
This page is displayed on selecting the 1-Click Ops option in the main menu. This option can be used to block or unblock the ad/tracker components
from the installed applications. On selecting this option, App Manager
will ask if it should list trackers from all the applications or only
from the user applications. Novice users should avoid blocking trackers
from the system applications in order to avoid bad consequences. After
that, a multi-choice dialog box will appear where it is possible to
exclude one or more applications from this operation. The changes are
applied immediately on pressing the block or unblock
button. Notice. Certain applications may not function as expected after blocking
their trackers. If that is the case, remove the blocking rules all at
once or one by one in the component tabs of the App Details page for the corresponding
application. こちらもご覧ください: App Details Page: Blocking
Trackers This option can be used to block certain application components as
specified by their signatures. A signature of a component is the full
name or partial name of the component. For safety, it is recommended to
add a Caution. If you are not aware of the consequences of blocking applcations
components by their signatures, you should avoid using this option as it
may result in bootloop or soft brick, and you may have to apply factory
reset as a result. This option can be used to configure certain applcation operations of all or selected
applications. There are two fields. The first field can be used to
insert more than one app op constants (either names or values) separated
by white spaces. It is not always possible to know in advance about all
the app op constants as they vary from device to device and from OS to
OS. Desired app op constant can be found in the App Ops tab
located in the App Details page. The
second field can be used to insert or select one of the modes that will be set against the
specified app ops. Caution. Unless you are well-informed about app ops and the consequences of
blocking them, you should avoid using this option. 1-Click options for back up. As a precaution, it lists the affected
backups before performing any operation. Back up all the installed applications. Back up all the installed applications that have a previous
backup. Back up all the installed applications without a previous backup. Verify the recently made backups of the installed applications and
redo backup if necessary. If an app has changed since the last backup, redo its backup. It
checks a number of indices including application version, last update
date, last launch date, integrity and file hashes. Directory hashes are
taken during the backup process and are stored in a database. On running
this operation, new hashes are taken and compared with the ones kept in
the database. 1-Click options for restore. As a precaution, it lists the affected
backups before performing any operation. Restore base backup of all the backed up applications. Restore base backup of all the backed up applications that
are not currently installed. Restore base backup of already installed applications whose
version codes are higher than the installed version code. Delete caches from all applications, including Android system. During
this operation, caches of all the running applications may not be
cleared as expected.2.3.1
トラッカーのブロック/ブロック解除
2.3.2
コンポーネントのブロック…
.
(dot) at the end of each partial signature, because
the underlying algorithm searches and matches the components in a greedy
manner. It is also possible to insert more than one signature in which
case all the signatures have to be separated by white spaces. Similar to
the option above, there is also an option to apply blocking to the
system applications.2.3.3
AppOpsモードの設定…
2.3.4
バックアップ
2.3.4.0.1 Back up all apps.
2.3.4.0.2 Redo existing backups.
2.3.4.0.3 Back up apps without
backups.
2.3.4.0.4 Verify and redo
backups.
2.3.4.0.5 Back up apps with
changes.
2.3.5
復元
2.3.5.0.1 Restore all apps.
2.3.5.0.2 Restore not installed
apps.
2.3.5.0.3 Restore latest backups.
2.3.6
Trim Caches in All
Apps
Profiles page can be accessed from the options-menu in the main page. It primarily displays a list of configured profiles along with the typical options to perform operations on them. New profiles can also be added using the plus button in the bottom-right corner as well as can be imported, duplicated, or created from one of the presets. Clicking on any profile item opens its profile page.
Profile page displays the configurations for a profile. It also
offers the options to edit them. Apps tab lists the packages configured in this profile. Packages can
be added or removed using the plus button located near the
bottom of the screen. Packages can also be removed by long clicking on
them (in which case, a popup will be displayed with the only option
delete). Configurations tab can be used to configure the selected
packages. This is the text that will be displayed in the profiles page. If not set, the current
configurations will be displayed instead. Denotes how certain configured options will behave by default. For
instance, if disable option is turned on, the applications will
be disabled if the state is on and will be enabled if the state
is off. Currently, it only supports on and
off values. Select users for which is the profile will be applied. All users are
selected by default. This behaves the same way as the Block Components… option does
in the 1-Click Ops page. However, the blocking here is only applied to
the selected packages. If the state is on, the components
will be blocked, and if the state is off, the components will
be unblocked. The option can be disabled (regardless of the inserted
values) by clicking on the disabled button on the input
dialog. こちらもご覧ください: What are the app
components? This behaves the same way as the Set Mode for App Ops…
option does in the 1-Click Ops page. However, the operation here is only
applied to the selected packages. If the state is on, the app ops
will be denied (i.e. ignored), and if the state is off, the app
ops will be allowed. The option can be disabled (regardless of the
inserted values) by clicking on the disable button in the input
dialog. This option can be used to grant or revoke certain permissions from
the selected packages. Like others above, permissions must be separated
by white spaces. If the state is
on, the permissions will be revoked, and if the state is
off, the permissions will be allowed. The option can be
disabled (regardless of the inserted values) by clicking on the
disable button in the input dialog. This option can be used to take a backup of the selected applications
and its data or restore them. Two options are available here: Backup
options and backup name. Backup options. Same as the backup options of the
backup/restore feature. If not set, the default options will be
used. Backup name. Set a custom name for the backup.
If the backup name is set, each time a backup is made, it will be given
a unique name with backup-name as the suffix. This behaviour will be
fixed in a future release. Leave this field empty for regular “base”
backups (also, make sure not to enable backup multiple in the
backup options). If the state is on,
the packages will be backed up, and if the state is off, the
packages will be restored. The option can be disabled by clicking on the
disable button in the input dialog. Danger. This option is not yet implemented. Allow enabling or disabling the selected packages depending on the
value of the state. If the state
is on, the packages will be disabled, and if the state is
off, the packages will be enabled. Allow the selected packages to be force-stopped. Enable clearing cache for the selected packages. Enable clearing data for the selected packages. Enable blocking or unblocking of the tracker components from the
selected packages depending on the value of the state. If the state is on,
the trackers will be blocked, and if the state is off, the
trackers will be unblocked. Enable saving APK files at 2.5.2
Apps Tab
2.5.3
Configurations
Tab
2.5.3.1 Comment
2.5.3.2 State
2.5.3.3 Users
2.5.3.4 Components
2.5.3.5 App Ops
2.5.3.6 Permissions
2.5.3.7 Backup/Restore
2.5.3.8 Export Blocking Rules
2.5.3.9 Disable
2.5.3.10 Force-stop
2.5.3.11 Clear Cache
2.5.3.12 Clear Data
2.5.3.13 Block Trackers
2.5.3.14 Save APK
AppManager/apks
(or in the
directory selected in the settings page) of the selected packages.
Settings page can be used to customise the behaviour of App
Manager. Configure in-app language. App Manager currently supports 22
(twenty-two) languages. Configure in-app theme. Change layout direction, either left to right or right to left. This
is usually set using the selected language but not everybody prefers the
same direction. Enable or disable certain features in App Manager, such as Interceptor Manifest viewer Scanner Package installer Usage access. With this feature turned off, App
Manager will never ask for the Usage Access
permission. Log viewer App explorer. The “Explore” option will not be
available while trying to open an APK file. App info. The “App info” option displayed while
trying to open an APK file. Use the internet. All the Internet features are
disabled if this feature is turned off. Currently, the only Internet
feature is fetching scanning reports via VirusTotal. Lock App Manager using Android screen lock provided a screen lock is
configured. Warning. If screen lock is disabled in Android after enabling this setting,
App Manager will not open until it is enabled again. Mode of operation defines how App Manager works as a whole. It has
the following options: Auto. Let App Manager decide the suitable
option. Although this is the default option, non-rooted users should use
the no-root mode. Root. Operate App Manager in root mode. App
Manager will fall back to no-root mode if root is not detected,
or in rare cases when Binder communication through root is disabled
(e.g. in Phh
SuperUser). ADB over TCP. Operate App Manager in ADB mode
via ADB over TCP. App Manager will fall
back to no-root mode if ADB over TCP is not enabled. Wireless debugging. Enable ADB via Wireless
Debugging. It will try to connect to the configured port automatically
at first. On failure, it will ask the user to either pair or connect to
the ADB daemon manually. App Manager will fall back to no-root
mode if it fails to connect to the ADB daemon this way. Info. This option is only displayed in devices running Android 11 or later
as Wireless Debugging was introduced in Android 11. No-root. Operate App Manager in no-root mode.
While App Manager performs better in this mode, all the root- or
ADB-specific features will be disabled. It also displays the currently inferred mode of operation. The actual
mode of operations are root, ABD and
no-root. Configure the signature
schemes to be used when APK signing is enabled. v1 and v2 signature
schemes are enabled by default, but v3 should also be enabled to ensure
proper security in Android 9 or later. Configure the signing key for signing APK files. Keys from an
existing KeyStore can be imported to App Manager, or a new key can be
generated. Tip. If you need to use the key in the future, it is recommended that you
create a KeyStore yourself and import the key here. Keys generated
within App Manager is at the risk of being deleted without a proper
backup. When enabled, a list of users will be displayed before installing the
application. The application will be installed only for the specified
users. Whether to sign the APK files before installing the application. A
signing key has to be added or generated before this option can be
enabled. This can be done in the APK
signing page. Define APK installation location. This can be one of auto,
internal only and prefer external. In newer Android
versions, selecting the last option does not guarantee that the
application will be installed in the external storage. Select the installer application. This is useful for applications
that explicitly checks the installer as a way to verify if the
application is installed legitimately. This only works for root or ADB
users. Notice. While checking for the installer might seem a legitimate concern for
an application, the Android framework already deals with this during the
installation. Checking for the installer is simply the wrong way to
prove the legitimacy of the source of an application. Whether to block the tracking components immediately after installing
the application. Whether to display changes in version, trackers, components,
permissions, signatures, SDK, etc. in a version controlled style before
installing the application if the application has already been
installed. Whether to always install applications in the background. A
notification will be issued once the installation is finished. Settings related to back
up/restore. Set the compression method to be used during backups. App Manager
supports GZip and BZip2 compression methods, GZip being the default
compression method. It doesn’t affect the restoring of an existing
backup. Customise the back up/restore dialog displayed while taking
a backup. こちらもご覧ください: Backup
options Allow backup of applications that has entries in the Android
KeyStore. This option is disabled by default because a few apps (such as
Signal) may crash if restored. Set an encryption method for the backups. App Manager currently
supports OpenPGP (via OpenKeyChain),
AES, RSA and ECC. Like APK signing,
The AES, RSA and ECC keys are stored in the KeyStore and can be imported
from other KeyStores. Danger. For your own safety, it is not recommended generating RSA and ECC
keys inside App Manager. Instead, they should be imported from a
KeyStore stored in a secure place. Select the storage where the backups will be stored. This is also
where logs and exported APK files are saved. Notice. The backup volume only specifies the storage, not the path. Backups
are traditionally stored in the Import backups from old and discontinued projects such as Titanium
Backup, OAndBackup, and Swift Backup (version 3.0 to 3.2). The backups
are not deleted after importing to prevent data loss in case the
imported backups cannot be restored properly. By default, blocking rules are not applied unless they are applied
explicitly in the App Details page
for any application. After enabling this option, all (old and new) rules
are applied immediately for all applications without explicitly enabling
blocking for an application. こちらもご覧ください: FAQ: What is
instant component blocking? It is possible to import or export blocking rules within App Manager
for all applications. The types of rules (components, app ops or
permissions) that should be imported or exported can also be selected.
It is also possible to import blocking rules from Blocker and Watt. If it is necessary to
export blocking rules for a single application, the corresponding App Details page can be used to export
rules, or for multiple apps, batch
operations can be used. こちらもご覧ください: Rules Specification Export blocking rules for all applications configured within App
Manager. This may include app components, app ops
and permissions based on the options selected in the multi-choice
options. Import previously exported blocking rules from App Manager. Similar
to export, this may include app components, app ops
and permissions based on the options selected in the multi-choice
options. Add components disabled by other applications to App Manager. App
Manager only keeps track of the components disabled within App Manager.
If application components are blocked or disabled by other tools or
applications, this option can be utilised to import them. On clicking
this option, App Manager will find the components potentially disabled
by other applications or tools and list only the name of the
applications along with the number of matched components. For safety,
all the applications are unselected by default. They have to be selected
manually, and the blocking has to be re-applied via App Manager. Caution. Be careful when using this tool as there can be many false positives.
Choose only the applications that you are certain about. Import configuration files from Watt, each file containing
rules for a single package and file name being the name of the package
with Tip. Location of configuration files in Watt:
Import blocking rules from Blocker, each file
containing rules for a single package. These files have a
One-click option to remove all rules configured within App Manager.
This will enable all blocked components, app ops will be set to their
default values and permissions will be granted. This option lets you control the users App Manager should operate on.
App Manager operates on all users in root or ADB mode by default. Defines the format of the APK name to be used while saving it via
batch operations or through profiles. App Manager offers some special
keywords enclosed inside Import or export the KeyStore used by App Manager. This is a Bouncy
Castle KeyStore with Display Android version, security, CPU, GPU, battery, memory, screen,
languages, user info, etc.2.6.1
Language
2.6.2
Appearance
2.6.2.1 App Theme
2.6.2.2 Layout Direction
2.6.2.3 Enable/Disable Features
2.6.3
Privacy
2.6.3.1 Screen Lock
2.6.4
Mode of Operation
2.6.5
APK Signing
2.6.5.1 Signature Schemes
2.6.5.2 Signing Key
2.6.6
Installer
2.6.6.1 Show users in installer
2.6.6.2 Sign APK
2.6.6.3 Install Location
2.6.6.4 Installer App
2.6.6.5 Block Trackers
2.6.6.6 Display Changes
2.6.6.7 Install in the Background
2.6.7
Back up/Restore
2.6.7.1 Compression method
2.6.7.2 Backup Options
2.6.7.3 Backup apps with Android
KeyStore
2.6.7.4 Encryption
In case of AES, the generated key should be stored in a secure place,
such as using a password manager.2.6.7.5 Backup Volume
AppManager
folder inside
the storage path. But when the path is selected using Storage Access
Framework (SAF), the selected path or directory is used directly.2.6.7.6 Import Backups
2.6.8
Rules
2.6.8.1 Instant Component
Blocking
2.6.8.2 Import/Export Blocking
Rules
2.6.8.2.1 Export
2.6.8.2.2 Import
2.6.8.2.3 Import Existing Rules
2.6.8.2.4 Import from Watt
.xml
extension./sdcard/Android/data/com.tuyafeng.watt/files/ifw
2.6.8.2.5 Import from Blocker
.json
extension.2.6.8.3 Remove all rules
2.6.9
Advanced
2.6.9.1 Selected Users
2.6.9.2 Saved APK Name Format
%
(percentage) signs and available
below the input box. These keywords are:label
. Denotes the name or label of
the application. This can be localised to the configured language
depending on the app.package_name
. Denotes the name of
the package or application ID, the unique identifier that each
application has.version
. Denotes the current
version of the application extracted from its manifest.version_code
. Denotes the current
version code of the application that can be used to separate two
versions of the same application.min_sdk
. Denotes the minimum SDK
(i.e. Android framework version) that the application can operate on.
This data is only available since Android 7 (Nougat).target_sdk
. Denotes the SDK that
this application targets. The application can operate on higher SDK but
only in the compatibility mode.datetime
. Denotes the time and date
when the APK is exported.2.6.9.3 Import/Export Keystore
bks
extension. Therefore, other
KeyStore such as Java KeyStore (JKS) or PKCS #12 are not supported. If a
key is needed to be imported from such a KeyStore, the relevant options
should be should as specified above.2.6.10 About the device
Scanner page appears after clicking on the scanner button in the App Info tab. External APK files can also be opened for scanning from file managers, web browsers, etc.
It scans for trackers and libraries, and displays the number of trackers and libraries as a summary. It also displays checksums of the APK file as well as the signing certificates. If VirusTotal is configured in the settings, it also attempts to retrieve reports from VirusTotal, or uploads the APK file if it is not in the database.
Disclaimer.
App Manager only scans an application statically without prejudice. The application may provide the options for opting out, or in some cases, certain features of the tracker may not be used at all by the application (e.g. F-Droid), or some applications may simply use them as placeholders to prevent the breaking of certain features (e.g. Fennec F-Droid). The intention of the scanner is to give you an idea about what the APK might contain. It should be taken as an initial step for further investigations.
Clicking on the first item (i.e. number of classes) opens a new page containing a list of tracker classes for the application. All classes can also be viewed by clicking on the Toggle Class Listing menu. A sneak-peek of each class can be viewed by simply clicking on any class item. In Android 8 (Oreo) and later, this includes the whole SMALI version of the class, and can be converted into Java using the corresponding option.
Notice.
Due to various limitations, it is not possible to scan all the components of an APK file. This is especially true if an APK is highly obfuscated. The scanner also does not check strings (or website signatures).
The second item lists the number of trackers along with their names. Clicking on the item displays a dialog containing the name of trackers, matched signatures, and the number of classes against each signature. Some tracker names may have 2 prefix which indicates that the trackers are in the ETIP stand-by list i.e. whether they are actual trackers is still being investigated.
The third item lists the number of libraries along with their names. The information are mostly taken from IzzyOnDroid repo.
こちらもご覧ください: FAQ: Tracker classes vs tracker components
At the bottom of the page, there is a special item denoting the number of missing signatures (i.e. missing classes). The missing signatures are the ones that AM has failed to match against any known libraries. The number itself has no particular meaning as many libraries contain hundreds of classes, but clicking on the item will bring up a dialog containing the signatures which is helpful in inspecting the missing signatures. This feature is only intended for people who know what a missing signature is and what to do with it, other users should ignore it.
Interceptor can be used to intercept communication between
applications using Intent
. It works as a man-in-the-middle
between the source and the destination applications. It offers a
feature-complete user interface for editing Intent
s.
Warning.
Interceptor only works for implicit intents where the app component isn’t specified.
こちらもご覧ください:
Intent filters are used by the applications to specify the tasks they
are able to perform or the tasks they are going to perform using other
applications. For example, when you’re opening a PDF file using a file
manager, the file manager will try to find the applications to open the
PDF with. To find the right applications, the file manager will create
an Intent with filters such as the MIME type and ask the system to
retrieve the applications capable of opening this filter. The system
will search through the Manifest of the installed applications to match
the filter and list the application components that are able to open
this filter (in our case the PDF). At this, either the file manager will
open the desired application component all by itself or use a system
provided option to open it. If multiple application components are able
to open it and no default is set, you may get a prompt where you have to
choose the right application component. Action specifies the generic action to perform such as
Data is originally known as URI (Uniform Resource Identifier) defined
in RFC 2396. It can
be web links, file location, or a special feature called
content. Contents are an Android feature managed by the content providers. Data are often
associated with a MIME type. Examples: MIME type of the data. For example, if
the data field is set to This is similar to action in the
sense that it is also used by the system to filter application
components. This has no further benefits. Unlike action, there
can be more than one category. Clicking on the plus button next
to the title allows adding more categories. Flags are useful in determining how system should behave during the
launch or after the launch of an activity. This should not be touched as
it requires some technical background. The plus button next to
the title can be used to add one or more flags. Extras are the key-value pairs used for supplying additional
information to the destination component. More extras can be added using
the plus button next to the title. Represents the entire Intent as a URI (e.g. 2.8.1.1 Action
android.intent.action.VIEW
. Applications often declare the
relevant actions in the Manifest file to catch the desired Intents. The
action is particularly useful for broadcast Intent where it plays a
vital rule. In other cases, it works as an initial way to filter out the
relevant application components. Generic actions such as
android.intent.action.VIEW
and
android.intent.action.SEND
are widely used by applications.
Hence, setting this alone may match many application components.2.8.1.2 Data
http://search.disroot.org/?q=URI%20in%20Android%20scheme&categories=general&language=en-US
https://developer.android.com/reference/android/net/Uri
file:///sdcard/AppManager.apk
mailto:email@example.com
content://io.github.muntashirakon.AppManager.provider/23485af89b08d87e898a90c7e/AppManager.apk
2.8.1.3 MIME Type
file:///sdcard/AppManager.apk
, the
associated MIME type can be
application/vnd.android.package-archive
.2.8.1.4 Categories
2.8.1.5 Flags
2.8.1.6 Extras
2.8.1.7 URI
intent://…
).
Some data cannot be converted to string, and as a result, they might not
appear here.
List all the activity components that matches the Intent. This is internally determined by the system (rather than App Manager). The launch button next to each component can be used to launch them directly from App Manager.
Reset the Intent to its initial state.
Resend the edited Intent to the destination application. This may open a list of applications where the desired application is needed to be selected. The result received from the target application will be sent to the source application. As a result, the source application will not know if there was a man-in-the-middle.
Many root-only features can still be used by enabling ADB over TCP. To do that, a PC or Mac is required with Android platform-tools installed, and an Android phone with developer options & USB debugging enabled.
Root users.
If superuser permission has been granted to App Manager, it can already execute privileged code without any problem. Therefore, root users don’t need to enable ADB over TCP. If you still want to use ADB over TCP, you must revoke superuser permission for App Manager and restart your device. You may see working on ADB mode message without restarting but this isn’t entirely true. The server (used as an interface between system and App Manager) is still running in root mode. This is a known issue and will be fixed in a future version of App Manager.
こちらもご覧ください: FAQ: ADB over TCP
Developer options is located in Android Settings, either directly near the bottom of the page (in most ROMs) or under some other settings such as System (Lineage OS, Asus Zenfone 8.0+), System > Advanced (Google Pixel), Additional Settings (Xiaomi MIUI, Oppo ColorOS), More Settings (Vivo FuntouchOS), More (ZTE Nubia). Unlike other options, it is not visible until explicitly enabled by the user. If developer options is enabled, you can use the search box in Android Settings to locate it as well.
This option is available within Android Settings as well but like the location of the developer options, it also differs from device to device. But in general, you have to find Build number (or MIUI version for MIUI ROMs and Software version for Vivo FuntouchOS, Version for Oppo ColorOS) and tap it at least 7 (seven) times until you finally get a message saying You are now a developer (you may be prompted to insert pin/password/pattern or solve captchas at this point). In most devices, it is located at the bottom of the settings page, inside About Phone. But the best way to find it is to use the search box.
After locating the
developer options, enable Developer option (if not
already). After that, scroll down a bit until you will find the option
USB debugging. Use the toggle button on the right-hand
side to enable it. At this point, you may get an alert prompt where you
may have to click OK to actually enable it. You may also have
to enable some other options depending on device vendor and ROM. Here
are some examples: Enable USB debugging (Security settings) as
well. Enable Allow ADB debugging in charge only mode as
well. When connecting to your PC or Mac, you may get a prompt saying
Allow access to device data? in which case click
YES, ALLOW ACCESS. Notice. Often the USB debugging mode could be disabled
automatically by the system. If that’s the case, repeat the above
procedure. Depending on the device and the version of operating system, you have
to enable Disable Permission Monitoring, or USB
debugging (Security settings) along with Install via
USB. Make sure you have USB tethering enabled. In case USB Debugging is greyed out, you can do the
following: Make sure you enabled USB debugging before connecting your phone
to the PC or Mac via USB cable Enable USB tethering after connecting to PC or Mac via USB
cable (For Samsung) If your device is running KNOX, you may have to
follow some additional steps. See official documentations or consult
support for further assistant3.1.2.1 Xiaomi (MIUI)
3.1.2.2 Huawei (EMUI)
3.1.2.3 Realme
3.1.2.4 LG
3.1.2.5 Troubleshooting
In order to enable ADB over TCP, you have to set up ADB in your PC or
Mac. Lineage OS users can skip to §3.1.4.1. Download the latest version of Android
SDK Platform-Tools for Windows Extract the contents of the zip file into any directory (such as
Open Command Prompt or
PowerShell from this directory. You can do it manually
from the start menu or by holding Download the latest version of Android
SDK Platform-Tools for macOS Extract the contents of the zip file into a directory by clicking
on it. After that, navigate to that directory using Finder and
locate Open Terminal using Launchpad or
Spotlight and drag-and-drop Tip. If you are not afraid to use command line, here’s a one liner: After that, you can simply type Open your favourite terminal emulator. In most GUI-distros, you
can open it by holding Run the following command: If it is successful, you can simply type 3.1.3.1 Windows
C:\
adb
) and navigate to that
directory using ExplorerShift
and Right clicking
within the directory in File Explorer and then clicking either
on Open command window here or on Open PowerShell window
here (depending on what you have installed). You can now access ADB
by typing adb
(Command Prompt) or ./adb
(PowerShell). Do not close this window yet3.1.3.2 macOS
adb
adb
from the
Finder window into the Terminal window. Do not close
the Terminal window yetcd ~/Downloads && curl -o platform-tools.zip -L \
&& \
https://dl.google.com/android/repository/platform-tools-latest-darwin.zip unzip platform-tools.zip && rm platform-tools.zip && cd platform-tools
./adb
in the in same
Terminal window to access ADB.3.1.3.3 Linux
Control
, Alter
and
T
at the same timecd ~/Downloads && curl -o platform-tools.zip -L \
&& \
https://dl.google.com/android/repository/platform-tools-latest-linux.zip unzip platform-tools.zip && rm platform-tools.zip && cd platform-tools
./adb
in
the in same terminal emulator window or type
~/Downloads/platform-tools/adb
in any terminal emulator to
access ADB.
Lineage OS (or its derivatives) users can directly enable ADB over TCP using the developer options. To enable that, go to the Developer options, scroll down until you find ADB over Network. Now, use the toggle button on the right-hand side to enable it and skip to §3.1.4.3.
For other ROMs, you can do this using the command
prompt/PowerShell/terminal emulator that you’ve opened in the step 3 of
the previous section. In this section, I will use adb
to
denote ./adb
, adb
or any other command that
you needed to use based on your platform and software in the previous
section.
Connect your device to your PC or Mac using a USB cable. For some devices, it is necessary to turn on File transfer mode (MTP) as well
To confirm that everything is working as expected, type
adb devices
in your terminal. If your device is connected
successfully, you will see something like this:
List of devices attached
xxxxxxxx device
Notice.
In some Android phones, an alert prompt will be appeared with a message Allow USB Debugging in which case, check Always allow from this computer and click Allow.
Finally, run the following command to enable ADB over TCP:
adb tcpip 5555
Danger.
You cannot disable developer options or USB debugging after enabling ADB over TCP.
After enabling ADB over TCP, relaunch App Manager. App Manager should detect ADB mode automatically. If it cannot, you can change the mode of operation to ADB over TCP in the settings page. There, you can also verify whether App Manager has correctly detected ADB as indicated by the inferred mode.
Notice.
In some Android devices, the USB cable is needed to be disconnected from the PC before connecting to App Manager.
Warning.
ADB over TCP will be disabled after a reboot. In that case, you have to follow §3.1.4.2 again.
Lineage OS users.
You can turn off ADB over Network in developer options, but turning off this option will also stop App Manager’s remote server. So, turn it off only when you’re not going to use App Manager in ADB over TCP mode.
If you are running Android 11 or later and capable of connecting to a Wi-Fi network for, at least, a few moments, Wireless Debugging is the recommended approach as it offers more protection than ADB over TCP. It requires two steps:
ADB pairing. The initial and a bit complex step for a novice user. Fortunately, this step is not required all the time.
Connecting to ADB. The final step which needs to be carried out every time you reboot your phone.
In the Developer options page, find Wireless debugging and click to open it. In the new page, turn on Use wireless debugging. Depending on your configuration, you might see a dialog prompt asking you to verify your decision. If that is the case, click Allow.
Tip.
For an easy access, you might want to add Wireless debugging in the notification tiles section. To do this, find Quick settings developer tiles in the Developer options page and click to open it. In the new window, enable Wireless debugging. However, this option is unavailable in most operating systems.
Keeping the Wireless debugging page open, go to the Recents page either by swiping up or by using the dedicated navigation button, and click on the Settings logo to enable Split screen. It will wait for you to select or launch another application: Launch or select App Manager.
Now, in App Manager and navigate to Settings and then enable Wireless debugging in Mode of operation. After a few moments, App Manager will ask you to either connect or pair ADB. Select pair.
In the Wireless debugging page (now should be on top among the splits), select Pair device with pairing code. At this, a dialog prompt will be displayed. Note down the pairing code but DO NOT close the dialog prompt or the window.
Finally, in App Manager, insert the pairing code and click pair. The port number should be detected automatically. If it cannot, you have to insert the port number as well.
If the pairing is successful, it will display a successful message at the bottom, and the dialog prompt in the Wireless debugging page will be dismissed automatically, and you will be able to see App Manager listed as an ADB client.
Notice.
If you do not use App Manager in ADB mode for a while (depending on devices), App Manager might be removed from the list. In that case, you have to repeat the above procedure.
App Manager should be able to connect to ADB automatically if the mode of operation is set to auto, ADB over TCP or Wireless debugging. If that is not the case, select Wireless debugging in the settings page. If App Manager fails to detect or connect to ADB, it will display a dialog prompt to connect or pair ADB. Select connect.
Now, navigate to the Wireless debugging page in Android settings, and note down the port number displayed in the page. In App Manager’s dialog prompt, replace the port number with the one that you have noted earlier, and click connect.
Once a connection has been established, you can safely disable Wireless debugging in Android settings.
Caution.
Never disable USB Debugging or any other additional options described in §3.2.1. If you do this, the remote server used by App Manager will be stopped, and you may have to start all over again.
App Manager has a modern, advanced and easy-to-use backup/restore system implemented from the scratch. This is probably the only app that has the ability to restore not only the app or its data but also permissions and rules that you’ve configured within App Manager. You can also choose to back up an app multiple times (with custom names) or for all users.
こちらもご覧ください:
Back up/restore is a part of batch
operations. It is also located inside the options menu in the App Info tab. Clicking on
Backup/Restore opens the Backup
Options. Backups are located at
/storage/emulated/0/AppManager
by default. You can
configure custom backup location in the settings page in which case the
backups will be located at the AppManager
folder in the
selected volume.
Note.
If one or more selected apps do not have any backup, the Restore and Delete Backup options will not be displayed.
Backup options (internally known as backup flags) let you customise the backups on the fly. However, the customisations will not be remembered for the future backups. If you want to customise this dialog, use Backup Options in the Settings page.
A complete description of the backup options is given below:
APK files. Whether to back up the APK files.
This includes the base APK file along with the
split APK
files if they exist.
Internal data. Whether to back up the internal
data directories. These directories are located at
/data/user/<user_id>
and (for Android N or later)
/data/user_de/<user_id>
.
External data. Whether to back up data directories located in the internal memory as well as SD Card (if exists). External data directories often contain non-essential app data or media files (instead of using the dedicated media folder) and may increase the backup size. However, it might be essential for some apps. Although it isn’t checked by default (as it might dramatically increase the size of the backups), you may have to check it in order to ensure a smooth restore of your backups.
Caution.
Internal data folders should always be backed up if you are going to back up the external data folders. However, it could be useful to back up only the external folders if the app in question downloads a lot of assets from the Internet.
OBB and media. Whether to back up or restore the OBB and the media directories located in the external storage or the SD Card. This is useful for games and the graphical software which actually use these folders.
Cache. Android apps have multiple cache directories located at every data directories (both internal and external). There are two types of cache: cache and code cache. Enabling this option excludes both cache directories from all the data directories. It is generally advised to exclude cache directories since most apps do not clear the cache regularly (for some reason, the only way an app can clear its cache is by deleting the entire cache directory) and usually handled by the OS itself. Apps such as Telegram may use a very large cache (depending on the storage space) which may dramatically increase the backup size. When it is disabled, AM also ignores the no_backup directories.
Extras. Backup/restore app permissions, net policy, battery optimization, SSAID, etc., enabled by default. Note that, blocking rules are applied after applying the extras. So, if an item is present in both places, it will be overwritten (i.e., the one from the blocking rules will be used).
Rules. This option lets you back up blocking rules configured within App Manager. This might come in handy if you have customised permissions or block some components using App Manager as they will also be backed up or restored when you enable this option.
Backup Multiple. Whether this is a multiple backup. By default, backups are saved using their user ID. Enabling this option allows you to create additional backups. These backups use the current date-time as the default backup name, but you can also specify custom backup name using the input field displayed when you click on the Backup button.
Custom users. Backup or restore for the selected users instead of only the current user. This option is only displayed if the system has more than one user.
Skip signature checks. When taking a backup,
checksum of every file (as well as the signing certificate(s) of the
base APK file) is generated and stored in the checksums.txt
file. When you restore the backup, the checksums are generated again and
are matched with the checksums stored in the said file. Enabling this
option will disable the signature checks. This option is applied only
when you restore a backup. During backup, the checksums are generated
regardless of this option.
Caution.
You should always disable this option to ensure that your backups are not modified by any third-party applications. However, this would only work if you enabled encryption.
こちらもご覧ください: Settings: Encryption
Backup respects all the backup options except Skip signature checks. If base backups (i.e., backups that don’t have the Backup Multiple option) already exist, you will get a warning as the backups will be overwritten. If Backup Multiple is set, you have an option to input the backup name, or you can leave it blank to use the current date-time.
Restore respects all the backup options and will fail if APK files option is set, but the backup doesn’t contain such backups or in other cases, if the app isn’t installed. When restoring backups for multiple packages, you can only restore the base backups (see backup section for an explanation). However, when restoring backups for a single package, you have the option to select which backup to restore. If All users option is set, AM will restore the selected backup for all users in the latter case but in the former case, it will restore base backups for the respective users.
Notice.
Apps that use storage access framework (SAF), SSAID or Android KeyStore works properly only after an immediate restart.
Delete backup only respects All users option and when it is selected, only the base backups for all users will be deleted with a prompt. When deleting backups for a single package, another dialog will be displayed where you can select the backups to delete.
It is possible to trigger profiles configured inside App Manager via
third-party applications such as Automation or
Tasker. Traditionally, The activity
It has two primary extras required in all conditions. The key names,
data types are all follows: App Manager current support a single feature, namely
In order to trigger a profile, Intent
s are used to
trigger such operations.3.4.2
Configuring tasks
io.github.muntashirakon.AppManager.crypto.auth.AuthFeatureDemultiplexer
is responsible for handling all the automations. Sending an intent to
the activity lets App Manager perform the designated operation by
redirecting the Intent
to the designated activity or
service.3.4.2.1 Required extras
auth
. (String value) The
authorization key as described in the earlier section.feature
. (String value) Name of the
feature. Supported features are described in the next section.3.4.3
Features
profile
.3.4.4
Triggering a profile
feature
must have the
value profile
. In addition, the following extras can be
included:prof
. (String value – required) The
name of the profile as displayed in the Profiles page.state
. (String value – optional)
State of the profile – currently on
or off
–
as specified in the documentation. If this extra is not set, App Manager
will display a prompt where a state must be selected. Therefore, for
complete automation, this option should be set.
Short for Network policy or network policies. It is usually located in the Android settings under Mobile data & Wifi section in the app info page of an app. Not all policies are guaranteed to be included in this page (e.g. Samsung), and not all settings are well-understood due to lack of documentation. App Manager can display all the net policies declared in the NetworkPolicyManager. Policies unknown to App Manager will have a Unknown prefix along with the policy constant name and number in the hexadecimal format. Unknown policies should be reported to App Manager for inclusion.
Net policy allows a user to configure certain networking behaviour of an app without modifying the ip tables directly and/or running a firewall app. However, the features it offers largely depend on Android version and ROM. A list of known net policies are listed below:
None or
POLICY_NONE
: (AOSP) No specific network
policy is set. System can still assign rules depending on the nature of
the app.
Reject background data or
POLICY_REJECT_METERED_BACKGROUND
: (AOSP)
Reject network usage on metered networks when the application is in
background.
Allow background data when Data Saver is on or
POLICY_ALLOW_METERED_BACKGROUND
: (AOSP)
Allow metered network use in the background even when data saving mode
is enabled.
Reject cellular data or
POLICY_REJECT_CELLULAR
(Android 11+) or
POLICY_REJECT_ON_DATA
(up to Android 10):
(Lineage OS) Reject mobile/cellular data. Signals network unavailable to
the configured app as if the mobile data is inactive.
Reject VPN data or
POLICY_REJECT_VPN
(Android 11+) or
POLICY_REJECT_ON_VPN
(up to Android 10):
(Lineage OS) Reject VPN data. Signals network unavailable to the
configured app as if the VPN is inactive.
Reject Wi-Fi data or
POLICY_REJECT_WIFI
(Android 11+) or
POLICY_REJECT_ON_WLAN
(up to Android 10):
(Lineage OS) Reject Wi-Fi data. Signals network unavailable to the
configured app as if the device is not connected to a Wi-Fi
network.
Disable network access or
POLICY_REJECT_ALL
(Android 11+) or
POLICY_NETWORK_ISOLATED
(up to Android
10): (Lineage OS) Reject network access in all circumstances. This is
not the same as enforcing the other three policies above, and is the
recommended policy for dodgy apps. If this policy is enforced, there is
no need to enforce the other policies.
POLICY_ALLOW_METERED_IN_ROAMING
:
(Samsung) Possibly allow metered network use during roaming. Exact
meaning is currently unknown.
POLICY_ALLOW_WHITELIST_IN_ROAMING
:
(Samsung) Possibly allow network use during roaming. Exact meaning is
currently unknown.
Note.
Corresponding Lineage OS patches are as follows:
Activities, services, broadcast receivers (or only receivers) and content providers (or only providers) are jointly called application components. More technically, they all inherit the ComponentInfo class and can be launched via Intent.
App Manager typically blocks application components (or tracker components) using a method called Intent Firewall (IFW), it is superior to other methods such as pm (PackageManager), Shizuku or any other method that uses the package manager to enable or disable the components. If a component is disabled by the latter methods, the application itself can detect that the component is being blocked and can re-enable it as it has full access to its own components. (Many deceptive applications actually do this in order to keep the tracker components unblocked.) On the other hand, IFW is a true firewall and the application cannot detect if its components are being blocked. App Manager uses the term block rather than disable for this reason.
Even IFW has some limitations which are primarily applicable for the system applications:
The application in question is whitelisted by the system i.e. the system cannot function properly without these applications and may cause random crashes. These applications include but not limited to Android System, System UI, Phone Services. They will continue to work even if they are disabled or blocked.
Another system application or system process has activated a specific component of the application in question via interprocess communication (IPC). In this case, the component will be activated regardless of blocking status or even if the entire application is disabled. If there is such a system application that is not needed, the only way to prevent it from running is by getting rid of it.
No. But the application components blocked by the system or any other tools are displayed in the component tabs. These rules can be imported from Settings. However, it is not possible for App Manager to distinguish the components blocked by the third-party tools and components blocked by the system. Therefore, the applications listed in the import page should be selected with care.
App Manager blocks the components again if requested. In case of unblocking, they will be reverted to the default state as specified in the manifest of the application. But if the components were blocked by MyAndroidTools (MAT) with IFW method, they will not be unblocked by App Manager as it uses a different format. To fix this issue, the rules have to be imported from Settings at first, in which case MAT’s configurations will be permanently removed.
When you block a component in the App Details page, the blocking is not applied by default. It is only applied when you apply blocking using the Apply rules option in the top-right menu. If you enable instant component blocking, blocking will be applied as soon as you block a component. If you choose to block tracker components, however, blocking is applied automatically regardless of this setting. You can also remove blocking for an application by simply clicking on Remove rules in the same menu in the App Details page. Since the default behaviour gives you more control over applications, it is better to keep instant component blocking option disabled.
All application components are classes but not all classes are components. In fact, only a few of the classes are components. That being said, scanner page displays a list of trackers along with the number of classes, not just the components. In all other pages, trackers and tracker components are used synonymously to denote tracker components, i.e. blocking tracker means blocking tracker components, not tracker classes.
Info.
Tracker classes that are not components cannot be blocked. They can only be removed by editing the application itself.
残念ながらそうです。しかしv2.5.13以降では、サーバー・クライアント方式によりシステムと対話的に動作するため、 TCP経由のADBを常に有効にしておく必要はありません。但し開発者向けオプションの USBデバッグを有効にしておく必要があります。そのためには、TCP経由のADBを有効にした状態でApp Manager を起動してください。そうすると、ADBモードで動作中とトースト通知が画面下部に表示されます。その後はTCPサーバーを停止させて構いません。 Lineageやその派生システムではTCP経由のADBをPCなしでも切り替えできます。 ネットワーク経由のADB オプションがUSBデバッグオプションの下部に存在します。但し後者の場合ではTCPサーバーを停止できません。
残念ながらできません。ADBでは限られた 権限 しか利用できず、アプリのコンポーネント制御はこの中に含まれません。
ADBモードではAppManagerの殆どの機能が利用でき、ADBモードが検出された際、自動的に有効になります。 アプリを無効化、強制停止、データーを消去、AppOpsやアプリ権限を拒否/許可などの機能も含まれます。 またアプリを確認画面無しでインストールしたり、 実行中のアプリ/プロセスの確認も可能です。
Yes. AM cannot modify any system settings without root or ADB.
Trackers and libraries are updated manually before making a new release.
No, APKs aren’t deleted by App Manager after they are installed.
App Manager’s use of hidden API and privileged code execution is now much more complex and cannot be integrated with other third party apps such as Shizuku. Here are some reasons for not considering Shizuku (which now has Apache 2.0 license) for App Manager:
Shizuku was initially non-free which led me to use a similar approach for App Manager to support both root and ADB
App Manager already supports both ADB and root which in some cases is more capable than Shizuku
Relying on a third-party app for the major functionalities is not a good design choice
Integration of Shizuku will increase the complexity of App Manager.
Bloatware are the unnecessary apps supplied by the vendor or OEM and are usually system apps. These apps are often used to track users and collect user data which they might sell for profits. System apps do not need to request any permission in order to access device info, contacts and messaging data, and other usage info such as your phone usage habits and everything you store on your shared storage(s).
The bloatware may also include Google apps (such as Google Play Services, Google Play Store, Gmail, Google, Messages, Dialer, Contacts), Facebook apps (the Facebook app consists of four or five apps), Facebook Messenger, Instagram, Twitter and many other apps which can also track users and/or collect user data without consent given that they all are system apps. You can disable a few permissions from the Android settings but be aware that Android settings hides almost every permission any security specialist would call potentially dangerous.
If the bloatware were user apps, you could easily uninstall them either from Android settings or AM. Uninstalling system apps is not possible without root permission. You can also uninstall system apps using ADB, but it may not work for all apps. AM can uninstall system apps with root or ADB (the latter with certain limitations, of course), but these methods cannot remove the system apps completely as they are located in the system partition which is a read-only partition. If you have root, you can remount this partition to manually purge these apps but this will break Over the Air (OTA) updates since data in the system partition has been modified. There are two kind of updates, delta (small-size, consisting of only the changes between two versions) and full updates. You can still apply full updates, but the bloatware will be installed again, and consequently, you have to delete them all over again. Besides, not all vendors provide full updates.
Another solution is to disable these apps either from Android settings (no-root) or AM, but certain services can still run in the background as they can be started by other system apps using Inter-process Communication (IPC). One possible solution is to disable all bloatware until the service has finally stopped (after a restart). However, due to heavy modifications of the Android frameworks by the vendors, removing or disabling certain bloatware may cause the System UI to crash or even cause bootloop, thus, (soft) bricking your device. You may search the web or consult the fellow users to find out more about how to debloat your device.
From v2.5.19, AM has a new feature called profiles. The profiles page has an option to create new profiles from one of the presets. The presets consist of debloating profiles which can be used as a starting point to monitor, disable, and remove the bloatware from a proprietary Android operating system.
Note.
In most cases, you cannot completely debloat your device. Therefore, it is recommended that you use a custom ROM free from bloatware such as Graphene OS, Lineage OS or their derivatives.
AM currently supports blocking activities, broadcast receivers, content providers, services, app ops and permissions, and in future I may add more blocking options. In order to add more portability, it is necessary to import/export all these data.
Maintaining a database should be the best choice when it comes to
storing data. For now, several tsv
files with each file
having the name of the package and a .tsv
extension. The
file/database will be queried/processed by the
RulesStorageManager
class. Due to this abstraction, it
should be easier to switch to database or encrypted database systems in
future without changing the design of the entire project. Currently, All
configuration files are stored at
/data/data/io.github.muntashirakon.AppManager/Files/conf
.
The format below is used internally within App Manager and is not compatible with the external format.
<name> <type> <mode>|<component_status>|<is_granted>
Here:
<name>
– Component/permission/app op name (in
case of app op, it could be string or integer)
<type>
– One of the ACTIVITY
,
RECEIVER
, PROVIDER
, SERVICE
,
APP_OP
, PERMISSION
<mode>
– (For app ops) The associated mode constant
<component_status>
– (For components)
Component status
true
– Component has been applied (true
value is kept for compatibility)
false
– Component hasn’t been applied yet, but will
be applied in future (false
value is kept for
compatibility)
unblocked
– Component is scheduled to be
unblocked
<is_granted>
– (For permissions) Whether the
permission is granted or revoked
External format is used for importing or exporting rules in App Manager.
<package_name> <component_name> <type> <mode>|<component_status>|<is_granted>
This the format is essentially the same as above except for the first item which is the name of the package.
Caution.
The exported rules have a different format than the internal one and should not be copied directly to the conf folder.
App Manager v3.1.0 comes with a few new features and a lot of
improvements. Visit Settings
> About > Version/Changelog for details. App Manager now targets Android 13 which means most issues in Android
12 and 13 has been addressed, including SSAID and SAF issues as well as
monochrome icons and other theming issues. KeyStore backup/restore not working in Android 12 and later. Enable/disable is replaced with freeze/unfreeze to allow greater
control on the behaviours of an app. It supports suspend, disable and
hide functionalities which can be controlled at Settings
> Rules > Default freezing method. In order to make it easy to
freeze or unfreeze an app, shortcuts can also be created from the App
Info tab by long clicking on the freeze or unfreeze button. In the Main page, it is now possible to export the list of apps in
either XML or Markdown format using batch operations. In the future, the
XML file may also be imported to App Manager. App Manager now fully supports encrypting backups using ECC in
addition to offering AES, RSA and OpenPGP. Two new languages are added: Korean and Romanian. In the main page, more sorting and filtering options are added.
Sorting options include sorting the apps by total size, total data
usage, launch count, screen time and last usage time. Filtering options
include filtering the apps having at least one item in the Android
KeyStore, filtering apps with URIs granted via SAF, and filtering apps
with SSAID. Fixed various issues with ADB pairing, handled incomplete USB
debugging. Some rooting methods cannot allow interprocess communication
via Binder. In those cases, ADB mode is used as a fallback method by
enabling it automatically if possible. When possible, App Manager will be able to display apps from work
profile in no-root mode in addition to allowing basic operations such as
launching the app or navigating to the system settings. For backups, it
is now possible to restore backups for other users, but for work
profile, some apps may only work properly after re-enabling the work
profile. In the installer page, selecting All users will now
install the app for all users instead of only the current user. Finally,
in the app info tab, current app can be installed in another profile
using the Install for… option available in the three-dots menu.
This is analogous to the Explorer can now open DEX and JAR files in addition to APK files.
Several sorting options as well as folder options are also added as the
list options. In app info tab, a new tag called WX is added. It is displayed in
Android 10 and later if the application targets Android 9 or earlier. It
indicates W^X
violation which allows the app to execute arbitrary executable files
either by the modification of executables embedded within the app or by
downloading them from the Internet. App ops are now managed automatically to avoid various app ops
related crashes in various platforms. This will also lessen the amount
of crashes in an unsupported operating system. In the Main page, enabled batch uninstallation in no-root mode. Enabled advanced searching. Searching now matches not only app labels
but also package names. Copy the intercepted Intent as am command which can be run from
either an ADB shell or a terminal using root with the same
effectiveness. Explicitly handle the Internet permission which is a runtime
permission in the OS. Fixed permission denied issues in the installer due to a framework
issue introduced in MIUI 12.5. Fixed crashes in the Interceptor page due to a framework issue
introduced in Android 11. Improved Java-Smali conversion by including all the subclasses
during conversion Improved scanning performance in the Scanner page Improved updating the list of apps in the Main page Scan all the available paths to detect systemless-ly installed
system apps6.1.1
Android 13 support
6.1.1.0.1 Known issue
6.1.2
Introducing
freeze/unfreeze
6.1.3
Export app list
6.1.4
Elliptic Curve Crypography
(ECC)
6.1.5
New languages
6.1.6
More list options
6.1.7
Improved handling
of mode of operation
6.1.8
Handling multiple users
pm install-existing
command,
thereby, making the installation process a lot faster.6.1.9
Explorer enhancements
6.1.10 New tag: WX
6.1.11 App ops management
6.1.12 Batch uninstallation
6.1.13 Running apps
6.1.14 Interceptor
6.1.15 Device-specific changes
6.1.15.0.1 Graphene OS
6.1.15.0.2 MIUI
6.1.15.0.3 Motorola
6.1.16 Others
vacuum
SQLite database before opening it for viewing
or editing.
App Manager v3.0.0 comes with a lot of features and improvements. See
Settings
> Changelog to see a more detailed changelog. Material 3, somewhat similar to Material You, is a
significant improvement over Material Design 2 with support for dynamic
colours in Android 12 and later. In addition, many design changes have
been made in App Manager without any significant changes in the overall
user experience. Switches are still based on Material Design 2 which will be fixed in
a future release. Wireless debugging support has been fully implemented. Head over to
§3.2 for instructions on how
to configure wireless debugging. No-root users. Due to auto-detection feature, startup time might be large for
no-root users when the mode of operation is set to auto.
Instead, no-root users should select no-root instead of
auto. App Manager is fully translated into Indonesian and Italian languages
and can be enabled in settings. Bengali is removed due to lack of
translators. App Explorer can be used to browse the contents of an application.
This includes binary XML files, DEX contents or any other media files.
DEX contents can only be explored in Android Oreo (Android 8) and later.
It’s also possible to convert an It is possible to import backups from discontinued or obsolete
applications such as Titanium Backup, OAndBackup and Swift Backup
(version 3.0 to 3.2). Go to Setting > Backup/restore to find this
option. VirusTotal is a widely used tool to scan files and URLs for viruses.
In the scanner page and in the running apps page, an option to scan
files with VirusTotal has been added. But the option is hidden by
default. To enable the option, it is necessary to obtain an API key from
VirusTotal. Go to Settings > VirusTotal API Key for more
information. Internet feature. This is currently the only feature which require an Internet
connection. If you wish to use any Internet feature that might also be
added in the future, enable Use the Internet in Settings >
Enable/disable features. As the implementation of routine operations is being delayed, an
option to trigger profiles from the external automation software is
added. See §3.4 for instructions on how to
configure profile automation. Application installer includes several improvements including the
ability to downgrade applications in no-root mode, installing multiple
applications at once and blocking trackers after installation. In
Android 12 and later, no-root users can update applications without any
user interactions. It is now possible to configure how App Manager should block a
component. Visit Settings > Rules > Default blocking method for
more information. In the components tab, long clicking the block/unblock
button opens a context menu which allows per-component blocking in a
similar manner. ADB users can also block the components of a Test
only app. In some pages, the search bar supports additional searching which
includes searching via prefix, suffix or even regular expressions. In
the main page, it is also possible to search for applications using the
first letters of each word, e.g. App Manager can be listed by
searching for am. Activity interceptor can be opened directly from the activities tab
by long clicking on the launch button, and similarly, activities can be
launched from the activity interceptor page with or without root, for
any users. Notice. Currently, activities opened via root cannot send the results back to
the original applications. Screen time widget is quite similar to Digital Wellbeing’s widget by
the same name. It displays the total screen time for the day along with
the top three apps from all users. Clear cache widget can be to clear cache from all the applications
directly from the home screen.6.2.1
Material 3 and More
6.2.1.0.1 Known issue
6.2.2
Wireless Debugging
6.2.3
Languages
6.2.4
Introducing App Explorer
.smali
file into
.java
for a better understanding of the reversed code. This
feature, if not needed, can be disabled in Settings > Enable/disable
features.6.2.5
Import Backups
from Other Applications
6.2.6
VirusTotal
6.2.7
Trigger
Profiles from the Automation Software
6.2.8
Improved Application
Installer
6.2.9
Component Blocking
6.2.10 Advanced Searching
6.2.12 Make the Best Use of
Interceptor
6.2.13 Widget: Screen Time
6.2.14 Widget: Clear Cache
Back up/restore feature is now finally out of beta! Read the corresponding guide to understand how it works.
Log viewer is essentially a
front-end for logcat
. It can be used to filter logs by
tag or pid (process ID), or even by custom filters.
Log levels AKA verbosity can also be configured. You can also save,
share and manage logs.
Lock App Manager with the screen lock configured for your device.
You can set any mode for any app ops that your device supports, either from the 1-click ops page or from the app ops tab.
You can now easily add selected apps to an existing profile using the batch operations.
App info tab now has many options, including the ability to change SSAID, network policy (i.e. background network usage), battery optimization, etc. Most of the tags used in this tab are also clickable, and if you click on them, you will be able to look at the current state or configure them right away.
Sort and filter options are now replaced by List Options which is highly configurable, including the ability to filter using profiles.
Interested in knowing about your device in just one page? Go to the bottom of the settings page.
Not interested in all the features that AM offers? You can disable some features in settings.
AM now has more than 19 languages! New languages include Farsi, Japanese and Traditional Chinese.
You can now import external signing keys in AM! For security, App Manager has its own encrypted KeyStore which can also be imported or exported.
Since APKMirror has removed encryption from their APKM files, it’s no longer necessary to decrypt them. As a result, the option to decrypt APKM files has been removed. Instead, this option is now provided by the UnAPKM extension which you can grab from F-Droid. So, if you have an encrypted APKM file and have this extension installed, you can open the file directly in AM.
Profiles finally closes the related
issue. Profiles can be used to execute certain tasks repeatedly
without doing everything manually. A profile can be applied (or invoked)
either from the Profiles page or from
the home screen by creating shortcuts. There are also some presets which
consist of debloating profiles taken from Universal
Android Debloater. Exporting rules and applying permissions are not currently
working. Profiles are applied for all users.6.4.1.0.1 Known limitations
Intent
Intercept works as a man-in-the-middle between source and
destination, that is, when you open a file or URL with another app, you
can see what is being shared by opening it with Interceptor first. You
can also add or modify the intents before sending them to the
destination. Additionally, you can double-click on any exportable
activities in the Activities tab in the App Details page to open them in
the Interceptor to add more configurations. Editing extras is not currently possible.6.4.2.0.1 Known limitation
When I released a small tool called UnAPKM, I promised that similar feature will be available in App Manager. I am proud to announce that you can open APKM files directly in the App Info page or convert them to APKS or install them directly.
App manager now supports multiple users! For now, this requires root or ADB. But no-root support is also being considered. If you have multiple users enabled and click on an app installed in multiple profiles, an alert prompt will be displayed where you can select the user.
Thanks to the contributors, we have one more addition to the language club: French. You can add more languages or improve existing translations at Weblate.
If App Manager crashes, you can now easily report the crash from the notifications which opens the share options. Crashes are not reported by App Manager, it only redirects you to your favourite Email client.
Added support for Android 11. Not everything may work as expected though.
In settings page, you can set install locations such as auto (default), internal only and prefer external.
In settings page, you can also set default APK installer (root/ADB only) instead of App Manager.
In settings page, you can allow App Manager to display multiple users during APK installation.
In settings page, you can choose to sign APK files before installing
them. You can also select which signature scheme to use in the APK
signing option in settings. Currently, only a generic key is used to sign APK files6.4.8.4.1 Known limitation
As promised, it is now possible to select splits. AM also provides
recommendations based on device configurations. If the app is already
installed, recommendations are provided based on the installed app. It
is also possible to downgrade to a lower version without data loss if
the device has root or ADB. But it should be noted that not all app can
be downgraded. Installer is also improved to speed up the installation
process, especially, for root users. If the app has already been
installed and the new (x)apk(s) is newer or older or the same version
with a different signature, AM will display a list of changes similar to
What’s New before prompting the user to install the
app. This is useful if the app has introduced tracker components, new
permissions, etc. Large app can take a long time to fetch app info, and therefore,
it may take a long time display the installation prompt. If the apk is not located in the internal storage, the app has to
be cached first which might also take a long time depending on the size
of the apk.6.5.1.0.1 Known Limitations
Exodus page is now replaced with scanner page. Scanner page contains not only a list of trackers but also a list of used libraries. This is just a start. In the future, this page will contain more in depth analysis of the app.
System Config lists various system configurations and whitelists/blacklists included in Android by either OEM/vendor, AOSP or even some Magisk modules. Root users can access this option from the overflow menu in the main page. There isn’t any official documentation for these options therefore it’s difficult to write a complete documentation for this page. I will gradually add documentations using my own knowledge. However, some functions should be understandable by their name.
Thanks to the contributors, AM now has more than 12 languages. New languages include Bengali, Hindi, Norwegian, Polish, Russian, Simplified Chinese, Turkish and Ukrainian.
More tags are added in the app info tab such as KeyStore (apps with KeyStore items), Systemless app (apps installed via Magisk), Running (apps that are running). For external apk, two more options are added namely Reinstall and Downgrade. Now it is possible to share an apk via Bluetooth. For system apps, it is possible to uninstall updates for root/ADB users. But like the similar option in the system settings, this operation will clear all app data. As stated above, exodus has been replaced with scanner.
It is now possible to sort and filter processes in this tab. Also, the three big buttons are replaced with an easy-to-use three dot menu. Previously the memory usage was wrong which is fixed in this version.
Toybox (an alternative to busybox) is bundled with AM. Although Android has this utility built-in from API 23, toybox is bundled in order to prevent buggy implementations and to support API < 23.
Component blocker seemed to be problematic in the previous version, especially when global component blocking is enabled. The issues are mostly fixed now.
Caution.
The component blocking mechanism is no longer compatible with v2.5.6 due to various security issues. If you have this version, upgrade to v2.5.13 or earlier versions first. After that, enable global component blocking and disable it again.
Value of various app ops depend on their parent app ops. Therefore, when you allow/deny an app op, the parent of the app op gets modified. This fixes the issues some users have been complaining regarding some app ops that couldn’t be changed.
If an app has the target API 23 or less, its permissions cannot be
modified using the pm grant …
command. Therefore, for such
apps, option to toggle permission has been disabled.
The signature tab is improved to support localization. It also displays multiple checksums for a signature.
Manifest no longer crashes if the size of the manifest is too long. Generated manifest are now more accurate than before.
Bundled app formats such as apks and
xapk are now supported. You can install these apps
using the regular installation buttons. For root and adb users, apps are
installed using shell, and for non-root users, the platform default
method is used. Currently all splits apks are installed. But this
behaviour is going to change in the next release. If you only need a few
splits instead of all, extract the APKS or
XAPK file, and then, create a new zip file with your
desired split apks and replace the ZIP extension with
APKS. Now, open it with AM. There is no progress dialog to display the installation
progress.6.6.1.0.1 Known Limitations
You can now install APK, APKS or
XAPK directly from your favourite browser or file
manager. For apps that need updates, a What’s New
dialog is displayed showing the changes in the new version. Downgrade is not yet possible. There is no progress dialog to display the installation progress.
If you cannot interact with the current page, wait until the
installation is finished.6.6.2.0.1 Known Limitations
In the Settings page, a new option is added which can be used to remove all blocking rules configured within App Manager.
App Ops are now generated using a technique similar to AppOpsX. This should decrease the loading time significantly in the App Ops tab.
In the App Ops tab, a menu item is added which can be used to list only active app ops without including the default app ops. The preference is saved in the shared preferences.
Often the App Ops tab may not be responsive. If that’s the case, restart App Manager.
ADB shell commands are now executed using a technique similar to
AppOpsX (This is the free alternative of AppOps by Rikka.).
This should dramatically increase the execution time. AM can often crash or become not responsive. If that’s the case,
restart App Manager.6.6.5.0.1 Known Limitation
Add an option to filter apps that has at least one activity.
Apk files are now saved as app name_version.extension
instead of package.name.extension
.
Added a foreground service to run batch operations. The result of the operation is displayed in a notification. If an operation has failed for some packages, clicking on the notification will open a dialog box listing the failed packages. There is also a Try Again button on the bottom which can be used to perform the operation again for the failed packages.
Replaced Linux kill with force-stop.
Added German and Portuguese (Brazilian) translations. Not all translations are verified yet.6.6.9.0.1 Known Limitation
Install app only for the current user at the time of restoring backups. Support for split apks is also added.
Data backup feature is now considered unstable. If you encounter any problem, please report to me without hesitation.
App Ops (short hand for Application
Operations) are used by Android system (since Android 4.3) to
control application permissions. The user can control some
permissions, but only the permissions that are considered dangerous (and
Google thinks knowing your phone number isn’t a dangerous thing). So,
app ops seems to be the one we need if we want to install apps like
Facebook and it’s Messenger (the latter literary records everything if
you live outside the EU) and still want some privacy and/or
security. Although certain features of app ops were available in
Settings and later in hidden settings in older version of Android, it’s
completely hidden in newer versions of Android and is continued to be
kept hidden. Now, any app with
android.Manifest.permission.GET_APP_OPS_STATS
permission can get the app ops information for other applications but
this permission is hidden from users and can only be enabled using ADB
or root. Still, the app with this permission cannot grant or revoke
permissions (actually mode of operation) for apps other than itself
(with limited capacity, of course). To modify the ops of other app, the
app needs
android.Manifest.permission.UPDATE_APP_OPS_STATS
permissions which isn’t accessible via pm
command. So, you
cannot grant it via root or ADB, the permission is only granted to the
system apps. There are very few apps who support disabling permissions
via app ops. The best one to my knowledge is AppOpsX. The main (visible)
difference between my app (AppManager) and this app is that the latter
also provides you the ability to revoke internet permissions (by writing
ip tables). One crucial problem that I faced during the development of
the app ops API is the lack of documentation in English language.
Figure 1 describes the process of changing
and processing permission. AppOpsManager can be used to manage
permissions in Settings app. AppOpsManager is also
useful in determining if a certain permission (or operation) is granted
to the application. Most of the methods of
AppOpsManager are accessible to the user app but unlike
a system app, it can only be used to check permissions for any app or
for the app itself and start or terminating certain operations.
Moreover, not all operations are actually accessible from this Java
class. AppOpsManager holds all the necessary constants
such as OP_*
,
OPSTR_*
, MODE_*
which describes
operation code, operation string and mode of operations respectively. It
also holds necessary data structures such as PackageOps and OpEntry.
PackageOps holds OpEntry for a
package, and OpEntry, as the name suggests, describes
each operation.
AppOpService
is completely hidden from a user
application but accessible to the system applications. As it can be seen
in Figure 1, this is the class that does the
actual management stuff. It contains data structures such as
Ops to store basic package info and Op
which is similar to OpEntry of
AppOpsManager. It also has Shell which
is actually the source code of the appops command line tool. It writes
configurations to or read configurations from /data/system/appops.xml
. System
services calls AppOpsService to find out what an
application is allowed and what is not allowed to perform, and
AppOpsService determines these permissions by parsing
/data/system/appops.xml
. If no custom values are present in
appops.xml, it returns the default mode available in
AppOpsManager.
AppOpsManager stands for application operations manager. It consists of various constants and classes to modify app operations.
こちらもご覧ください: AppOpsManager documentation
OP_*
ConstantsOP_*
are the integer constants starting from
0
. OP_NONE
implies that no operations are
specified whereas _NUM_OP
denotes the number of operations
defined in OP_*
prefix. While they denote each operation,
the operations are not necessarily unique. In fact, there are many
operations that are actually a single operation denoted by multiple
OP_*
constant (possibly for future use). Vendors may define
their own op based on their requirements. MIUI is one of the vendors who
are known to do that.
public static final int OP_NONE = -1;
public static final int OP_COARSE_LOCATION = 0;
public static final int OP_FINE_LOCATION = 1;
public static final int OP_GPS = 2;
public static final int OP_VIBRATE = 3;
...
public static final int OP_READ_DEVICE_IDENTIFIERS = 89;
public static final int OP_ACCESS_MEDIA_LOCATION = 90;
public static final int OP_ACTIVATE_PLATFORM_VPN = 91;
public static final int _NUM_OP = 92;
Whether an operation is unique is defined by
sOpToSwitch
. It maps each operation to another operation or
to itself (if it’s a unique operation). For instance,
OP_FINE_LOCATION
and OP_GPS
are mapped to
OP_COARSE_LOCATION
.
Each operation has a private name which are described by
sOpNames
. These names are usually the same names as the
constants without the OP_
prefix. Some operations have
public names as well which are described by sOpToString
.
For instance, OP_COARSE_LOCATION
has the public name
android:coarse_location.
As a gradual process of moving permissions to app ops, there are
already many permissions that are defined under some operations. These
permissions are mapped in sOpPerms
. For example, the
permission
android.Manifest.permission.ACCESS_COARSE_LOCATION is
mapped to OP_COARSE_LOCATION
. Some operations may not have
any associated permissions which have null
values.
As described in the previous section, operations that are configured
for an app are stored at /data/system/appops.xml
. If an
operation is not configured, then whether system will allow that
operation is determined from sOpDefaultMode
. It lists the
default mode for each operation.
MODE_*
ConstantsMODE_*
constants also integer constants starting from
0
. These constants are assigned to each operation
describing whether an app is authorised to perform that operation. These
modes usually have associated names such as allow for
MODE_ALLOWED
, ignore for
MODE_IGNORED
, deny for
MODE_ERRORED
(a rather misnomer), default
for MODE_DEFAULT
and foreground for
MODE_FOREGROUND
.
MODE_ALLOWED
. The app is allowed to
perform the given operation
MODE_IGNORED
. The app is not
allowed to perform the given operation, and any attempt to perform the
operation should silently fail, i.e. it should not cause the
app to crash
MODE_ERRORED
. The app is not
allowed to perform the given operation, and this attempt should cause it
to have a fatal error, typically a
SecurityException
MODE_DEFAULT
. The app should use
its default security check, specified in
AppOpsManager
MODE_FOREGROUND
. Special mode that
means “allow only when app is in foreground.” This mode was added in
Android 10
MODE_ASK
. This is a custom mode
used by MIUI whose uses are unknown.
AppOpsManager.PackageOps is a data structure to store all the OpEntry for a package. In simple terms, it stores all the customised operations for a package.
public static class PackageOps implements Parcelable {
private final String mPackageName;
private final int mUid;
private final List<OpEntry> mEntries;
...
}
As can be seen in Listing 2, it stores all OpEntry for a package as well as the corresponding package name and its kernel user ID.
AppOpsManager.OpEntry is a data structure that stores a single operation for any package.
public static final class OpEntry implements Parcelable {
private final int mOp;
private final boolean mRunning;
private final @Mode int mMode;
private final @Nullable LongSparseLongArray mAccessTimes;
private final @Nullable LongSparseLongArray mRejectTimes;
private final @Nullable LongSparseLongArray mDurations;
private final @Nullable LongSparseLongArray mProxyUids;
private final @Nullable LongSparseArray<String> mProxyPackageNames;
...
}
Here:
mOp
: Denotes one of the OP_*
constants
mRunning
: Whether the operation is in progress
(i.e. the operation has started but not finished yet). Not all
operations can be started or finished this way
mMOde
: One of the MODE_*
constants
mAccessTimes
: Stores all the available access
times
mRejectTimes
: Stores all the available reject
times
mDurations
: All available access durations, checking
this with mRunning
will tell you for how long the app is
performing a certain app operation
mProxyUids
: No documentation found
mProxyPackageNames:
No documentation found
TODO
TODO
Latest appops.xml
has the following format: (This DTD is
made by me and by no means perfect, has compatibility issues.)
<!DOCTYPE app-ops [
<!ELEMENT app-ops (uid|pkg)*>
<!ATTLIST app-ops v CDATA #IMPLIED>
<!ELEMENT uid (op)*>
<!ATTLIST uid n CDATA #REQUIRED>
<!ELEMENT pkg (uid)*>
<!ATTLIST pkg n CDATA #REQUIRED>
<!ELEMENT uid (op)*>
<!ATTLIST uid
n CDATA #REQUIRED
p CDATA #IMPLIED>
<!ELEMENT op (st)*>
<!ATTLIST op
n CDATA #REQUIRED
m CDATA #REQUIRED>
<!ELEMENT st EMPTY>
<!ATTLIST st
n CDATA #REQUIRED
t CDATA #IMPLIED
r CDATA #IMPLIED
d CDATA #IMPLIED
pp CDATA #IMPLIED
pu CDATA #IMPLIED>
]>
The instruction below follows the exact order given above:
app-ops
: The root element. It can contain any number
of pkg
or package uid
v
: (optional, integer) The version number (default:
NO_VERSION
or -1
)
pkg
: Stores package info. It can contain any number
of uid
n
: (required, string) Name of the package
Package uid
: Stores package or packages info
n
: (required, integer) The user ID
uid
: The package user ID. It can contain any number
of op
n
: (required, integer) The user ID
p
: (optional, boolean) Is the app is a
private/system app
op
: The operation, can contain st
or
nothing at all
n
: (required, integer) The op name in integer,
i.e. AppOpsManager.OP_*
m
: (required, integer) The op mode,
i.e. AppOpsManager.MODE_*
st
: State of operation: whether the operation is
accessed, rejected or running (not available on old versions)
n
: (required, long) Key containing flags and
uid
t
: (optional, long) Access time (default:
0
)
r
: (optional, long) Reject time (default:
0
)
d
: (optional, long) Access duration (default:
0
)
pp
: (optional, string) Proxy package name
pu
: (optional, integer) Proxy package uid
This definition can be found at AppOpsService.
appops
or cmd appops
(on latest versions)
can be accessible via ADB or root. This is an easier method to get or
update any operation for a package (provided the package name is known).
The help page of this command is self-explanatory:
AppOps service (appops) commands:
help
Print this help text.
start [--user <USER_ID>] <PACKAGE | UID> <OP>
Starts a given operation for a particular application.
stop [--user <USER_ID>] <PACKAGE | UID> <OP>
Stops a given operation for a particular application.
set [--user <USER_ID>] <[--uid] PACKAGE | UID> <OP> <MODE>
Set the mode for a particular application and operation.
get [--user <USER_ID>] <PACKAGE | UID> [<OP>]
Return the mode for a particular application and optional operation.
query-op [--user <USER_ID>] <OP> [<MODE>]
Print all packages that currently have the given op in the given mode.
reset [--user <USER_ID>] [<PACKAGE>]
Reset the given application or all applications to default modes.
write-settings
Immediately write pending changes to storage.
read-settings
Read the last written settings, replacing current state in RAM.
options:
<PACKAGE> an Android package name or its UID if prefixed by --uid
<OP> an AppOps operation.
<MODE> one of allow, ignore, deny, or default
<USER_ID> the user id under which the package is installed. If --user is not
specified, the current user is assumed.