MuntashirAkon / MuntashirAkon/AppManager

Use document provider to grant third-party apps access to app-private directories

Open
#516 10 comments 7 reactions 0 assignees View on GitHub
Feature Feature: File Manager Priority: 3 Status: Pending
Dominant language
Java
Stars
9k
Forks
518
PR merge metrics
No merged PRs in 30d

Description

With the introduction of File Manager where an elegant method has been developed to support opening any files from any directory via a content provider so that the recipient app does not require any file or root permission, it is possible to enhance this support via a document provider so that a third-party app can access app-specific private directories such as `/data/data/package.name` without root permission. This could greatly reduce the attack surface as fewer number of apps would need to use the root permission.

Possible use cases:

1. Editing XML files at `/data/system/ifw/` without granting root or even the editors that do not support root but support SAF (AKA document provider).
2. Granting file managers access to certain app directory, such as `/data/data/io.github.muntashirakon.AppManager/files/profiles` so that you can add/edit profiles directly.
3. Backing up certain directory of interest via third-party event handling apps such as Tasker without letting them know about the location of the files and/or without granting root
4. I forgot others, but the general idea is to minimise apps that can access root.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.