factory reset policy in system manager

BinTianqi · May 31, 2024 · 19415d9 · 19415d9
1 parent ee1b6af
commit 19415d9
Show file tree

Hide file tree

Showing 4 changed files with 135 additions and 0 deletions.
diff --git a/app/src/main/java/com/bintianqi/owndroid/dpm/SystemManager.kt b/app/src/main/java/com/bintianqi/owndroid/dpm/SystemManager.kt
@@ -26,6 +26,7 @@ import android.app.admin.DevicePolicyManager.WIPE_EUICC
 import android.app.admin.DevicePolicyManager.WIPE_EXTERNAL_STORAGE
 import android.app.admin.DevicePolicyManager.WIPE_RESET_PROTECTION_DATA
 import android.app.admin.DevicePolicyManager.WIPE_SILENTLY
+import android.app.admin.FactoryResetProtectionPolicy
 import android.app.admin.SystemUpdateInfo
 import android.app.admin.SystemUpdatePolicy
 import android.app.admin.SystemUpdatePolicy.TYPE_INSTALL_AUTOMATIC
@@ -65,6 +66,7 @@ import androidx.compose.material3.MaterialTheme.colorScheme
 import androidx.compose.material3.MaterialTheme.typography
 import androidx.compose.material3.OutlinedTextField
 import androidx.compose.material3.Scaffold
+import androidx.compose.material3.Switch
 import androidx.compose.material3.Text
 import androidx.compose.material3.TextButton
 import androidx.compose.runtime.Composable
@@ -73,6 +75,7 @@ import androidx.compose.runtime.MutableState
 import androidx.compose.runtime.collectAsState
 import androidx.compose.runtime.getValue
 import androidx.compose.runtime.mutableIntStateOf
+import androidx.compose.runtime.mutableStateListOf
 import androidx.compose.runtime.mutableStateOf
 import androidx.compose.runtime.remember
 import androidx.compose.runtime.setValue
@@ -148,6 +151,7 @@ fun SystemManage(navCtrl:NavHostController) {
             composable(route = "SystemUpdatePolicy") { SysUpdatePolicy() }
             composable(route = "InstallSystemUpdate") { InstallSystemUpdate() }
             composable(route = "WipeData") { WipeData() }
+            composable(route = "FRP") { FactoryResetProtection() }
         }
     }
     if(rebootDialog.value) {
@@ -209,6 +213,12 @@ private fun Home(navCtrl: NavHostController, scrollState: ScrollState, rebootDia
         ) {
             SubPageItem(R.string.install_system_update, "", R.drawable.system_update_fill0) { navCtrl.navigate("InstallSystemUpdate") }
         }
+        if(
+            VERSION.SDK_INT >= 30 &&
+            (isDeviceOwner(dpm) || (isProfileOwner(dpm) && dpm.isManagedProfile(receiver) && dpm.isOrganizationOwnedDeviceWithManagedProfile))
+        ) {
+            SubPageItem(R.string.frp_policy, "", R.drawable.device_reset_fill0) { navCtrl.navigate("FRP") }
+        }
         SubPageItem(R.string.wipe_data, "", R.drawable.warning_fill0) { navCtrl.navigate("WipeData") }
         Spacer(Modifier.padding(vertical = 30.dp))
         LaunchedEffect(Unit) { fileUriFlow.value = Uri.parse("") }
@@ -896,6 +906,108 @@ private fun SecurityLogs() {
     }
 }
 
+@SuppressLint("NewApi")
+@Composable
+fun FactoryResetProtection() {
+    val context = LocalContext.current
+    val dpm = context.getSystemService(ComponentActivity.DEVICE_POLICY_SERVICE) as DevicePolicyManager
+    val focusMgr = LocalFocusManager.current
+    val receiver = ComponentName(context,Receiver::class.java)
+    var usePolicy by remember { mutableStateOf(false) }
+    var enabled by remember { mutableStateOf(false) }
+    var unsupported by remember { mutableStateOf(false) }
+    val accountList = remember { mutableStateListOf<String>() }
+    var inputAccount by remember { mutableStateOf("") }
+    LaunchedEffect(Unit) {
+        var policy: FactoryResetProtectionPolicy? = FactoryResetProtectionPolicy.Builder().build()
+        try {
+            policy = dpm.getFactoryResetProtectionPolicy(receiver)
+        } catch(e: UnsupportedOperationException) {
+            unsupported = true
+            policy = null
+        } finally {
+            if(policy == null) {
+                usePolicy = false
+            } else {
+                usePolicy = true
+                enabled = policy.isFactoryResetProtectionEnabled
+            }
+        }
+    }
+    Column(modifier = Modifier.fillMaxSize().padding(horizontal = 8.dp).verticalScroll(rememberScrollState())) {
+        Spacer(Modifier.padding(vertical = 10.dp))
+        Text(text = stringResource(R.string.frp_policy), style = typography.headlineLarge)
+        Spacer(Modifier.padding(vertical = 3.dp))
+        Text(stringResource(R.string.factory_reset_protection_policy))
+        Spacer(Modifier.padding(vertical = 5.dp))
+        Row(
+            horizontalArrangement = Arrangement.SpaceBetween, verticalAlignment = Alignment.CenterVertically,
+            modifier = Modifier.fillMaxWidth().padding(horizontal = 6.dp, vertical = 8.dp)
+        ) {
+            Text(stringResource(R.string.use_policy), style = typography.titleLarge)
+            Switch(checked = usePolicy, onCheckedChange = { usePolicy = it })
+        }
+        AnimatedVisibility(usePolicy) {
+            Column {
+                CheckBoxItem(stringResource(R.string.enable_frp), { enabled }, { enabled = !enabled })
+                Text(stringResource(R.string.account_list_is))
+                Text(
+                    text = if(accountList.isEmpty()) stringResource(R.string.none) else accountList.toText(),
+                    modifier = Modifier.animateContentSize()
+                )
+                OutlinedTextField(
+                    value = inputAccount,
+                    label = { Text(stringResource(R.string.account)) },
+                    onValueChange = { inputAccount = it },
+                    keyboardOptions = KeyboardOptions(keyboardType = KeyboardType.Ascii, imeAction = ImeAction.Done),
+                    keyboardActions = KeyboardActions(onDone = { focusMgr.clearFocus() }),
+                    modifier = Modifier.fillMaxWidth()
+                )
+                Spacer(Modifier.padding(vertical = 2.dp))
+                Row(modifier = Modifier.fillMaxWidth(),horizontalArrangement = Arrangement.SpaceBetween) {
+                    Button(
+                        onClick = { accountList.add(inputAccount) },
+                        modifier = Modifier.fillMaxWidth(0.49F)
+                    ) {
+                        Text(stringResource(R.string.add))
+                    }
+                    Button(
+                        onClick = { accountList.remove(inputAccount) },
+                        modifier = Modifier.fillMaxWidth(0.96F)
+                    ) {
+                        Text(stringResource(R.string.remove))
+                    }
+                }
+            }
+        }
+        Spacer(Modifier.padding(vertical = 5.dp))
+        Button(
+            onClick = {
+                focusMgr.clearFocus()
+                if(unsupported) {
+                    Toast.makeText(context, R.string.unsupported, Toast.LENGTH_SHORT).show()
+                } else {
+                    val policy = FactoryResetProtectionPolicy.Builder()
+                        .setFactoryResetProtectionEnabled(enabled)
+                        .setFactoryResetProtectionAccounts(accountList)
+                        .build()
+                    dpm.setFactoryResetProtectionPolicy(receiver, policy)
+                }
+            },
+            modifier = Modifier.width(100.dp).align(Alignment.CenterHorizontally)
+        ) {
+            Text(stringResource(R.string.apply))
+        }
+        Spacer(Modifier.padding(vertical = 10.dp))
+        if(unsupported) {
+            Information {
+                Text(stringResource(R.string.frp_policy_not_supported))
+            }
+        }
+        Spacer(Modifier.padding(vertical = 30.dp))
+    }
+}
+
 @Composable
 private fun WipeData() {
     val context = LocalContext.current

diff --git a/app/src/main/res/drawable/device_reset_fill0.xml b/app/src/main/res/drawable/device_reset_fill0.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="960"
+    android:viewportHeight="960">
+  <path
+      android:pathData="M480,840q-138,0 -240.5,-91.5T122,520h82q14,104 92.5,172T480,760q117,0 198.5,-81.5T760,480q0,-117 -81.5,-198.5T480,200q-69,0 -129,32t-101,88h110v80L120,400v-240h80v94q51,-64 124.5,-99T480,120q75,0 140.5,28.5t114,77q48.5,48.5 77,114T840,480q0,75 -28.5,140.5t-77,114q-48.5,48.5 -114,77T480,840ZM592,648L440,496v-216h80v184l128,128 -56,56Z"
+      android:fillColor="#000000"/>
+</vector>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
@@ -49,6 +49,8 @@
     <string name="start">开始</string>
     <string name="unknown_error">未知错误</string>
     <string name="allow_all">允许全部</string>
+    <string name="use_policy">使用策略</string>
+    <string name="account">账户</string>
 
     <!--Permissions-->
     <string name="click_to_activate">点击以激活</string>
@@ -168,6 +170,11 @@
     <string name="will_delete_work_profile">将会删除工作资料</string>
     <string name="api34_or_above_wipedata_cannot_in_system_user">API34或以上将不能在系统用户中使用WipeData</string>
     <string name="encrypt_status_is">加密状态：</string>
+    <string name="frp_policy">FRP策略</string>
+    <string name="factory_reset_protection_policy">恢复出厂设置保护策略</string>
+    <string name="frp_policy_not_supported">这个设备不支持恢复出厂设置保护策略</string>
+    <string name="enable_frp">启用FRP</string>
+    <string name="account_list_is">账户列表：</string>
 
     <!--SystemUpdatePolicy-->
     <string name="is_security_patch">安全补丁: %1$s</string>

diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
@@ -52,6 +52,8 @@
     <string name="start">Start</string>
     <string name="unknown_error">Unknown error</string>
     <string name="allow_all">Allow all</string>
+    <string name="use_policy">Use policy</string>
+    <string name="account">Account</string>
 
     <!--Permissions-->
     <string name="click_to_activate">Click to activate</string>
@@ -178,6 +180,11 @@
     <string name="will_delete_work_profile">Work profile will be deleted. </string>
     <string name="api34_or_above_wipedata_cannot_in_system_user">You cannot use WipeData in system user. </string>
     <string name="encrypt_status_is">Encrypt status: </string>
+    <string name="frp_policy">FRP policy</string>
+    <string name="factory_reset_protection_policy">Factory reset protection policy</string>
+    <string name="frp_policy_not_supported">FRP policy is not supported on this device</string>
+    <string name="enable_frp">Enable FRP</string>
+    <string name="account_list_is">Account list: </string>
 
     <!--SystemUpdatePolicy-->
     <string name="is_security_patch">Security patch: %1$s</string>