GrapheneOS's Sandboxed Play services #22
-
|
I think it'd be useful to integrate GrapheneOS's patches that basically allow to run google play services as unprivileged apps. LOS devs refused to integrate them, but they were already ported by someone else, more info here: https://forum.xda-developers.com/t/guide-grapheneoss-sandboxed-play-services-in-your-rom.4340557/ I'm aware about microG, but unfortunately these are some apps that don't work with it correctly. GrapheneOS's patches provide a compromise solution allowing users to use such apps (most of them) under the separate work profile (or user account) without the need of installing GPlay services system-wide. |
Beta Was this translation helpful? Give feedback.
Replies: 8 comments 22 replies
-
|
I don't care about Google apps. DivestOS does not support Google apps. |
Beta Was this translation helpful? Give feedback.
-
|
The standard carried Signature Spoofing patch can be granted to any app. <--- this is where the biggest issue is |
Beta Was this translation helpful? Give feedback.
-
|
If a patch is provided (possibly using something similar to GrapheneOS's method), it won't be merged? It's the only way to safely run apps that depend on Play Services. Otherwise, only problematic MicroG can be used. Sandboxed Play Services should be able to be used in work profile and other profiles specifically. |
Beta Was this translation helpful? Give feedback.
-
|
I don't care about apps that depend on Play Services. |
Beta Was this translation helpful? Give feedback.
-
|
If any developer wants to offer support for Play services, will DivestOS accept it? |
Beta Was this translation helpful? Give feedback.
-
|
@rsssxd See comment directly above. |
Beta Was this translation helpful? Give feedback.
-
|
@SkewedZeppelin Read: At least add some support for installing Sandbox Play Services. It doesn't need to be pre-installed like GrapheneOS did. But yeah, I'm not complaining just stating the facts and I'm not here to argue. The point of this comment is to (probably) change your mind. It's okay if you still do not agree everything I pointed out in this comment. |
Beta Was this translation helpful? Give feedback.
-
|
DivestOS exists to achieve a balance of privacy, security, and freedom on primarily old devices. |
Beta Was this translation helpful? Give feedback.
-
|
Sorry to interrupt you guys but I have one (dumb) question (because I do not have installed DivestOs yet) : I thought i read somewhere that DivestOs came bundled with microG... is it the case or not ? |
Beta Was this translation helpful? Give feedback.
-
|
microG is NOT included or supported on DivestOS. |
Beta Was this translation helpful? Give feedback.
-
|
Ok, better to know it now. |
Beta Was this translation helpful? Give feedback.
-
|
UnifiedNlp was previously included, but it was removed due to concerns of it leaking location data to apps without location permission. |
Beta Was this translation helpful? Give feedback.
-
|
Is there an alternative to UnifiedNlp ? or some kind of workaround ? |
Beta Was this translation helpful? Give feedback.
-
|
Well... The only component I was using microg for is UnifiedNlp. I don't know if I'm able to deal with no location service provider. I have to check my apps...
Le 19 mai 2022 23:02:36 GMT+02:00, Tad ***@***.***> a écrit :
…UnifiedNlp was previously included, but it was removed due to concerns of it leaking location data to apps without location permission.
--
Reply to this email directly or view it on GitHub:
#22 (reply in thread)
You are receiving this because you commented.
Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
UnifiedNlp was removed due to concerns of it leaking location to apps without permission, among other reasons. |
Beta Was this translation helpful? Give feedback.
-
|
MicroG is still listed on the DivestOS about page https://divestos.org/index.php?page=about It would be super nice if everyone was clearly informed that it is not included. Any choice is fully understandable. However, there is also a user community looking for different compromises between privacy and location information quality. |
Beta Was this translation helpful? Give feedback.
-
|
That is the credits section, it is mentioned no where else such as the homepage, faq page, technical details page, post install page, or screenshots page. (all pages which it was on at some point years ago) There is even a note on the site stating:
|
Beta Was this translation helpful? Give feedback.
-
|
@SkewedZeppelin , what about "gmaps wv", Its a google maps wrapper, does DivestOS support this? |
Beta Was this translation helpful? Give feedback.
-
|
GMaps WV is my app and doesn't use/require Play Services, it will work on any OS: https://divestos.org/index.php?page=our_apps#gmapswv Actual Google Maps works on DivestOS too! |
Beta Was this translation helpful? Give feedback.
-
|
@SkewedZeppelin ,thank you! sorry to bother. I appreciate it. |
Beta Was this translation helpful? Give feedback.
-
|
17.1 and higher have an unprivileged microG feature now: https://divestos.org/pages/faq#appCompatibility |
Beta Was this translation helpful? Give feedback.
-
|
Could you include same patches for 15.1 and up? |
Beta Was this translation helpful? Give feedback.
-
|
I started a backport for 16.0 but haven't finished it. Once that is done it should be easier to backport to 14 and 15. |
Beta Was this translation helpful? Give feedback.
-
|
This is interesting, I'm not looking for Play Services but just a Sandboxing feature, I see in your faq this section: https://divestos.org/pages/faq#sandbox
I want to know if:
If not is it possible to add that as files scoping should be part of sandboxing definition @SkewedZeppelin thanks in advance! |
Beta Was this translation helpful? Give feedback.
-
|
DivestOS inherits the standard AOSP scoped storage permissions for apps. It doesn't feature the more fine grained version that GrapheneOS has. |
Beta Was this translation helpful? Give feedback.
-
|
Thanks @SkewedZeppelin I'm interested to knowing what needs to be done if we want to add storage and contact scopes as described in GrapheneOS Is this something you are looking to add to the project? Is it something trivial to "merge" from the GrapheneOS repositories? |
Beta Was this translation helpful? Give feedback.
-
|
I'm not currently interested in porting it is it is quite complex. |
Beta Was this translation helpful? Give feedback.
I don't care about Google apps.
I don't use them. I don't want them.
They are proprietary.
DivestOS does not support Google apps.
DivestOS will not include microG or the GrapheneOS' Play Services sandbox.
Anyone is welcome to fork DivestOS for such if they desire.