yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] x942:
New version coming in a few days :) I will post a patched version today, it looks like I uploaded the wrong version by mistake.

Oops looks like I messed up and uploaded the wrong version I will fix this. Originally it did use xbin and also disabled more things (bluetooth and NFC) but I corrected this as most users don't want those disabled. I will post the proper APK :) With the proper paths. It's alread compiled so expect it in a few min.

I can include these :) I will do so in a future update.
[Android Apps and Games] x942:
Fixed the issue. It doesn't give any errors on CM10/10.1 on my N4. Path is now /system/bin for the binaries that are there and xbin is only used for a couple binaries that are only in that folder.

Also moved repo to github as google code is annoying. Update also pushed to Play Store.
[Android Apps and Games] ajeesh vijayan:
nice work
[Android Apps and Games] apatal:
Hi just wanted to report that with the patched version, I'm still getting the "no such file" error. Thanks.
[Android Apps and Games] jas0nsg:
Getting this from v2
[Android Apps and Games] :
Can you please post the out put of your /system/bin and /system/xbin folders? I am curious as why it's not finding anything as it works perfectly for me. What ROM are you using and what phone are you using?

I am going to try and have the app check which files are present and only disable the files that are present. If any dev has any tips on how to do this please PM me.
[Android Apps and Games] fluxgfx:
As indicated from other posters it's still looking for the xbin path. I for myself I'm running a stock rom. I've also tried this with JediXP 8 and I'm getting the same results.
[Android Apps and Games] fastcx:
EDITED: Double checked, error items doesn't exist in /system/bin for cm10.1
[Android Apps and Games] :
Can you please send me an output of your /system/bin and /system/xbin?

You can use these commands:

ls /system/bin | cat > /sdcard/bin.txt

ls /system/xbin | cat > /sdcard/xbin.txt

I fixed the problem (at least with AOSP roms). The issue before was it was looking for ALL binaries in the xbin folder. Now it looks for the ones in bin and some in xbin. There are a few binaries that ARE located in xbin and that's what SecDroid looks for. Right now it outputs an error, but the next version will do this:

This way it will ONLY disable what it can find and will find them no mater what location they are stored in. So in the next version it won't miss them if they are in bin instead of xbin. It also won't give errors as it only acts on files if it finds them. For the time being if you get any errors "file doesn't exist" just double check the folders and see if they are present. The probably aren't, at least on the N4 Roms they aren't. (CM10.1/AOKP)

Thanks for the feedback! Much Appreciated!

Which item doesn't exist? Can you do the same as above?

Thanks for feedback!

This is my first real app :) So I Expected bugs. Thanks to all who are reporting them. I will try and fix ASAP!
[Android Apps and Games] jeetjshah:
This is really interesting work! Something I will have to follow. I've been following the SEAndroid project (http://selinuxproject.org/page/SEAndroid) but with the need of a compatible kernel, the supported devices are limited to the Google/Nexus line.

Do you have plans to incorporate some of the same features?
[Android Apps and Games] CoolApps:
Congratulations, your application was reviewed on XDA TV a few days ago. :)
[Android Apps and Games] plasticarmyman:
echo "If the script reports 'unable to chmod' that means you are safe and the file(s) are not present"
echo "Please let me know if your rom places these files elsewhere"
[Android Apps and Games] fastcx:
bin.txt

xbin.txt
[Android Apps and Games] :
Thanks! I have a working version that should fix the issue. I will post in a few minuites just doing some last minute tweeking and take screen shots (changed the look at bit and added new buttons).
[Android Apps and Games] :
Update and changelog posted. Should fix the issues. I will hopefully have a cleaner (code wise) fix by the end of the week but this will catch the binaries no mater what directory they are in (xbin or bin).

Thanks everyone! Update should hit the playstore by tomorrow morning! :D
[Android Apps and Games] tijuanacartel:
I'm curious, what threat are you protecting against by disabling ping?
[Android Apps and Games] Keon91:
Hi x942,

Maybe you can add a button to your app that provides an overview of what is disabled and what not?

Or mayby just the output of the script, so users can see what is disabled and what not...
[Android Apps and Games] Musoka Eimin:
Thanks for the app but about Alpha 3

Hey x942,

UPDATE: I see from Apatals screenshot this is just a little visual glitch so I'm adding a screenshot off mine so you have a reference what it looks like on this device and resolution. Let me know if I can provide more info or assist further.

I want to say thanks for publicly sharing your effort. This closes a number of things that were of some slight concern should my phone land in the wrong hands and seemed to work well, Looking forward to seeing it progress and hopefully an option to run automatically. Upgraded to Alpha 3 today and is it just me, or is the button to secure the device gone? Seems like all it does now is link to the website and this thread. Running cyanogenmod 7.2 on HTC Evo 4g. Does it just do it in the background automatically now? I appreciated being able to see what it was doing. Maybe it was just forgotten, we are all human :confused:

Anyways thanks again, and I look forward to figuring out how to run the latest version and seeing how your project progresses.

Musoka

:highfive:
[Android Apps and Games] pastime1971:
i just wonder about SSH and SSHD.

they are supposedly secure, aren't they ? wouldn't it be iptables' job ?

and may i ask why it is necessary to disable ssh client ?
[Android Apps and Games] apatal:
Just a minor design bug below.

Oh yeah, and I do wish there is a way to view what it actually did disable, like in the previous version, just so we know if it's really working.

Thanks! :)
[Android Apps and Games] :
Thanks for the feedback! I will be releasing a new version ( a complete re-write of the app) that will fix display issues (hopfully all of them :p ) and also output the results to a log in /sdcard/secdroid.log

SSH is secure as in all data being sent over it is encrypted. The issue here is that malware could use SSH to connect to a rouge server and effectively have "shell" access to the device - this is VERY bad. If the app has root it could use SSHD to start a ssh server and use it as a backdoor. The next version will allow you to enable or disable each binary on demand. So if you need SSH you can leave it and disable the rest :)

Will fix in 0.4 hopefully. Since 0.4 is a full rewirte of the code it may take a few days to test and upload.

Thanks for the feedback and patients :)
[Android Apps and Games] jas0nsg:
V3 works!
[Android Apps and Games] :
Great to hear! :D
[Android Apps and Games] jas0nsg:
Thanks to you ;)
[Android Apps and Games] devrruti:
Will Cerberus, androidlost, airdroid or this kind of remote control apps continue to work if secdroid is used?

Thanks for this great app and for releasing it gpl
[Android Apps and Games] littlekini:
I just tried with Cerberus and it works great ;)

Inviato dal mio GT-I9300 con Tapatalk 2
[Android Apps and Games] Columbo4Life:
stuck on boot

Hi,

Unfortunately, after installing the app, I am stuck at boot screen.

Strangely, it gives me the startup sound but my desktop doesn't show... it is still stuck on boot screen.

Any help?

Regards,

MJ.
[Android Apps and Games] peterrus:
Interesting, nice!

A undo / revert changes function would be a welcome change though, for peace of mind ;)
[Android Apps and Games] Keon91:
Hi x942,

The app changed the permissions from busybox.

(from root : permisson denied to "/system/xbin/busybox")

So when my phone was restarted, a lot of things were broken.
[Android Apps and Games] :
Try this:

With the phone plugged into the computer enter in terminal/command prompt:

adb wait-for-device remove secdroid

I can't see what would prevent booting though? It doesn't touch any need binaries. I am doing a full rewrite of the app though.

Next version will have this!! Hopefully it will be up tomorrow!

Weird. The app never touches busybox.. Can you send my an output of logcat and xbin and bin via PM?

Next version will be better. I hope no bugs will be present! Sorry about the inconviences..
[Android Apps and Games] ImpulsiveOats:
I have a problem. I enable Secdroid and tested everything. It was working perfectly fine, until I rebooted my phone. Even after 5 reboots, I still can't use ADB or PM.

But everything other than that, this is a great app.
[Android Apps and Games] CoolApps:
Re: [APP][GPL]SecDroid - Android Hardening [ALPHA]

You know the commands you used to change permissions to the ssh file and etc?

Did you try using the su binary from their?
[Android Apps and Games] blchff04:
Re: [APP][GPL]SecDroid - Android Hardening [ALPHA]

Anyway this app could be modified to test if any exploits are currently being used and by what before disabling the exploits altogether
[Android Apps and Games] SecUpwN:
AW: [APP][GPL]SecDroid - Android Hardening [ALPHA]

Would you please include automatic updates and an option for a permanent icon in the notification bar? :)
[Android Apps and Games] Aitrus:
this app is great and all. but how can i enable it all again? i can re-enable adb by myself. but PM... i've uninstalled the app but i can no longer install are push anything. i'm not excatly a themer but i like to pull, push and install whenever the mood strikes me.

help please.
[Android Apps and Games] Aitrus:
Re: [APP][GPL]SecDroid - Android Hardening [ALPHA]

Never mind. Dermann PM'd me a script that fixed all this.
[Android Apps and Games] SecUpwN:
AW: [APP][GPL]SecDroid - Android Hardening [ALPHA]

Can he include the script in his app?
[Android Apps and Games] dermann:
For those of you pm'ing me and aitrus about the script I gave him to reverse all the hardening that this app does. Here it is, I just took the script that comes with the app and tried to do the opposite of what I saw/could.

NOTE!! do not run this on your sdcard, it won't work. Copy it somewhere else other than your sdcard, then run it.

I'm not a developer, but I'm working on this... no promises.
[Android Apps and Games] :
Thank you for the post and zip.

I am sorry everyone for the lack of replies. I have ran into a very busy schedule this past week and haven't been able to get online. Subsequently my computer crapped out on me (Fedora 18 update crashed miserably) but I am up and running again. Here is the low down:

Secdroid will be updated this weekend at the latest. I have a working build that re-enables ADBD I just have to push a commit to git-hub and release the binary apk. If any one wants to test it before release please PM me.

I have now launched a secure ROM (GuardianROM) for the Nexus 4 and Galaxy nexus. Both will hopefully be released soon as well. Stay tuned on my twitter for updates.

Thank you all for your patients. I will post again tomorrow with further updates.
[Android Apps and Games] :
UPDATED!! Sorry for the delay :)

I have added a button to re-enable adb and debugging without reboot. It works great on my Nexus 4 and GNex but as always please let me know if you run into any issues.

Also I am working to get my GNex/Nexus 4 rom out. I am hoping to have it out ASAP but until then if you guys/gals are interested please keep posted on my twitter and website. I am hoping to have time to push it this week. But with the BB10 launch I have been crazy busy with work. Everyones patients is much appreciated :)
[Android Apps and Games] dicknixondick:
security hygiene

Thanks. I use your app with no troubles. I appreciate this kind of effort a lot since I'm in the security side of things.

Something I've long suspected but recently ran into is well respected xda developers grabbing executables off the web and just using them in their haste to build or fix their roms, without building the tool from source. Once in a while they are kind enough to offer their private tool set to the rest of us, but thats when the issue of virii comes up. Not android virii, but windows infections, which of course could introduce anomalies directly into the android rom itself, and of course infects the windows machine running the tools.

I'm seeing a dearth of howto's on basic information security hygiene around here. But I see a lot of worn out, harried and generous devs too tired to care.

Maybe if there was a small group of ppl who are knowledgeable and paying attention here or a sub forum on security and how to put together a clean build environment, etc, a critical mass might form and take root around here. Heck I even dream of an amazon ec3 farm of build instances available for devs to push their code to for clean builds.

Anyway, you seemed concerned about sec so I thought I'd mention it.

Carry on! :)
[Android Apps and Games] SecUpwN:
AW: [APP][GPL]SecDroid - Android Hardening [BETA]

Would you please add a notification icon for the running app in the notification bar and automatic update checking? Thanks!
[Android Apps and Games] :
Sounds interesting. I would do the Ec3 "remote" dev box farm if I had the money. That would be pretty cool. I mean just think about it:

Developer can't afford high end hardware just opens his web browser goes to remotedevbox.com and uploads his code to a VM (Unique to him and even encrypted with his ID Token) the box does the compiling for him without him needing high end hardware. He could even do it from a tablet if desired.

I can add a notification but as the app isn't persistent I'm not sure what the point is? The app disables the binaries and it's done. No background processes or anything. I guess I could just have an icon saying "SecDroid is protecting your device" and the user could dismiss it if desired or leave it their until reboot (reminding them to re-run it and disable ADB again).
[Android Apps and Games] mroneeyedboh:
Does it always run on boot or we need to enable everytime we restart? I think I remember seeing you touching on this but Im not sure.
[Android Apps and Games] smash240:
Re: [APP][GPL]SecDroid - Android Hardening [BETA]

Great app. Top notch.♥
[Android Apps and Games] :
Can you include a button to reverse the changes like dermann pointed in this post:

http://xdaforums.com/showpost.php?p=37474408&postcount=57

Can you?

Edit:

On 0.4 why do you chmod adbd binary of permissions 700 ?

It's 777 not 700!

Can you fix it? :)
[Android Apps and Games] eejee:
Re: [APP][GPL]SecDroid - Android Hardening [BETA]

I really like the intentions of Secdroid, but it blocks the root access of Semaphore Manager (for managing settings of the Semaphore kernel for Galaxy S). To be more precise: it blocks access to the app itself, but not the previously chosen bootup settings of the app. I found that simply rebooting does not solve this: the only solution is a reflash of the rom. Hope this can be resolved.

Verstuurd van mijn GT-P5100 met Tapatalk
[Android Apps and Games] lemora:
help

secdroid seems to have messes up my galaxy nexus gsm. running stock 4.2 with franco's kernel and supersu.

even though supersu says it grants permission it only does for some apps. busybox is broke now. it says su binary not found on my phone. it's in system/app though.

i tried rebooting and uninstalling secdroid but it doesn't help. also tried executing the normal.sh file posted here but everything it does is: can't execute: permission denied. because busybox is broke i assume.

worst of all my wifi seems to not work now either? i use droidwall+ and confirmed that works correctly and is not blocking anything.
[Android Apps and Games] SecUpwN:
AW: [APP][GPL]SecDroid - Android Hardening [BETA]

Stop right there. How do you KNOW? Please get proof first and post your complete log or it never happened.
[Android Apps and Games] :
Re: [APP][GPL]SecDroid - Android Hardening [BETA]

Seems odd. Can you post a log cat? I am running Franco on my gnex with no issues at all. I would like to see if there is a conflict with something else.
[Android Apps and Games] :
Re: [APP][GPL]SecDroid - Android Hardening [BETA]

Pushing update this week to include super user permission in the manifest. :)
[Android Apps and Games] SecUpwN:
AW: [APP][GPL]SecDroid - Android Hardening [BETA]

Please include an option in the settings that once ticked, runs SecDroid automatically for securing the ROM upon reboot. Thanks so much for developing this!
[Android Apps and Games] :
Re: [APP][GPL]SecDroid - Android Hardening [BETA]

New features:

* Super User permission is requested

* notification icon

Conning soon:

* run at start

* more options

* better UI

Will post apk tomorrow. My dev box needs a rest from compiling ROMs all day :)
[Android Apps and Games] SecUpwN:
AW: [APP][GPL]SecDroid - Android Hardening [BETA]

Dude, you can't make us drool and then just say you're gonna post it tomorrow! :) So eager for new features!
[Android Apps and Games] :
Re: [APP][GPL]SecDroid - Android Hardening [BETA]

Haha sorry ;) I am compiling the apk now and will post to play store and here :)
[Android Apps and Games] SecUpwN:
AW: [APP][GPL]SecDroid - Android Hardening [BETA]

Awesome! Request: Automatic update checks with optional direct download from server. Possible?
[Android Apps and Games] :
UPDATES:

Version 0.5 (BETA) - Added Super User Permissions.

Will be adding more this weeked. Sadly I lost my Private key (it's backed up now!) so I will have to pull the current market version and upload a new one.

Coming this weeked:

Alert Pop-Ups

Better UI (Slightly)

Hopefully Auto-run
[Android Apps and Games] :
Also my website is experiencing issues with my host right now so It won't be until tomorrow at the soonest.
[Android Apps and Games] ThomasPeng:
It's not an easy job to make such an app, carry on!
[Android Apps and Games] SecUpwN:
AW: [APP][GPL]SecDroid - Android Hardening [BETA]

How about automatic updates? :)

And hey, a widget would be fancy!
[Android Apps and Games] :
Updates are under way. Adding auto run and auto update. Google Play version will be pulled for so I can repost it ( I lost my private key). A new download link is here: http://www.shadowdcatconsulting.com/storage/secdroid_Latest.apk and will be up with the new updates.

If any one can make a nice icon it would be very much appreciated! I prefer its released under a Creative Commons Share-a-Like License if possibe. :)
[Android Apps and Games] SecUpwN:
Cool! Would you please notify us when it is active? ^^
[Android Apps and Games] TimeAndroid:
Please have auto-run in the next release! :D
[Android Apps and Games] TimeAndroid:
Not to be impatient, but when is the next update? Can't wait. :D
[Android Apps and Games] :
Wondering the same! :rolleyes:
[Android Apps and Games] TimeAndroid:
What if he deserted this project? :(
[Android Apps and Games] :
Well it's not dificult to continue it, we have the sources, all the script needs is a little bit more tweaking :D
[Android Apps and Games] :
thanks for this app, it inspired me to create a script. I googled and found a lot of interesting stuff. I got a little educated, but still have no clue. I added some stuff thats not yet in the app script. :) http://xdaforums.com/showthread.php?p=40767777
[Android Apps and Games] :
Thank you all for your patience and awesome job on updating the script! The project is not dead but unfortunately my laptop is. It had a faulty SSD and died on me. Right now I am running from a crappy netbook but I will make it work and get you guys an update ASAP.

Sorry about the delay!
[Android Apps and Games] TimeAndroid:
Can't wait! You are soooooooooooooooooooooooooooooooo awesome!
[Android Apps and Games] :
Haha thanks! I have the app finished but no WiFi right now. I am trying to upload from my phone.
[Android Apps and Games] SecUpwN:
This was 6 hours ago. Where to get the update? Your link to the bleeding edge version still doesn't work.
[Android Apps and Games] :
git seems not to be updated, otherwise that would have been a good source of the new version.

Why not the git way?

I dont know proper release paths or if its common, but does make me wonder about whats released versus whats in the source.

lol, nice idea for an app, verify build versus code
[Android Apps and Games] :
App will be uploaded asap. As I am currently away on holidays and don't have steady cell service and only dialup I have not been able to upload it yet. It will be up by Sunday at the latest.

Thanks for your patience.
[Android Apps and Games] TimeAndroid:
Awesome, can't wait!
[Android Apps and Games] SecUpwN:
Would be cool if this time you keep your promise, let's see what comes in between today. An earthquake? A tsunami? You mother cooking eggs? :)
[Android Apps and Games] hisname:
what an insult to the Dev who receives nothing making this app.. [MENTION=4418219]x942[/MENTION] is also a human. are you paying him for this? why complain.... so what even if his mum is cooking eggs. let's not start a flame war here.

peace

Sent from my supercharged :tank:
[Android Apps and Games] SecUpwN:
If this came across as an insult instead of a humorous question if we'll REALLY get his awesome update today, I want to apologize for it. It isn't meant that way. I'm so eager to get my hands on it, you won't even believe it!

EDIT: It's TUESDAY now. Sunday passed without even a word about the app. Get my point, [MENTION=4729636]hisname[/MENTION]? If someone delays something because an upload is not possible, it's ok. But sending out several "promises" without keeping them is.. well.. not so cool. Hope everything is good [MENTION=4418219]x942[/MENTION]. Still waiting for your upload.
[Android Apps and Games] :
Actually it's Monday here ;) And the github has been updated already. I just haven't posted back as I was driving. Anyways latest version is now up.
[Android Apps and Games] SecUpwN:
Awesome, THANKS! :) Are you going to activate the link to always get the latest version as APK from your website, too? Please post it in the OP when you do.

[MENTION=4418219]x942[/MENTION], version numbers are messed up. My previous version said "4", downloaded from github and now it says "3" - and tge thread sats version "1". You get it? ^^
[Android Apps and Games] :
Thanks fixed it now. I forgot to update the manifest. It should say 4. It is version 1 but verisoning doesn't allow for "." versions begining with 0 (it auto-changes to 1.0 ) so I did it this way.
[Android Apps and Games] :
Link to latest version: http://www.shadowdcatconsulting.com/storage/SecDroid.apk

Also due to losing my Private key a while back the play store version is out of date. I will be pulling it over the weekend an will post the latest APK then.

Thanks!
[Android Apps and Games] :
There is a disable button in the newest version (ENABLE ADB). Because adb is disabled, until you press that button, apps that need it like TB won't work.
[Android Apps and Games] SecUpwN:
[MENTION=4418219]x942[/MENTION], thanks for the fixes! I've bookmarked your link to the bleeding edge version and will always download from there when you say a new version is up. Tell me, does security stick in the new version after rebooting the phone? How about adding these security scripts?
[Android Apps and Games] TimeAndroid:
Yes, I am wondering as well.
[Android Apps and Games] :
I saw he didnt add, so I submitted my very first ever git request https://github.com/baz77/secdroid/commit/c465f0561cacd6f90632c047d282a134d4c8c2ee

:)

you might want to remove the ipv4 tweaks or the lines that tunes and disables ipv6 :)

I added them cause I like them. But I guess the ipv4 tweaks ar enot security related. The ipv6 disabling kinda is, I think droidwall doesnt default block ipv6 an debate is still on some privacy issues with ipv6. Maybe an option like some of the new stuff you made. Pretty nice :)

I also see you disable ssh elsewhere, so the lines removing config and permissions can be excludes as wel. I think