[Samsung Galaxy Tab S4 Guides, News, & Discussion] doggydog2:
Tab S4 stock cleanup actions

phablet guide fest continues V30->Note9->6T->Mi9->S10->7T->Tab S6->Tab S4, time to provide some thoughts, easy to click links and guides. Goal is to have a clean device after each update, and have a helper script running at boot or on demand. This is a tablet, we want to achieve flat battery graphs when it is unused (picture attached), hopefully charge once a week with slight usage.

Debloat

What the script does:

* choose 8 categories of app removal, in the beginning of the file

for each say 0=skip 1=remove 2=revert back

* use more switch to disable some questionable/helpful stuff

* disable up to 80 apps with possibility to revert back

* remove usage access for google (do manually)

* remove device admin backdoor "Find My Mobile", you won't recover stolen device this way lol, it doesn't work with Secure Startup! it's useful for Govt.

* remove proca (which was slowing down tablet after rooting), if it doesn't work from your shell, edit the file as below

Tested ok on March stock Pie firmware. Samsung has too much bloatware installed, and requires shocking permissions to run some basic services. We will further need to reclaim privacy. As for debloat list, i've cooked the list based on knowledge of each process, its current presence in the Pie firmware, and what would fit the tablet usage. In this case, i'm leaving Samsung account, Galaxy shop and few pen apps and we assume XPrivacy is sending these snitch services bogus personal details.

Download: (file attached)

Installation:

- run in su terminal once or add to any startup script (3C\Device mgr\Scheduler can assign scripts from /storage/emulated/0/Android/data/ccc71.at/scripts), or to magisk

Rooting

We want

encryption

. There are no ROMs, and TWRP can be used for many other tasks without access to your files.

OEM unlock in dev settings

when turned off and rather plugged it to your PC with drivers installed, hold Power & Vol+ & Vol- til you see download screen, confirm with Vol+

in ODIN, slap TWRP into AP while "Auto reboot" is unchecked

hold Power & Vol- to exit download mode, then Power & Vol+ to enter recovery

in TWRP, slap kernel and Magisk into tablet from SD card or USB (can be usb flash, can be other mobile, can be adb)

in TWRP, say boot to system and wait 5min

check Magisk app status, enable USB debugging in dev settings

kernel: WETA recovery: TWRP 3.3.1 for PIE SM-T83x

watch kernel log for 20sec

dmesg -Tw|grep proca

if proca messages appear open /vendor/etc/init/pa_daemon_qsee.rc and comment the lines

You should enable "Secure startup" in "Biometrics and security" settings. Recovery should fail reading encrypted drive sda27 because of its crypto flags and logical mapping.

Which plugins to use

Similarly to Mi9, collecting what i think is useful to keep on stock rooted firmware.

Magisk plugins:

* Riru - Core, Riru - Ed Exposed -- brings XPosed to Pie. Need also installer. Make a choice SandHook/Yahfa bipolar release, i never found out which one is better.

* libsecure_storage companion -- helps us keep the bluetooth pairings

* (optional) YouTube Vanced black themed -- brings usable YouTube experience. Unfortunately it's now a horror to install (v15), but v14 from Magisk still works.

* (optional) Move certificates -- perhaps

* (impossible) QuickSwitch -- there's no pill but Samsung custom recents... oh how glad i am for it now! Android10 cancelled this fantastic Pie pill already and you can scroll apps in OneUI!

XPosed plugins:

* Xposed Edge Pro -- a must have and best plugin

* XPrivacy -- Screw the big brother. Must have of the century. Disabling analytics, tracking, telephony, network, identification for all visible apps and all Google and Samsung apps with some exceptions.

* Firefds kit -- so this is our main customization app irrelevant here: ..and enables the very important call recording, which is beutifully integrated into call history. Bye bye external apps. Also for Samsungs it forces Restart "recovery"

* (optional) Xposed Dex -- some tweaks

* (optional) afWall -- Problems with this firewall and some VPN clients for years. Using AdGuard now and happy. It can even control DNS, no need one of those paid lausy apps. This plugin should by disabled in Xposed.

* (optional) Exi for Swiftkey -- you can make Swiftkey great again, GBoard is still the best, Samsung keyboard is very good, but too tall and leaves gap in fullscreen mode

Root apps:

* TitaniumBackup -- a must since Android was born

* Adaway -- a must but with AdGuard not so.. but i use both

* AdGuard -- can filter more and can amend requests.. that's a game changer. You can have a efficient proxy when rooted.

* 3C toolbox -- too helpful not to pay for the biggest package

* (optional) Root Essentials -- a multitool, have a look

* (optional) MiXplorer -- best file manager, replaces spyware ES File explorer you had before. Edits root files comfortably even when other editors don't

* (optional) FolderSync -- best sync tool

Battery

Battery saving:

- tablet should not be neccessarily always connected, receive notifications, so why not keep it dead when the screen is off

- the key is to disable background network activity:

disable it overall by Medium Power Saving mode

disable background network for individual apps (there's "Allow background data usage" and also nice "Allow background activity" checkbox)

force it with 3C (Device Mgr\Profiler) or Adguard (App Management)

- can't see wifi switch.. to turn wifi off when screen off. no wifi scanning drainer or other "intelligent" bs functions there either. just "Hotspot 2" - turn off.

- nearby scanning should be off, what a useless function of finding unknown devices - once you pair the known, what's the sense? or you keep connection 10 new bt devices each week? just a drain and endless beacon

- location can be off, and again it can be scripted by turning on only when screen is on by 3C

- not installing {LSpeed, Naptime, Servicely, FDE, LKT, Universal GMS Doze, Sysconfig patcher} here

- no signifficant doze functions here {AOD, fp icon, dt2wake, raise2wake} to speak off

- we want battery to remain flat when screen off, last tablet i had could do -1% per week! let's do it here

Other

- i like tender boot screen indicating knox off status, no need to flash boot logos

- no boot keys needed like on Tab s6

- not using multidisabler as i'm on stock and i do want encryption on every device ever

- how to launch camera quickly?? still dind't find out :)

- don't be afraid to use another device (mobile) as USB drive.. this way you can restore your apps directly via TitaniumBackup without copying it first! also Smart Switch can be used from non-Samsung phones, but it is as weak as Google backup ever was - no data restore