These are limited in power by the power of the device administration APIs: I don't believe the device administration APIs allow the kind of behavior you want, and even if you could turn off the play store, nothing would stop the user from simply installing an apk via adb (for example).
On Wed, Feb 20, 2013 at 8:45 AM, Robert Hahn <[email protected]> wrote: > As I understand, I only can do this by coding... But I can't, because I've > got no experience at this level. > Seems like some MDM-solutions are able to lock access to some apps. > In fact, I have to ensure no apk-files can be installed. That’s the > challenge. > > rob > > -----Ursprüngliche Nachricht----- > Von: Kristopher Micinski [mailto:[email protected]] > Gesendet: Mittwoch, 20. Februar 2013 14:40 > An: Robert Hahn; Android Security Discussions > Betreff: Re: [android-security-discuss] prevent installing software / build > locked system > > Ah, > > I was under the assumption that you were *building* this ROM. Are you > trying to do this as an app? If you're doing this as an app, this won't > work. (Imagine you could, then some malicious app could disable your > messaging, for example.) > > Kris > > On Wed, Feb 20, 2013 at 4:12 AM, Robert Hahn <[email protected]> > wrote: >> Hi Kris, >> thx a lot for your feedback again. >> Do you have any example-code ? >> >> I would try something like that: >> getApplicationContext().getPackageManager().setComponentEnabledSetting >> ("widg >> etname",PackageManager.COMPONENT_ENABLED_STATE_DISABLED,PackageManager >> .DONT_ >> KILL_APP) >> >> but I don’t know the widgetname / path of play store. Do you ? >> >> best regards >> rob >> >> -----Ursprüngliche Nachricht----- >> Von: Kristopher Micinski [mailto:[email protected]] >> Gesendet: Dienstag, 19. Februar 2013 16:16 >> An: Rob >> Cc: Android Security Discussions >> Betreff: Re: [android-security-discuss] prevent installing software / >> build locked system >> >> Doing things right always ends up being complex, huh : ) >> >> - You cannot do this on stock hardware, period. >> - You need to *modify* the package manager, not disable it (disabling >> it would cripple the system) >> - Your proposed solution is insufficient: no app can protect access to >> the play store without customized hardware. >> + (Many apps attempt to, but now fail given recent changes to remove >> logs, and these apps can be uninstalled by rebooting the app in safe >> mode..) >> >> Kris >> >> On Tue, Feb 19, 2013 at 3:25 AM, Rob <[email protected]> wrote: >>> Hello Kris, >>> >>> thanks a lot for your reply. >>> >>> As I understand, I have to disable the PackageManager when I want to >>> prevent installing any app. >>> Am I right? If so, do you know how to do ? By the way : the phone >>> isn’t rooted. >>> This sounds very complex. >>> >>> I got another idea: >>> When I disable "usb-debugging" in settings, its not possible to run >>> software from eclipse f.e. >>> correct ? >>> When I disable "unknown sources" (only playstore) and use a serios >>> app to protect access to playstore and settings its not possible to >>> install any app. >>> correct ? >>> >>> best regards >>> rob >>> >>> Am Montag, 18. Februar 2013 17:25:07 UTC+1 schrieb Kristopher Micinski: >>>> >>>> This is certainly possible, and it's used in quite a few applications: >>>> custom roms for demo phones, and roms for companies that don't want >>>> their employees installing software. >>>> >>>> The first thing is that you don't really want to worry about the >>>> Play >>>> store: you need to do work to run the play store anyway. Instead, >>>> you want to concentrate on actually installing apps. >>>> >>>> The application process is somewhat complex, but the place you want >>>> to concentrate is the package manager itself, and then remove the >>>> facilites for installation (if you want be clean about it). >>>> PackageManager is abstract and concretezied by Android internal >>>> code, that's where you really want to start.. >>>> >>>> Kris >>>> >>>> >>>> On Mon, Feb 18, 2013 at 8:53 AM, Rob <[email protected]> wrote: >>>> > Hello everybody, >>>> > i am a mobile developer which deals with issue "mobile security" >>>> > (on android). >>>> > Of course there are some coding guidelines and also some >>>> > device-guidelines. >>>> > In advance this issue includes an mobile device management. >>>> > >>>> > But i still got one problem I cant handle: >>>> > how can I prevent installing software ? >>>> > Keywords PlayStore, USB, .apk general >>>> > >>>> > I want to build a locked system which contains only a few apps. It >>>> > should not be possible to install new software. >>>> > Without any thrid-party-solutions from the PlayStore... I tried >>>> > some of this, but nothing was really serios. >>>> > >>>> > Is this generally possible ? >>>> > >>>> > thanks in advance for your ideas and feedback best regards rob >>>> > >>>> > -- >>>> > You received this message because you are subscribed to the Google >>>> > Groups "Android Security Discussions" group. >>>> > To unsubscribe from this group and stop receiving emails from it, >>>> > send an email to >>>> > [email protected]. >>>> > To post to this group, send email to >>>> > [email protected]. >>>> > Visit this group at >>>> > http://groups.google.com/group/android-security-discuss?hl=en. >>>> > For more options, visit https://groups.google.com/groups/opt_out. >>>> > >>>> > >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Android Security Discussions" group. >>> To unsubscribe from this group and stop receiving emails from it, >>> send an email to [email protected]. >>> To post to this group, send email to >>> [email protected]. >>> Visit this group at >>> http://groups.google.com/group/android-security-discuss?hl=en. >>> For more options, visit https://groups.google.com/groups/opt_out. >>> >>> >> > -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/android-security-discuss?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
