Privacy for Android layer on SFOS

[remote]

SFOS positions itself as a privacy-aligned OS.
Yet the Android layer (which is fully in hands of Jolla team now) has less privacy knobs (actually, none) than any rooted Android phone.

Android layer on SFOS should provide the ability to:

1. Switch (deny) internet access per-app
2. Deny app autostart when the android layer is activated.
3. Spoof contact list globally and per-app (decouple it from SFOS contacts, just like it was in alien dalvik)
4. Spoof/randomize device identifiers (imei, imsi, etc)

It doesn’t have to be fully implemented in GUI right now, but at least the layer should have cli settings/configs/hooks that privacy-aware users/community could use.

[pasik]

+1
all very good suggestions.

[Firefox84]

I fully support that request. The named features were promised ages ago, but are only partly implemented, wether device specific, or OS specific and not universal…

[pasik]

Links to existing similar requests:

Control network-traffic for Android Apps

Oh oh! I need to apologize. I was/am fully aware of that extra_config file but may have forgotten completely that it seems this file was also manually edited by me a long time ago. (I have another line inside about hosts.editable which is not of use. So I really thought that mounting of /system/etc/hosts to etc/hosts is part of aliendalvik package). And to be honest I expected this to be part of the aliendalvik package! But a rpm -qf /var/lib/lxc/extra_config tells me this is not part of any…

Contacts groups

I remember one feature from Nokia - contacts groups. It was set some default like: family, work, friends etc. and of course was possible to create new groups. Please add this small but useful feature.

SailfishOS contact confinement for AlienDalvik

I would like to only allow certain android apps to have access to a select few contacts to improve privacy and security of those services. Apparently what is needed is an Xposed module called Donkey Guard. But getting Xposed installed and set up on AlienDalvik requires root access… What is a good method of achieving getting Xposed working properly? What other methods of contact-restriction are at my disposal? I’m currently using the Xperia XA2.