[Bug-gnuzilla] Android - cannot configure Add-ons - denied permission WRITE

Discussion:

[Bug-gnuzilla] Android - cannot configure Add-ons - denied permission WRITE_SETTINGS

c***@abwesend.de

2018-06-11 22:21:20 UTC

Hello,

In Android 7.1.2 (MIUI 9.5.5.0) I installed Icecat 52.6.0 from F-Droid.org.

I cannot enter "preferences" of e.g. LibreJS addon, and also not of new add-ons I install, e.g. uBlock Origin.

Only if I "deactivate" e.g. Gnu LibreJS addon and then "activate" again, "preferences" button is visible for a short time. Even if I click it and change something, it seems, IceCat cannot keep the settings.

I never managed even betting dsiplayed uBlock Origin settings, or preferences/settings button under "addons", though.

Two permissions are shown "denied permissiona" in Android permissions:
- WRITE_SETTINGS
- SYSTEM_ALERT_WINDOW

I have tried all I could to grant any permssion. Also with root terminal:
pm grant org.gnu.icecat android.permission.WRITE_SETTINGS

That results in following error:
"Operation not allowed: java.lang.SecurityException: Permission android.permission.WRITE_SETTINGS is not a changeable permission type."

Is this my problem, Xiaomi MIUI 9.5.50 problem, Android 7.1.2 problem or IceCatMobile 52.6.0 problem?

Has anyone noticed the same misfunction or is this a known issue?

Thank you, cotw

--
http://gnuzilla.gnu.org

Mart Rootamm

2018-06-12 10:19:34 UTC

Permalink

Hi.

The best I can think of, is for you to back up all your information,
root your phone and then install a compatible version of LineageOS or
Replicant.

What is the model of your Xiaomi phone?

Keep in mind, that non-Android certified phones, and devices with
brand headquarters in non-democratic countries might come with malware
preinstalled.

https://techcrunch.com/2018/05/24/some-low-cost-android-phones-shipped-with-malware-built-in/

https://blog.avast.com/android-devices-ship-with-pre-installed-malware

Strictly In terms of nomenclature, that Xiaomi phone runs MIUI 9.5.5.0
based on AOSP 7.1.2, and is not Android-certified.

-M.

Post by c***@abwesend.de
Hello,
In Android 7.1.2 (MIUI 9.5.5.0) I installed Icecat 52.6.0 from F-Droid.org.
I cannot enter "preferences" of e.g. LibreJS addon, and also not of new
add-ons I install, e.g. uBlock Origin.
Only if I "deactivate" e.g. Gnu LibreJS addon and then "activate" again,
"preferences" button is visible for a short time. Even if I click it and
change something, it seems, IceCat cannot keep the settings.
I never managed even betting dsiplayed uBlock Origin settings, or
preferences/settings button under "addons", though.
- WRITE_SETTINGS
- SYSTEM_ALERT_WINDOW
pm grant org.gnu.icecat android.permission.WRITE_SETTINGS
"Operation not allowed: java.lang.SecurityException: Permission
android.permission.WRITE_SETTINGS is not a changeable permission type."
Is this my problem, Xiaomi MIUI 9.5.50 problem, Android 7.1.2 problem or
IceCatMobile 52.6.0 problem?
Has anyone noticed the same misfunction or is this a known issue?
Thank you, cotw
--
http://gnuzilla.gnu.org

--
http://gnuzilla.gnu.org

Florian Jacob

2018-06-12 14:10:29 UTC

Permalink

I did root the phone (Unlocked, TWRP load, flashed Magisk).

It is a Xiaomi Redmi 4A.

Neither Replicant nor Lineage have official releases for this device.

Of course I have deactivated half (>100 hand picked apps) of the shipped stuff, and
blocked all the phoning home I can get a hold of with netstat, via hosts file and
AFWall+. I've come far, but am not completely through yet.

Unless I get uBlock origin or uMatrix to work, I consider webbrowsing unsafe
because of the plague of cross site functionality.

Nevertheless I am never loading an unofficially cooced up ROM from anyone from
some dark corners of the internet. I'd rather try to block official chinese
backdoors. But have my hardware supported professionally.

In my view many western "democratic" based OS's contain "malware" all the same.

I wish I could clarify where the problem is. Should MIUI be so non standard conform,
that something like browser add-ons for a firefox fork wouldn't work?

I admit, that the error might not be in IcecatMobile. Could be MIUI or
my modifications. But I am asking here, because I am guessing others might have
the same issue. And it would be interesting, if it occurs also in other Android
flavors. Or if it has to do with IceCat

BTW: I could at least grant the other missing permission SYSTEM_ALERT_WINDOW manually
with root terminal:
pm grant org.gnu.icecat android.permission.SYSTEM_ALERT_WINDOW

Am Tue, 12 Jun 2018 13:19:34

Post by Mart Rootamm
Hi.
The best I can think of, is for you to back up all your information,
root your phone and then install a compatible version of LineageOS or
Replicant.
What is the model of your Xiaomi phone?
Keep in mind, that non-Android certified phones, and devices with
brand headquarters in non-democratic countries might come with malware
preinstalled.
https://techcrunch.com/2018/05/24/some-low-cost-android-phones-shipped-with-malware-built-in/
https://blog.avast.com/android-devices-ship-with-pre-installed-malware
Strictly In terms of nomenclature, that Xiaomi phone runs MIUI 9.5.5.0
based on AOSP 7.1.2, and is not Android-certified.
-M.

--
http://gnuzilla.gnu.org

c***@abwesend.de

2018-06-12 14:17:38 UTC

Permalink

Hello,

Thanks for your reply.

I did root the phone. It is a Xiaomi Redmi 4A.

Neither Replicant nor Lineage have official releases for this device.

Of course I have deactivated half (>100 hand picked apps) of the shipped stuff, and
blocked all the phoning home I can get a hold of with netstat, via hosts file and
AFWall+. I've come far, but am not completely through yet.

Unless I get uBlock origin or uMatrix to work, I consider webbrowsing unsafe
because of the plague of cross site functionality.

Nevertheless I am never loading an unofficially cooced up ROM from anyone from
some dark corners of the internet. I'd rather try to block official chinese
backdoors. But have my hardware supported professionally.

In my view many western "democratic" based OS's contain "malware" all the same.

I wish I could clarify where the problem is. Should MIUI be so non standard conform,
that something like browser add-ons for a firefox fork wouldn't work?

I admit, that the error might not be in IcecatMobile. Could be MIUI or
my modifications. But I am asking here, because I am guessing others might have
the same issue. And it would be interesting, if it occurs also in other Android
flavors. Or if it has to do with IceCat

BTW: I could at least grant the other missing permission SYSTEM_ALERT_WINDOW manually
with root terminal:
pm grant org.gnu.icecat android.permission.SYSTEM_ALERT_WINDOW

Am Tue, 12 Jun 2018 13:19:34

--
http://gnuzilla.gnu.org

c***@abwesend.de

2018-06-12 21:55:51 UTC

Permalink

Because you both are right, I wiped MIUI from my phone thoroughly and installed Resurrection Remix. Which I donloaded from sourceforge, as it should be.

Unfortunately on a clean install of IceCat, where I even dindn't yet mess with about:config, still the configuration of the add-ons like LibreJS and also uBlock isn't accessible.

Ressurection Remix is based on Android 8.1. There is an option in the systems settings to allow WRITE_SETTINGS, which I activated. Still Android Permissions app tells me, that the app requested, but was denied, WRITE_SETTINGS.

If that is even part of any problem.

Am Tue, 12 Jun 2018 16:24:16 -0400

Though I agree that other countries snoop too, I would still personally rather run
an unofficial ROM than a stock one on a PRC phone. Stock ROMs in either case have
less frequent updates and stop security support sooner.
This is however not necessarily a MIUI problem. I have the same issue on an
unrooted HTC 10.

--
http://gnuzilla.gnu.org

Brennan

2018-06-12 22:43:49 UTC

Permalink

Hi everyone,

I have noticed the same issue in Icecat mobile 52.6.0; apologies as I have not had time to report it. I have seen this on both an LGG3 running the factory software as well as a Google Nexus 7 tablet running the latest LineageOS

Post by c***@abwesend.de
Because you both are right, I wiped MIUI from my phone thoroughly and installed Resurrection Remix. Which I donloaded from sourceforge, as it should be.
Unfortunately on a clean install of IceCat, where I even dindn't yet mess with about:config, still the configuration of the add-ons like LibreJS and also uBlock isn't accessible.
Ressurection Remix is based on Android 8.1. There is an option in the systems settings to allow WRITE_SETTINGS, which I activated. Still Android Permissions app tells me, that the app requested, but was denied, WRITE_SETTINGS.
If that is even part of any problem.
Am Tue, 12 Jun 2018 16:24:16 -0400

--
http://gnuzilla.gnu.org

Narcis Garcia

2018-06-13 07:22:23 UTC

Permalink

GiLUG has some resources (automatic HCL, Wiki) to document about devices
freedom and procedures:
http://www.gilug.org/mobils/ (pending of english translation)
http://wiki.gilug.org/

Wiki has room to document devices with detailed recipes same as
CyanogenMod Wiki was, but for any FOSS ROM.

Post by c***@abwesend.de
Hello,
Thanks for your reply.
I did root the phone. It is a Xiaomi Redmi 4A.
Neither Replicant nor Lineage have official releases for this device.
Of course I have deactivated half (>100 hand picked apps) of the shipped stuff, and
blocked all the phoning home I can get a hold of with netstat, via hosts file and
AFWall+. I've come far, but am not completely through yet.
Unless I get uBlock origin or uMatrix to work, I consider webbrowsing unsafe
because of the plague of cross site functionality.
Nevertheless I am never loading an unofficially cooced up ROM from anyone from
some dark corners of the internet. I'd rather try to block official chinese
backdoors. But have my hardware supported professionally.
In my view many western "democratic" based OS's contain "malware" all the same.
I wish I could clarify where the problem is. Should MIUI be so non standard conform,
that something like browser add-ons for a firefox fork wouldn't work?
I admit, that the error might not be in IcecatMobile. Could be MIUI or
my modifications. But I am asking here, because I am guessing others might have
the same issue. And it would be interesting, if it occurs also in other Android
flavors. Or if it has to do with IceCat
BTW: I could at least grant the other missing permission SYSTEM_ALERT_WINDOW manually
pm grant org.gnu.icecat android.permission.SYSTEM_ALERT_WINDOW
Am Tue, 12 Jun 2018 13:19:34

--
http://gnuzilla.gnu.org

c***@abwesend.de

2018-06-14 15:09:25 UTC

Permalink

I guess there is going to be a new IceCat soon, as Fennec's last Extended Service Release 60 is out. I guess the sync that somehow, anyway forking a project like Firefox one can obviously not release in the same speed, unless you have a lot of manpower.

In my old phone I had the same problem of the not showing configs for uBlock Origin with IceCat in EMUI (Android 4.4). But there uBlock was functional, and the configs accessible by toolbar button. And I don't have other add-ons.

As I have a recent Android now, for me it is as good or better, to switch back to Firefox. In 4.4. the support for Firefox had been ceased, that's why I was attracted to IceCat in the first place. And it served me well for a year.

I installed Firefox 60 and uBlock, everything works perfectly.

Also I don't need or even want LibreJS but much less some add-ons, to make LibreJS work on some websites that no single human on my whole continent has ever heard of. And the Mozilla phoning home has been only mildly reduced in IceCat anyway. In IceCat it was necessary to tweak the prefs.js extensively all the same. So the added value to Fennec for me is not so big (if Addons worked).

--
http://gnuzilla.gnu.org

Mart Rootamm

2018-06-14 15:41:35 UTC

Permalink

cotw,

At one point, my running guess is, that even if EMUI and MIUI ARE
based on AOSP, then neither is entirely compatible with AOSP,
Replicant, or LineageOS.

cotw, Brennan

You can try running an earlier version of IceCat (or Firefox), and
test to see, at which version did the addons begin malfunctioning. See
if you can back up your browser-related information first.

If you have any app-related data that you want to maintain, but are
unable to back up, then install any IceCat or Firefox app package over
an existing version from about the same source. — If the initial app
source was F-Droid, then from there; if the app source was an APK
download, then from there again. And installing, do as if you'd be
upgrading, i.e., do not delete the package beforehand; or otherwise
you'll lose user data, if you wanted to retain any.

Another option is to try extensions that are more compatible with your
version of IceCat, including older versions thereof.

Go to about:config, and enter two new settings:

general.useragent.override.mozilla.org
general.useragent.override.mozilla.net

and populate them with the Firefox-only user agent (UA) string that
matches your version of IceCat. Each page for an extension has a link
to versions, where you can see a list of versions should be compatible
with your browser version.

Then at addons.mozilla.org, Mozilla shall show which of the add-ons
are compatible with your version of IceCat, as it would with that
version of Firefox.

Note, that some of the addons are WebExtensions.

-M.

Post by c***@abwesend.de
I guess there is going to be a new IceCat soon, as Fennec's last Extended
Service Release 60 is out. I guess the sync that somehow, anyway forking a
project like Firefox one can obviously not release in the same speed, unless
you have a lot of manpower.
In my old phone I had the same problem of the not showing configs for uBlock
Origin with IceCat in EMUI (Android 4.4). But there uBlock was functional,
and the configs accessible by toolbar button. And I don't have other
add-ons.
As I have a recent Android now, for me it is as good or better, to switch
back to Firefox. In 4.4. the support for Firefox had been ceased, that's why
I was attracted to IceCat in the first place. And it served me well for a
year.
I installed Firefox 60 and uBlock, everything works perfectly.
Also I don't need or even want LibreJS but much less some add-ons, to make
LibreJS work on some websites that no single human on my whole continent has
ever heard of. And the Mozilla phoning home has been only mildly reduced in
IceCat anyway. In IceCat it was necessary to tweak the prefs.js extensively
all the same. So the added value to Fennec for me is not so big (if Addons
worked).
--
http://gnuzilla.gnu.org

David Hedlund

2018-06-14 15:51:31 UTC

Permalink

IceCatMobile is compiled from the upstream source code from IceCat. The
IceCat 60 release is in progress so expect a few weeks (or at worst a
few months) to the IceCatMobile 60 release.

Post by c***@abwesend.de
I guess there is going to be a new IceCat soon, as Fennec's last Extended Service Release 60 is out. I guess the sync that somehow, anyway forking a project like Firefox one can obviously not release in the same speed, unless you have a lot of manpower.
In my old phone I had the same problem of the not showing configs for uBlock Origin with IceCat in EMUI (Android 4.4). But there uBlock was functional, and the configs accessible by toolbar button. And I don't have other add-ons.
As I have a recent Android now, for me it is as good or better, to switch back to Firefox. In 4.4. the support for Firefox had been ceased, that's why I was attracted to IceCat in the first place. And it served me well for a year.
I installed Firefox 60 and uBlock, everything works perfectly.
Also I don't need or even want LibreJS but much less some add-ons, to make LibreJS work on some websites that no single human on my whole continent has ever heard of. And the Mozilla phoning home has been only mildly reduced in IceCat anyway. In IceCat it was necessary to tweak the prefs.js extensively all the same. So the added value to Fennec for me is not so big (if Addons worked).
--
http://gnuzilla.gnu.org

--
http://gnuzilla.gnu.org