We have moved to a new Sailfish OS Forum. Please start new discussions there.
22

App permissions (Sailfish & Android)

asked 2015-08-10 16:53:27 +0300

Holgerson352 gravatar image

updated 2015-08-12 13:45:50 +0300

r0kk3rz gravatar image
  1. Which possibilities does Sailfish OS offer to control app permissions of native Sailfish OS apps and of Sailfish OS 3rd party apps in the jolla app store?

  2. Which possibilities does Sailfish OS offer to control app permissions of android 3rd party apps?

Is it possible to switch off permissions that you prefer not to grant for both Sailfish and Android apps? Jolla always tends to point out the importance of privacy and that they are never going to sell collected data. All right, but if you can't control what apps do (especially 3rd party), that promise isn't worth much, so please let me have the answers to my questions 1) and 2).

P.S.: I also want to point out that I'm on the verge of buying a Jolla for months, because I like the idea behind it. BUT one or two issues or let's call it "concerns" keep me from doing so. This is one important "issue".

edit retag flag offensive close delete

Comments

2
1

@jollailija Thanks for the link, but that's only a part of my question.

I have been using smartphones whith different operating systems for a while and they all have different ways of dealing with app permissions. To be honest, I am not entirely satisfied with any of those.

I like the detailed Blackberry permission system for BB apps, but not the Blackberry permission system for android apps, because for android apk you can hardly change any permissions on BB, while you can do so for BB apps. I wonder if this might be the same on Salfish OS, which also allows android apps to be installed alongside Sailfish apps.

Another point is, that I think many people chose and choose Jolla for privacy reasons, the Jolla company stating they are not going to make money out of customer data, if I understood that right, did I? But if privacy really matters, it should be stated clearly, too, what the permission management is like on Jolla, i.e. for Sailfish apps and Android apps. Unfortunately I didn't really find information on that.

So I would be grateful if someone, maybe from Jolla, could put things clear.

Holgerson352 ( 2015-08-10 23:34:53 +0300 )edit
1

@Holgerson352 Well, apps in Jolla Store go through QA and have some limitations. There is no "permission control settings" in the UI, but with 1.1.7 you will have "a settings page for Android applications in Settings > App from where you can control how the installed application works on your Jolla device (Force stop, Clear cache, Clear data, and running the app on background)"

jollailija ( 2015-08-11 09:12:50 +0300 )edit
1

I'm quite disappointed if this should be the state of art at Jolla's. If I get you right, Jolla customers simply have to trust the Sailfish apps without having the slightest idea, what they might do in the background and what not? The settings page for android apps that you describe is not a permission management IMHO. So basically you can't control any app permissions at all using the standard interface (not terminal etc.) on the Jolla phone right now. Is that correct?

Holgerson352 ( 2015-08-11 23:04:19 +0300 )edit
3

I guess there is something in the roadmap:

https://sailfishos.org/developmentroadmap/

Research SELinux as a solution for system security and application access control

HarhaanJohtaja ( 2015-08-11 23:16:35 +0300 )edit

2 Answers

Sort by » oldest newest most voted
6

answered 2015-08-12 13:44:56 +0300

r0kk3rz gravatar image

What SailfishOS can do is a constantly moving target, currently permission management for Native apps is somewhat non-existent and we are just starting to see some permission management for the Android Runtime in the form of being able to deny access to contacts at a global level.

All I can say is that this is expected to improve over time.

edit flag offensive delete publish link more

Comments

2

If true this is a really grave concern for me. I moved from Fairphones to Jolla devices, abandoning the benefit of fair procurement, only because I understood Sailfish is about controlling my device by myself, better than even rooted android systems with apps like AFWall+, TaskManager, PortAuthority, Autostarts etc. that at this moment indeed allow a serious control of my Fairphone.

I indeed invested into Jolla (waiting for the tablet at this moment); if I discover I cannot control apps 'snitching around' without my agreement this is a catastrophic information for me :(

I also see, in previous comments like here, that there are little hopes of seeing something serious coming (and... few people insisting here??).

Let's hope that at least we'll be able to manually control IP tables, or something like this...

Herve5 ( 2015-08-17 17:37:15 +0300 )edit
1

you can hack iptables, hosts, and any other usual linux stuff till your heart's content. But all apps run under a single user which limits things somewhat.

The app framework does need a lot more work, and various conversations with Sailors lead me to believe its something they take seriously too, and hopefully we will see some improvements on this with the Sailfish2.0 release.

SailfishOS is not anywhere near as mature and feature-complete as the various flavours of Android (Google, AOSP, Cyanogen), that's just a fact, and its going to remain a fact for quite some time I expect.

r0kk3rz ( 2015-08-17 18:01:53 +0300 )edit

Thanks R0kk3rz - IP tables will do...

One precious thing would be a simple front-end to this (like AFWall+ does for android for instance).

Herve5 ( 2015-08-18 10:29:26 +0300 )edit
1

It's fairly crazy that in this day and age we cannot trust the apps we run on our devices. Luckily a large percentage of SailfishOS native apps are also open source, so you can inspect them yourself to see what they do, as well as compile from source on your device, or cross compile from pc. I have not seen or heard of any SailfishOS apps doing nefarious things, but it's only a matter of time I guess.

r0kk3rz ( 2015-08-24 14:42:30 +0300 )edit
1

I tend to be confident in Jolla-dedicated apps, it's rather the ones recuperated from Android that I fear.

In fact, a device able to fine-tune android apps would solve 99% of my fears indeed :-)

Herve5 ( 2015-08-24 18:31:10 +0300 )edit
3

answered 2018-01-18 00:22:53 +0300

stef gravatar image

Any updates on this? Possibilities for doing this through the terminal/developer mode perhaps?

edit flag offensive delete publish link more

Comments

Still no news?

sailr ( 2019-10-26 22:51:06 +0300 )edit
Login/Signup to Answer

Question tools

Follow
5 followers

Stats

Asked: 2015-08-10 16:53:27 +0300

Seen: 2,463 times

Last updated: Jan 18 '18