How much protection is provided against these apps?

gosrox

example if i install an app that asks for all of these permissions. sounds like a lot no? does graphene protect against most/all of these or can the app snoop on my other apps data? Some seem like they are of course protected against with storage scopes. but what about others?

does putting the app in disabled mode make it not able to use anything in background? what if i just have it enabled but not opened? it can snoop with scheduled tasks?

thanks you fellow GOSers or devs for answers.

Permissions: 54 Features: 11 Libraries: 3

Permissions

android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.BLUETOOTH_CONNECT
android.permission.BLUETOOTH_SCAN
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.CHANGE_WIFI_STATE
android.permission.DISABLE_KEYGUARD
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.GET_ACCOUNTS
android.permission.HIGH_SAMPLING_RATE_SENSORS
android.permission.INTERNET
android.permission.MANAGE_OWN_CALLS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.NFC
android.permission.POST_NOTIFICATIONS
android.permission.READ_CONTACTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_VISUAL_USER_SELECTED
android.permission.READ_PHONE_NUMBERS
android.permission.READ_PHONE_STATE
android.permission.READ_SYNC_SETTINGS
android.permission.READ_SYNC_STATS
android.permission.RECORD_AUDIO
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
android.permission.USE_FULL_SCREEN_INTENT
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_CONTACTS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SYNC_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.vending.BILLING
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
com.kddi.market.permission.USE_ALML
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

Features

android.bluetooth.bluetooth_le
android.hardware.bluetooth
android.hardware.camera
android.hardware.camera.autofocus
android.hardware.faketouch
android.hardware.location
android.hardware.location.gps
android.hardware.microphone
android.hardware.nfc
android.hardware.telephony
android.hardware.wifi

Libraries

androidx.window.extensions
androidx.window.sidecar
org.apache.http.legacy

TheGodfather

gosrox example if i install an app that asks for all of these permissions.

Feel free to not grant any permissions, or use scopes to limit access if available

gosrox sounds like a lot no?

Would recommend to not focus on low-level permissions. They can be very misleading if you don't understand how Android handles these. Android groups these low-level permissions into units which make sense to be granted/denied together and avoids overprompting. These groups/high-level permissions will be presented to you in the permission requests you will see when an app wants to access something sensitive.

gosrox does graphene protect against most/all of these

GrapheneOS doesn't allow access to sensitive information without your explicit consent.

gosrox can the app snoop on my other apps data?

Apps can't access other app's private data space.

[deleted]

Most of the "dangerous" permissions are denied by default and then prompted for access to you. You can choose to allow things such as file access, camera, etc when the app asks. Low risk permissions such as "vibrate" will be automatically granted.

Disabled apps will not be able to run in the background to my knowledge.