Edit the host lists on grapheneos

Wass1947

hello everyone,

I as wondering if I could use your advise.

for personal reasons, there are few domains that I would like to be permanently blocked on my device, and the best way to do so is to use the host list (donaine 0.0.0.0).

what is the best way to do that? can I temporarily root my phone to edit the host lists then remove the root? I dont want root permanently on my phone as this will be no longer secure.

is it possible to compile grapheneos from scratch to create a version with the desired host list? if yes, will the custom made host list be deleted after an update?

I would be grateful if anyone could help me.

also, please do not suggest me apps that simulate a vpn to block domaines, I really need to block them using the host list

many thanks :)

GrapheneOS

Wass1947 You can use an app like RethinkDNS for this purpose while still using a WireGuard VPN or multiple chained VPNs. Making domains resolve to 0.0.0.0 is not the same thing as making them get an error or non-existent domain result.

Wass1947

thank you for your response

unfortuantly, rethink dns does not suit me, this app is easily removable

I want to help someone block gambling/adult sites on his phone with his consent which is why I wanted to use the host lists directly

raccoondad

Wass1947 I want to help someone block gambling/adult sites on his phone with his consent which is why I wanted to use the host lists directly

Not how it works...you can't. GrapheneOS doesn't support it, android doesn't support it.

There is no way to do what you want, you can't permanently block website on android. You can only use a proxy with a custom DNS list.

That is it, what you are asking for isn't possible. Compiling GOS yourself with changes isn't secure or usable for production. You would have to make this edit and then merge every update, its not viable.

If your friend is struggling with addiction he should find other methods of succession, however GOS doesn't support what you need and any method of doing so is insecure. They could also just reflash the phone to the actual GOS OS. Nothing stops them from undoing the block that way.

chinook

Wass1947 I'm sorry you're in this situation and very happy you're helping.

What I would try in this situation (although it's going to be tedious but less dangerous than rooting), would be building my custom GOS image with the hosts file updated. Not as secure as I understand (as your image won't be signed so no VerifiedBoot protection), but better than nothing.

I don't know of any software that would do what you need and remain beyond Owner's reach.