Hello all,
I'm a I.T. Field technician and pretty well versed in this kind of stuff. So, as expected - the devs for Workmarket have zero interest in providing any explanation for why GrapheneOS is now no longer working with their Workmarket application. I'm sure some of you have heard of Field Nation or Workmarket. It can be a decent platform to find some work.
Well, today the app fully stopped allowing me to login. It's a in a endless "Invalid Login Request" loop and nothing I have done has worked. Reinstalled sandboxxed Play Services, cleared Workmarket app storage/cache, deleted / reinstalled Workmarket, etc.
I've been running through the debug information and it appears as though GrapheneOS may be blocking some likely privacy intruding aspects of the WM app.
Here's what I suspect may be causing the "Invalid Login Request" error within the app. Now, keep in mind I have zero problems using their mobile web UI or the website itself on a PC.
01-22 22:53:04.990 14288 14288 I auditd : avc=type=1400 audit(0.0:3712): avc: denied { read } for comm="pool-19-thread-" name="cache" dev="dm-10" ino=17 scontext=u:r:untrusted_app:s0:c209,c256,c512,c768 tcontext=u:object_r:cache_file:s0 tclass=lnk_file permissive=0 app=com.workmarket.android.native
--------- switch to main
01-22 22:53:04.990 14288 14288 W pool-19-thread-: type=1400 audit(0.0:3712): avc: denied { read } for name="cache" dev="dm-10" ino=17 scontext=u:r:untrusted_app:s0:c209,c256,c512,c768 tcontext=u:object_r:cache_file:s0 tclass=lnk_file permissive=0 app=com.workmarket.android.native
01-22 22:53:04.994 14288 14353 W libc : Access denied finding property "ro.secure"
01-22 22:53:05.058 14288 14353 W libc : Access denied finding property "ro.debuggable"
--------- switch to events
01-22 22:53:05.054 14288 14288 I auditd : avc=type=1400 audit(0.0:3713): avc: denied { read } for comm="pool-19-thread-" name="enforce" dev="selinuxfs" ino=4 scontext=u:r:untrusted_app:s0:c209,c256,c512,c768 tcontext=u:object_r:selinuxfs:s0 tclass=file permissive=0 app=com.workmarket.android.native
--------- switch to main
01-22 22:53:05.054 14288 14288 W pool-19-thread-: type=1400 audit(0.0:3713): avc: denied { read } for name="enforce" dev="selinuxfs" ino=4 scontext=u:r:untrusted_app:s0:c209,c256,c512,c768 tcontext=u:object_r:selinuxfs:s0 tclass=file permissive=0 app=com.workmarket.android.native
--------- switch to events
01-22 22:53:05.054 14288 14288 I auditd : avc=type=1400 audit(0.0:3714): avc: denied { read } for comm="pool-19-thread-" name="tcp" dev="proc" ino=4026532026 scontext=u:r:untrusted_app:s0:c209,c256,c512,c768 tcontext=u:object_r:proc_net_tcp_udp:s0 tclass=file permissive=0 app=com.workmarket.android.native
--------- switch to main
01-22 22:53:05.054 14288 14288 W pool-19-thread-: type=1400 audit(0.0:3714): avc: denied { read } for name="tcp" dev="proc" ino=4026532026 scontext=u:r:untrusted_app:s0:c209,c256,c512,c768 tcontext=u:object_r:proc_net_tcp_udp:s0 tclass=file permissive=0 app=com.workmarket.android.native
01-22 22:53:05.067 14288 15741 I SHAPE : Url:https://www.workmarket.com/v3/oauth/token | Header added: 8
Anyone able to offer any assistance? Tried enabling/disabling debugging, it's been set in the Exploit protection compatibility mode since I've been using it as it just crashes on startup without it.
Field Nation, Workmarket's competitor works just fine. Their support simply states "we do not support anything besides official Android" and I have informed them that their app is the only app that does not work with GrapheneOS I have ever ran into. I was reading through some of the GrapheneOS documentation and noticed that the Google Play Services is certified but not hardware verified? something along those lines.
Anyways, any ideas would be helpful. The app makes jobs a lot easier.
Cheers mates.