Haven
Isolate and run multiple instances of apps using Work Profiles
Kenneth-Cho-InfoSec App Manager Security
Screenshots
Description
Haven is a Free and Open-Source app that leverages the "Work Profile" feature of Android to provide an isolated space that you can install or clone apps into.
Haven uses the application id io.github.kennethchoinfosec.haven, so it installs as a separate app and does not upgrade or replace existing installs of the original app.
The main use-cases of Haven include:
- Installing apps inside a work profile for isolation
- "Freeze" apps inside the work profile to prevent them from running or being woken up when you are not actively using them
- Installing two copies of the same app on the same device
Note that Haven depends on the Work Profile feature of the Android system, so any bugs related to Work Profiles in the Android-derived system you are using will affect Haven. In addition, Haven can only be as secure as the Work Profile implementation.
What’s new (0.1.4)
Hardened cross-profile IPC against untrusted work-profile applications.
- Protected the cross-profile activity with a signature-level permission.
- Hardened authentication key initialization and request validation.
Versions
Permissions
What the app asks the system for. Android only grants sensitive access after you confirm it.
- Install appsStart the installation of other apps.
- REQUEST_DELETE_PACKAGES
- Foreground serviceKeep running in the background, visible in the status bar.
- FOREGROUND_SERVICE_SYSTEM_EXEMPTED
- launcher.permission.INSTALL_SHORTCUT
- Full file accessAccess all files on the device.
- Read storageRead files on the device storage.
- Write storageCreate and change files on the device storage.
Show 6 more permissions
- Display over other appsDraw content on top of other apps.
- PACKAGE_USAGE_STATS
- NotificationsShow notifications.
- NFCExchange data via near field communication.
- permission.INTERNAL_PROFILE_IPC
- haven.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Comments