Say I have Google Camera installed with network permissions revoked. Say I also install Play Services which does have network access. Would Google Camera be able to share data about my pictures to Play Services which would then phone home to Google?
Say I have Google Camera installed with network permissions revoked. Say I also install Play Services which does have network access. Would Google Camera be able to share data about my pictures to Play Services which would then phone home to Google?
No, one, you’ve firewalled the camera, second, the play services on Graphene are userland apps, theirs no special privilege there, and theres the hardened sandboxing on top of that.
While there are legitimate ways for apps to share even in the sandboxed environment (there needs to be for phones to work correctly) you can see those permissions in the apps and also must grant them. Remember, the biggest threat is in a normal situation where the play services have root access, which isn’t the case with Graphene. Surprisingly enough, most of the Google apps have minimal permissions and usually near no trackers other than analytics that most are blocking by default with DNS anyways.