[MOD][HACK] Disable ASEC (Forward locked packages) on Jellybean

Search This thread
By:
Advanced…
CosmicDan

CosmicDan

Senior Member
Jun 19, 2009
5,906
7,746
37
Sydney
Xiaomi Poco X3 Pro
I will not detail what ASEC is, how it ruines sd-ext linking (e.g. especially in Link2SD), that it can hurt performance and boot time, nor why it does nothing to deter piracy. A quick summary on this wide-spread problem with Jellybean can be found in this blog post.

From the same blog, this article explains how to disable it in sourcecode so all paid apps are installed as normal APK's - like what pre-Jellybean Android would. Full credits go to him for the original fix.

I have translated this to smali so you can apply it to any Jellybean ROM without source compile.

1) Decompile services.jar
2) Open smali/com/android/server/pm/PackageManagerService.smali in a Unix line-ending compatible editor (GEdit, Notepad++)
3) Search for this text...
Code: 
android.permission.INSTALL_PACKAGES
... there will be only one match, within the installPackageWithVerification method.
4) Including the couple of lines after it, you should see something like this...
Code: 
const-string v1, "android.permission.INSTALL_PACKAGES"

const/4 v2, 0x0

invoke-virtual {v0, v1, v2}, Landroid/content/Context;->enforceCallingOrSelfPermission(Ljava/lang/String;Ljava/lang/String;)V

.line 5389
invoke-static {}, Landroid/os/Binder;->getCallingUid()I
...your locals/registers (v#) may be different.
5) Before the last line - the call to getCallingUid() - add a new line...
Code: 
const-string v1, "android.permission.INSTALL_PACKAGES"

const/4 v2, 0x0

invoke-virtual {v0, v1, v2},  Landroid/content/Context;->enforceCallingOrSelfPermission(Ljava/lang/String;Ljava/lang/String;)V

[COLOR=Green][B]and-int/lit8 p3, p3, -0x2[/B][/COLOR]

.line 5389
invoke-static {}, Landroid/os/Binder;->getCallingUid()I
...recompile and push back to device. All done.

With this mod, any APK you install from market that would usually go in an ASEC container should now install as a standard APK, allowing you to move it to sd-ext with e.g. Link2SD. If you have existing ASEC apps already, uninstall and reinstall them.

Enjoy the extra internal space and no more headaches :)
 
  • Like
Reactions: Q9Nap, caspboy, olokos and 17 others
mikeyxda

mikeyxda

Inactive Recognized Developer
Jul 2, 2010
3,763
14,262
Florida - Gulf Coast
www.ddisoftware.com
Thanks for this. I tried it, however, and it's not working for me. I'm on the Galaxy Note II LL4 base (4.1.1) and when I make the change and then try to install an app, I get "Package has a bad manifest" and the app will not install. I'll look later to see if there are any other checks that need to be disabled but might you know what is going on? I was able to find the code and add the line no problem so I'm sure I did as this guide instructs. Just not working.

Regards,
Mike
 
CosmicDan

CosmicDan

Senior Member
Jun 19, 2009
5,906
7,746
37
Sydney
Xiaomi Poco X3 Pro
mikeyxda said:
Thanks for this. I tried it, however, and it's not working for me. I'm on the Galaxy Note II LL4 base (4.1.1) and when I make the change and then try to install an app, I get "Package has a bad manifest" and the app will not install. I'll look later to see if there are any other checks that need to be disabled but might you know what is going on? I was able to find the code and add the line no problem so I'm sure I did as this guide instructs. Just not working.

Regards,
Mike
Click to expand...
Click to collapse

Not sure. If you are certain you did it correctly, maybe 4.1.1 needs something different. I only did thus on 4.1.2.

Sent with Tapatalk
 
mikeyxda

mikeyxda

Inactive Recognized Developer
Jul 2, 2010
3,763
14,262
Florida - Gulf Coast
www.ddisoftware.com
CosmicDan said:
Not sure. If you are certain you did it correctly, maybe 4.1.1 needs something different. I only did thus on 4.1.2.

Sent with Tapatalk
Click to expand...
Click to collapse

OK. Could be. I'll take a look at the differences between 4.1.1 and 4.1.2 and I'll let you know if I solve this for 4.1.1.

Re: curiouscrackers... sounds like yours didn't compile correctly or the jar didn't get put back together correctly. This change won't cause a boot loop as it only affects app installations and a bootloop after modifying services.jar usually means the decompile/recompile didn't go right.

Mike
 
  • Like
Reactions: curiouscrackers
mikeyxda

mikeyxda

Inactive Recognized Developer
Jul 2, 2010
3,763
14,262
Florida - Gulf Coast
www.ddisoftware.com
Has anyone tried this with the new Google Play 4.0.25? Since that "Package file has a bad manifest" error is coming from Google Play, I wonder if they did something in the latest version of Google Play to thwart this fix? I looked at the 4.1.1 and 4.1.2 code and even tried copying the package manager smali code over from 4.1.2 to 4.1.1 and it did the same thing.

Mike
 
mikeyxda

mikeyxda

Inactive Recognized Developer
Jul 2, 2010
3,763
14,262
Florida - Gulf Coast
www.ddisoftware.com
Dug as deep as I'm willing to go (a couple hours). Looks like this just doesn't work on 4.1.1, or at least on the Verizon incarnation of the Galaxy Note II 4.1.1. Logcat shows the file being downloaded but then the download-1.apk file is unable to be opened. There is some indication that it is downloaded in encrypted format and then an attempt made to install it as an un-encrypted file. I'd have to spend a lot more time on it to be sure but it looks like there's more code that needs to be changed in order for the non-asec flag to be carried on into other functions in the framework. I traced the code a half dozen function calls back and don't see anything obvious. Looks like it should work especially since the code inside that method is identical. So either some of the VZW authentication messes it up or it isn't 4.1.1 friendly. Don't really want to spend too much time on it since it's a no brainer to pull the app out of /mnt/asec anyway. Just a curiosity.

Mike
 
  • Like
Reactions: curiouscrackers
Sage

Sage

Senior Member
Dec 12, 2005
1,999
509
AU
Xiaomi Mi 11
if anyone came here looking for a method to convert ASEC to APK rather than prevent them installed. you can run this script in a terminal emulator with root access.

It will transfer all your asec files to apk's no loss of data or reboot required!

Code: 
#!/system/xbin/sh

LD_LIBRARY_PATH="/system/lib"
PATH="/system/xbin:/system/sbin:/system/bin"

for ASEC in $(find /data/app-asec/ -name '*.asec')
do
        echo "Deasec $ASEC"
	PKG=$(basename $ASEC|cut -d'-' -f1)
	echo "Package name $PKG"
	if [ -d /mnt/asec/$PKG*/lib ]
	then
		echo "Relocate libs"
		find /data/data/$PKG/ -type l -name lib -exec rm {} \;
		cp -r /mnt/asec/$PKG*/lib /data/data/$PKG/
		echo "Fix libs permissions"
		chown -R system:system /data/data/$PKG/lib
		chmod -R 755 /data/data/$PKG/lib
	fi
	APK=$(pm path $PKG|cut -d':' -f2)
	echo "APK location $APK"
        cp $APK /data/local/tmp/pkg.apk
        chmod 644 /data/local/tmp/pkg.apk
        pm install -r -f /data/local/tmp/pkg.apk && rm /data/local/tmp/pkg.apk
done
 
  • Like
Reactions: Charone and davidgro
CosmicDan

CosmicDan

Senior Member
Jun 19, 2009
5,906
7,746
37
Sydney
Xiaomi Poco X3 Pro
mikeyxda said:
Dug as deep as I'm willing to go (a couple hours). Looks like this just doesn't work on 4.1.1, or at least on the Verizon incarnation of the Galaxy Note II 4.1.1. Logcat shows the file being downloaded but then the download-1.apk file is unable to be opened. There is some indication that it is downloaded in encrypted format and then an attempt made to install it as an un-encrypted file. I'd have to spend a lot more time on it to be sure but it looks like there's more code that needs to be changed in order for the non-asec flag to be carried on into other functions in the framework. I traced the code a half dozen function calls back and don't see anything obvious. Looks like it should work especially since the code inside that method is identical. So either some of the VZW authentication messes it up or it isn't 4.1.1 friendly. Don't really want to spend too much time on it since it's a no brainer to pull the app out of /mnt/asec anyway. Just a curiosity.

Mike
Click to expand...
Click to collapse

We use this in ICS devices so the issue isn't specific to platform version. The smali mod itself is fine, it's just a compiled version of a safe modification in sourcecode to tell PackageManager to turn off encryption when installing. Your device/ROM must have some other non-standard protection. Being a Samsung, probably some more encryption nonsense. Hard to diagnose because Samsung are terrible with releasing source code.
 
  • Like
Reactions: Crescendo Xenomorph
H

hadi_rena

Senior Member
Sep 1, 2011
711
253
Bandung
Sage said:
if anyone came here looking for a method to convert ASEC to APK rather than prevent them installed. you can run this script in a terminal emulator with root access.

It will transfer all your asec files to apk's no loss of data or reboot required!

Code: 
#!/system/xbin/sh

LD_LIBRARY_PATH="/system/lib"
PATH="/system/xbin:/system/sbin:/system/bin"

for ASEC in $(find /data/app-asec/ -name '*.asec')
do
        echo "Deasec $ASEC"
	PKG=$(basename $ASEC|cut -d'-' -f1)
	echo "Package name $PKG"
	if [ -d /mnt/asec/$PKG*/lib ]
	then
		echo "Relocate libs"
		find /data/data/$PKG/ -type l -name lib -exec rm {} \;
		cp -r /mnt/asec/$PKG*/lib /data/data/$PKG/
		echo "Fix libs permissions"
		chown -R system:system /data/data/$PKG/lib
		chmod -R 755 /data/data/$PKG/lib
	fi
	APK=$(pm path $PKG|cut -d':' -f2)
	echo "APK location $APK"
        cp $APK /data/local/tmp/pkg.apk
        chmod 644 /data/local/tmp/pkg.apk
        pm install -r -f /data/local/tmp/pkg.apk && rm /data/local/tmp/pkg.apk
done
Click to expand...
Click to collapse

Hi, thanks for this awesome script, but when I try this script its return directory not found error. I check all directories / mount folder and there is accessible. Sorry I'm noob related to this...
 
Sage

Sage

Senior Member
Dec 12, 2005
1,999
509
AU
Xiaomi Mi 11
try installing a terminal..

type
su
and allow root access

then type each line one by one enter after each.

Should work fine.

If you want to turn it into a single script. (.sh file). Then you will need use a linux or notepad++ to make it. If you make the script in windows it will not work.

you can then type sh filename.sh in terminal (after SU) to execute it.

Hit thanks if i helped.

Cheers.
 
EMSpilot

EMSpilot

Inactive Recognized Themer
May 31, 2012
1,105
2,054
Show Low
Verizon S4 on 4.3

Very Nice Job!!!

Works perfectly on my Verizon S4 running MK2 Android 4.3.

Thanks for this!!! This is where I inserted it.

.method public installPackageWithVerificationAndEncryption(Landroid/net/Uri;Landroid/content/pm/IPackageInstallObserver;ILjava/lang/String;Landroid/content/pm/VerificationParams;Landroid/content/pm/ContainerEncryptionParams;)V
.locals 14
.parameter "packageURI"
.parameter "observer"
.parameter "flags"
.parameter "installerPackageName"
.parameter "verificationParams"
.parameter "encryptionParams"

.prologue
.line 7922
iget-object v1, p0, Lcom/android/server/pm/PackageManagerService;->mContext:Landroid/content/Context;

const-string v2, "android.permission.INSTALL_PACKAGES"

const/4 v3, 0x0

invoke-virtual {v1, v2, v3}, Landroid/content/Context;->enforceCallingOrSelfPermission(Ljava/lang/String;Ljava/lang/String;)V

and-int/lit8 p3, p3, -0x2

.line 7925
invoke-static {}, Landroid/os/Binder;->getCallingUid()I

move-result v13

.line 7926
.local v13, uid:I
invoke-static {v13}, Landroid/os/UserHandle;->getUserId(I)I

move-result v1

const-string v2, "no_install_apps"

invoke-direct {p0, v1, v2}, Lcom/android/server/pm/PackageManagerService;->isUserRestricted(ILjava/lang/String;)Z

move-result v1

if-eqz v1, :cond_0
 
Last edited:
H

heyjoe66

Senior Member
Mar 15, 2007
566
173
Bad manifest here on Play Store 4.6.17

As far as I understand, packages for paid apps com from Play Store encrypted and get stored encrypted.
So I guess, that asec file in asec folder IS an encrypted package, came from Play Store, and if one will try to install it as a regular apk, the "Bad manifest..." error will occur. So it happens. Too bad.
 
You must log in or register to reply here.

Similar threads

fivefour
OUTDATED - [MOD] CrossBreeder - Lag-/Entropy+/DNS+/Tether+/Ads-/Censors-/.bit support!!
Replies
7K
Views
2M
fivefour
fivefour
Jeeko
★ [MOD] ◢ PurePerformances™X ◣ | Golden Edition | Scary performances on Android
Replies
2K
Views
1M
canvamodapk
canvamodapk
zeppelinrox
  • Poll
[V6U9RC13]For Your Lag(4x) Do it good, Good, GOOD, GOOD! SuperCharge Your Launchaaah!
Replies
24K
Views
7M
rodken
rodken
slaid480
  • Poll
[MOD][SCRIPTs][TWEAKs]Fly-On Mod�V5.0 Alpha8/Feel The Smoothness!/Upd:11/08/15
Replies
4K
Views
1M
spartan197089@gmail.com
spartan197089@gmail.com
pikachu01
[MOD][TWEAKS] ThunderBolt! v3.3.0 5/15/16 [Performance+Battery Life Mods & Tweaks]
Replies
9K
Views
2M
pikachu01
pikachu01

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 20
    CosmicDan
    CosmicDan
    I will not detail what ASEC is, how it ruines sd-ext linking (e.g. especially in Link2SD), that it can hurt performance and boot time, nor why it does nothing to deter piracy. A quick summary on this wide-spread problem with Jellybean can be found in this blog post.

    From the same blog, this article explains how to disable it in sourcecode so all paid apps are installed as normal APK's - like what pre-Jellybean Android would. Full credits go to him for the original fix.

    I have translated this to smali so you can apply it to any Jellybean ROM without source compile.

    1) Decompile services.jar
    2) Open smali/com/android/server/pm/PackageManagerService.smali in a Unix line-ending compatible editor (GEdit, Notepad++)
    3) Search for this text...
    Code: 
    android.permission.INSTALL_PACKAGES
    ... there will be only one match, within the installPackageWithVerification method.
    4) Including the couple of lines after it, you should see something like this...
    Code: 
    const-string v1, "android.permission.INSTALL_PACKAGES"

const/4 v2, 0x0

invoke-virtual {v0, v1, v2}, Landroid/content/Context;->enforceCallingOrSelfPermission(Ljava/lang/String;Ljava/lang/String;)V

.line 5389
invoke-static {}, Landroid/os/Binder;->getCallingUid()I
    ...your locals/registers (v#) may be different.
    5) Before the last line - the call to getCallingUid() - add a new line...
    Code: 
    const-string v1, "android.permission.INSTALL_PACKAGES"

const/4 v2, 0x0

invoke-virtual {v0, v1, v2},  Landroid/content/Context;->enforceCallingOrSelfPermission(Ljava/lang/String;Ljava/lang/String;)V

[COLOR=Green][B]and-int/lit8 p3, p3, -0x2[/B][/COLOR]

.line 5389
invoke-static {}, Landroid/os/Binder;->getCallingUid()I
    ...recompile and push back to device. All done.

    With this mod, any APK you install from market that would usually go in an ASEC container should now install as a standard APK, allowing you to move it to sd-ext with e.g. Link2SD. If you have existing ASEC apps already, uninstall and reinstall them.

    Enjoy the extra internal space and no more headaches :)
    View
    2
    Sage
    Sage
    if anyone came here looking for a method to convert ASEC to APK rather than prevent them installed. you can run this script in a terminal emulator with root access.

    It will transfer all your asec files to apk's no loss of data or reboot required!

    Code: 
    #!/system/xbin/sh

LD_LIBRARY_PATH="/system/lib"
PATH="/system/xbin:/system/sbin:/system/bin"

for ASEC in $(find /data/app-asec/ -name '*.asec')
do
        echo "Deasec $ASEC"
	PKG=$(basename $ASEC|cut -d'-' -f1)
	echo "Package name $PKG"
	if [ -d /mnt/asec/$PKG*/lib ]
	then
		echo "Relocate libs"
		find /data/data/$PKG/ -type l -name lib -exec rm {} \;
		cp -r /mnt/asec/$PKG*/lib /data/data/$PKG/
		echo "Fix libs permissions"
		chown -R system:system /data/data/$PKG/lib
		chmod -R 755 /data/data/$PKG/lib
	fi
	APK=$(pm path $PKG|cut -d':' -f2)
	echo "APK location $APK"
        cp $APK /data/local/tmp/pkg.apk
        chmod 644 /data/local/tmp/pkg.apk
        pm install -r -f /data/local/tmp/pkg.apk && rm /data/local/tmp/pkg.apk
done
    View
    1
    JunDavis
    JunDavis
    Nice job Dan! :thumbup:

    Sent from my LG-P920 using xda app-developers app
    View
    1
    mikeyxda
    mikeyxda
    CosmicDan said:
    Not sure. If you are certain you did it correctly, maybe 4.1.1 needs something different. I only did thus on 4.1.2.

    Sent with Tapatalk
    Click to expand...
    Click to collapse

    OK. Could be. I'll take a look at the differences between 4.1.1 and 4.1.2 and I'll let you know if I solve this for 4.1.1.

    Re: curiouscrackers... sounds like yours didn't compile correctly or the jar didn't get put back together correctly. This change won't cause a boot loop as it only affects app installations and a bootloop after modifying services.jar usually means the decompile/recompile didn't go right.

    Mike
    View
    1
    mikeyxda
    mikeyxda
    Dug as deep as I'm willing to go (a couple hours). Looks like this just doesn't work on 4.1.1, or at least on the Verizon incarnation of the Galaxy Note II 4.1.1. Logcat shows the file being downloaded but then the download-1.apk file is unable to be opened. There is some indication that it is downloaded in encrypted format and then an attempt made to install it as an un-encrypted file. I'd have to spend a lot more time on it to be sure but it looks like there's more code that needs to be changed in order for the non-asec flag to be carried on into other functions in the framework. I traced the code a half dozen function calls back and don't see anything obvious. Looks like it should work especially since the code inside that method is identical. So either some of the VZW authentication messes it up or it isn't 4.1.1 friendly. Don't really want to spend too much time on it since it's a no brainer to pull the app out of /mnt/asec anyway. Just a curiosity.

    Mike
    View

New posts