[APP][GPL]SecDroid - Android Hardening [BETA]

---

SecDroid V 1.1 Beta
Created by x942
Released under GPLV2

Introduction

SecDroid hardens the android kernel by disable certain binaries that have internet access or can be used as an attack vector. Some of these are:
SSH
SSHD
Telnet
NC (net cat)
Ping
PM (Package Manager - Can't install apps via CLI/ADB)
ADBD (ADB is disabled until reboot)

And by securing the TCP Stack using Systctl (Until Next boot).

More info

Why disable ADB and PM?

ADB and PM are both disabled to help prevent an attacker from being able to install apps via the command line or adb shell. Both of these are potential attack vectors. You can install apps via the playstore and GUI

What license is this released under?

All code is released under GPLV2 Unless otherwise noted.

Thanks/Credits

Many Thanks to Adam Outler for his Shell class that was used in this project (until V0.3 - See Changelog).
Many thanks to XDA-TV and XDA for their hard work!
And thanks to SANS for their Android Security whitepaper which inspired this project.

Downloads:

SecDroid.apk

Source Code

Latest Version (always up to date)

Play Store ] (OUT-OF-DATE)

Please note this is my first android app. As such bugs may be present and the code may not be pretty. If anyone can help me make it look nicer and more efficient that would be great

UPDATE 2013-05-06:
Version 1.1 Beta

* Fixed script to properly handled errors on some devices
* Fixed layout issue
* Added disable bluetooth feature (Disabled bluetoothd )
* Added enable bluetooth feautre ( Reverses above action)

x942 - Thanks for letting me know this is in the works - looks really promising. With things like SSH/SSHD being disabled, will apps (like Connectbot) still work, allowing for SSH/SSHD on a per app basis?

Does this just disable these things during the current running session?
IE after rebooting it does everything go back to normal?
If not is there a way to enable them again?

I have to assume that it's a good thing if the application wasn't able to find any of the noted application to harden.

Originally Posted by fluxgfx

I have to assume that it's a good thing if the application wasn't able to find any of the noted application to harden.

I assume it's not a good thing because the applications are missing (which is unlikely) or they are moved to a different location

http://www.xda-developers.com/androi...with-secdroid/

featured on Xda portal!

So the "hardening" is only applied after running the app and upon next boot everything should be back to normal correct?

Originally Posted by Mika83AC

I assume it's not a good thing because the applications are missing (which is unlikely) or they are moved to a different location

I agree with you. Although after a manual verification the application in questions aren't located on the device in any folders Internel, External or within any of the root folder.

Cheers,

Originally Posted by fluxgfx

I agree with you. Although after a manual verification the application in questions aren't located on the device in any folders Internel, External or within any of the root folder.

Cheers,

I also has the same issue when running the app and I confirmed the apps are not located on my device.

First of all thank you so much for the effort to keep our devices safe. Im using Droidwall to block certain programs and would like to install SecDroid but not sure if it would conflict in any way. Could you please confirm?