Adds detection for disabled security packages in Android (#306)

* Adds detection for disabled security packages in Android

* Update detection of disabled security packages
This commit is contained in:
Tek
2022-09-26 12:17:09 +02:00
committed by GitHub
parent e1d1b6c5de
commit c3dc4174fc

View File

@@ -66,6 +66,13 @@ ROOT_PACKAGES = [
"com.kingouser.com",
"com.topjohnwu.magisk",
]
SECURITY_PACKAGES = [
"com.policydm",
"com.samsung.android.app.omcagent",
"com.samsung.android.securitylogagent",
"com.sec.android.soagent",
"com.wssyncmldm",
]
class Packages(AndroidExtraction):
@@ -122,6 +129,10 @@ class Packages(AndroidExtraction):
self.detected.append(result)
continue
if result["package_name"] in SECURITY_PACKAGES and result["disabled"]:
self.log.warning("Found a security package disabled: \"%s\"",
result["package_name"])
if not self.indicators:
continue