No android secured screen in Android 12

khaledAbbasExperitest commented 2 years ago

What is the issue or idea you have?

Have you tried STF?

Using latest JNI update I am still unable to get secured screens(for example, changing pin code) This behavior is only happening on Android 12 devices

JesseCodeBones commented 2 years ago

from my information, visual display for secure screen only available for SYSTEM PROCESS from Android 12. @khaledAbbasExperitest

hyeongminju commented 2 years ago

@JesseCodeBones @khaledAbbasExperitest

Anybody change this code about secure flag? /jni/minicap-shared/aosp/src/minicap_31.cpp

// Create virtual display.
MCINFO("Creating virtual display");
mVirtualDisplay = android::SurfaceComposerClient::createDisplay(
  /* const String8& displayName */  android::String8("minicap"),
  /* bool secure */                 false // i think the secure flag that have to change true. 
);

but i could not build for aosp part.

here is my logs

mkdir -p libs/android-31/armeabi-v7a docker run --rm \ -a stdout -a stderr \ -v /media/aosp/android-12.0.0_r2:/aosp \ -v /Users/1004676/stf/minicap/jni/minicap-shared/aosp/:/app \ -v /Users/1004676/stf/minicap/jni/minicap-shared/aosp/libs/android-31/armeabi-v7a:/artifacts \ openstf/aosp:jdk8 /aosp.sh build aosp_arm-eng minicap /aosp.sh: line 110: build/envsetup.sh: No such file or directory make: *** [libs/android-31/armeabi-v7a/minicap.so] Error 1

i need help.

varundtsfi commented 2 years ago

Hi @hyeongminjum, @koral-- and @JesseCodeBones I am working on it. Will provide you the data soon. It's taking time while building.

varundtsfi commented 2 years ago

Due to some urgency I was not able to build it but tonight with above changes I will build and share the result soon.

varundtsfi commented 2 years ago

Hi @hyeongminjum, @koral-- and @JesseCodeBones

I have build the OS with bool secure */ true, Can you give it a try. I have attached the file with names mincap.zip. Download it and rename it to minicap.so. minicap.zip

hyeongminju commented 2 years ago

hi @varundtsfi thanks for you works. i download and rename file(minicap.zip -> minicap.so) then i try test (ABI = arm64-v8a // sdk = 31 ) but, i can not get secure stream. so, do i something wrong?

varundtsfi commented 2 years ago

HI @hyeongminju sorry for the delay

that means It is not working with the suggestion which you have suggested mVirtualDisplay = android::SurfaceComposerClient::createDisplay( / const String8& displayName / android::String8("minicap"), / bool secure / false // i think the secure flag that have to change true. );

Even If you try Chrome in incognito mode in any Android 12 version device, This solution will not work even the Video Streaming too. Google Have applied some restriction on display.

Right now I am working on Android 13 if I will get the time, I will again try this. Thank you

childnode commented 1 year ago

UPDATE: IT IS IMPOSSIBLE TO "FIX" (bypass) this system security feature

tl;dr: @JesseCodeBones said it a year ago - only System (Services) are allowed to, but minicap in userland is not

reading discussion https://github.com/Genymobile/scrcpy/issues/2129 again (see also https://github.com/Genymobile/scrcpy/issues/36 )

the relevant one is: SurfaceFlinger: Only privileged processes can create a secure display

wether you set this flag or not, it is ignored!

DeviceFarmer / minicap

No android secured screen in Android 12 #34