Discussion - How to use IFW (Intent Firewall) to block specific activities without breaking app functionality

General
22

IFW kicks in late… sure it’s safe?

23

Works with all my other rules…

Don’t see how a user could possibly click fast enough. This is only for gui package installer.

Ps: I think the below is for pm install. I’ll try later. I’ll also see if I can get through it while the phone is booting up. A kosher phone shouldn’t have developer options enabled anyway.

Screenshot_20250727-190830_com.merxury.blocker
Screenshot_20250727-190830_com.merxury.blocker1440×1155 131 KB

24

This is not it, can still use pm install.

Maybe something else

25

maybe delete the pm from system/bin

26

Yeah, I was just looking for a less invasive solution for those who are not editing roms as heavy.

Can delete the adb daemon entirely, though I’m not sure how the phone would react.

27

This seems to work great, clicking on an APK does absolutely nothing.

29
30

Block Factory Reset

May be different on your device, check the blocker app.

<rules>
   <activity block="true" log="false">
      <component-filter name="com.android.settings/com.android.settings.Settings$FactoryResetActivity" />
      <component-filter name="com.android.settings/com.android.settings.Settings$FactoryResetConfirmActivity" />
   </activity>
   <broadcast block="true" log="false" />
   <service block="true" log="false" />
</rules>

This works on my device running Android 16 (AOSP based).

31

Block install but not uninstall for package installer

<rules>
   <activity block="true" log="false">
      <component-filter name="com.android.packageinstaller/com.android.packageinstaller.DeleteStagedFileOnResult" />
      <component-filter name="com.android.packageinstaller/com.android.packageinstaller.InstallFailed" />
      <component-filter name="com.android.packageinstaller/com.android.packageinstaller.InstallInstalling" />
      <component-filter name="com.android.packageinstaller/com.android.packageinstaller.v2.ui.InstallLaunch" />
      <component-filter name="com.android.packageinstaller/com.android.packageinstaller.InstallStaging" />
      <component-filter name="com.android.packageinstaller/com.android.packageinstaller.InstallStart" />
      <component-filter name="com.android.packageinstaller/com.android.packageinstaller.InstallSuccess" />
      <component-filter name="com.android.packageinstaller/com.android.packageinstaller.PackageInstallerActivity" />
      <component-filter name="com.android.packageinstaller/com.android.packageinstaller.UnarchiveActivity" />
      <component-filter name="com.android.packageinstaller/com.android.packageinstaller.UnarchiveErrorActivity" />
   </activity>
   <broadcast block="true" log="false" />
   <service block="true" log="false" />
</rules>

Probably some extras in there (most)

32

Moovit

<rules>
   <activity block="true" log="false">
      <component-filter name="com.tranzmate/com.moovit.web.WebViewActivity" />
      <component-filter name="com.tranzmate/com.moovit.ui.common.web.WebViewActivity" />
      <component-filter name="com.tranzmate/com.usebutton.sdk.internal.WebViewActivity" />
   </activity>
   <broadcast block="true" log="false" />
   <service block="true" log="false" />
</rules>
33

Cant I just like transform this into writing for a blocklist in tripleumdm?

34

It’s activities not urls

35

I hear true ok so what do I do with this again?

36

Write a file called com.tranzmate.xml with the content above.

Push to /data/system/ifw (create folder if not exist)

chmod 644 /data/system/ifw/com.tranzmate.xml
restorecon /data/system/ifw/com.tranzmate.xml

There may be more browsers, that’s just what I found, 3 webview activities.

37

Thanks really appreciate it so will let you know if working

38

Pretty cool it worked thanks a lot

39

What’s this for the zygisk enhance thing?

40

What?

41

From github

42

Oh never mind about that