This is really a long and tiresome journey. So I hope you become my companion!
Device info changed with build.prop and XPrivacy/Lua. Magisk/Xposed in Systemless mode.
I am on my way to achieve finest and most stringent privacy settings possible on android for Google services (Package - Pico). OS is Lineage OS 14.1 - 7.1.2
I am looking to fine tune the privacy settings for Google right now. I have been able to get amazing control over it with the help of XPrivacy/Lua modules of Xposed, but here is the catch. I am not able to get Google Play Store to connect, which is obvious. So I want to know what are the bare minimum permission requirements for it to work while keeping privacy in check?
I have firewalled through AFWall+. Only have allowed Google Play Store and Play Services (Group of apps) to connect.
Steps taken:
Most rights are revoked with the help of Privacy Guard of OS.
System apps are also paralyzed with restrictions.
Most permissions are actually allowed in XPrivacy and Lua.
Critical permissions (Network/Serial/Tracking/Analytics/Location) are denied.
Frozen many Google Apps (and System) with Titanium Backup.
AFWall+ has allowed only limited apps: GApps/Download Manager
After all this, device is stable. No boot loop. No app crash.
Only root apps have true access here. No other app, be it system or user apps, have any easy access to device info.
I am fine tuning each permission as I go. But any input from you can help accelerate this process.
Will you be my north star?