There are quite a few apps that require read and write access to the external storage, which gives them access to the whole /sdcard directory. But since that is also the only storage the user themselves have access to, is there any way to create a folder there under /sdcard (maybe even inside /sdcard/Download/) that is restricted to a few apps specified by the user such that no other app has access to it?

I imagine this is something possible within the scope of SELinux, and might only be possible to set up with root access, although should still be usable without enabling root access once set up properly.

According to 1 and 2, it seems mkdir /sdcard/private then create a new context user_private for it that is also assigned to trusted apps one by one. But I am not sure exactly how.

  • it looks intuitive, but in fact it not possible – iBug Oct 11 '18 at 0:31
  • Can you be more specific with references why it would be not possible? – hyiltiz Oct 18 '18 at 21:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.