According to the README file of XPrivacy that can be found here:
The tri-state check box works this way:
unchecked = no items in the category are restricted
solid square =
some items in the category are restricted
check mark = all items in
the category are restricted
Note: By default, categories and functions
are filtered by ...
One app that does that, is called App lock - fingerprint.
This app has many cool features. One of them is, when someone opens a locked app, it will tell them that the app has crashed. They'll have to press and hold the ok button in order to have the keypad show up. (You have the option to enable or disable this option in the app settings)
I found that the ability to select multiple apps and then batch-applying a template is available in the Pro version of the app. That's not exactly what this question asks for, but it does seem that if applying just one permission change (instead of a whole template) exists or will ever exist, it will also be a Pro feature.
Disabling the Google App (com.google.android.googlequicksearchbox) may cause the Voice Input button on some standard keyboards (including the AOSP keyboard) to not appear or not work.
Some alternate keyboards, such as TouchPal, will allow downloading a separate speech-to-text package from Google. Other keyboards, such as Swype, do not require any Google ...
I can't explain what 'srv_listen' really does but to find more info you can use the infobutton in Xprivacy next to the permission name.
There you will find that the actual permission is called ACCESS_COARSE_LOCATION and you'll find a link to the Google documentation.
I'm sorry that I can't help more.
Ok so let me first highlight what XPrivacy can and can't do.
Up to Android 6, permissions to access critical data and resources like contacts, calendar, camera, microphone etc are granted at the time an app is installed and are not revocable at all. Some solutions let you revoke those permission afterwards, but this often leads to crashes ...
I installed xPrivacy on my rooted device and disallowed the App "10003 Contacts" all privileges but some:
that seems to be the only needed privileges