Forum Discussion

BS's avatar
BS
Level 1.6: Donut
3 months ago

[BUG] Android Management API: "Disable" Option Bypasses FORCE_INSTALLED Restriction

While implementing the Android Management API to configure a critical application as FORCE_INSTALLED, I encountered a significant issue. Under normal circumstances, this configuration prevents users ...
Lizzie's avatar
Lizzie
Google Community Manager
3 months ago

Hello BS,

 

Great to meet you. Thanks for highlighting this. 

 

Just to check as you say you have tried this on Android 14 and it's working, is your ask here if it will be fixed on Android 13 too? Or is this more of an awareness for others? 

 

Thanks so much,

Lizzie

BS's avatar
BS
Level 1.6: Donut
3 months ago

Hello Lizzie,

On the default launcher in Android 14, the 'disable' option does not appear when long-pressing an application, which prevents the exploit from occurring. However, I don’t believe this indicates that the issue has been inherently resolved in Android 14. My question is whether this issue will be addressed for Android 13 as well.

Thanks

  • Lizzie's avatar
    Lizzie
    Google Community Manager
    3 months ago

    Thanks so much for confirming BS. Yeah, looking at this the behaviour UX has changed for this. Personally it looks like it could do with a new policy to display this. I wonder have you spoken to your  EMM about this already?

    • BS's avatar
      BS
      Level 1.6: Donut
      3 months ago

      The policy remains the same, and we’ve developed our own EMM solution. The documentation provided by AMAPI is comprehensive and made the integration process straightforward and seamless for us.
      I do have several other questions I always wanted to ask. I'll create a separate post for that.

      Thanks!