[-] zazarpro@lemmy.ml 1 points 4 hours ago

Yes, however, it won't prevent the process launching as root because firejail is setuid. This means that the person executing the file transitions into the privileges of the owner of the file, in this case, root. Since this root process remains in the background it can theoretically be exploited by the sandboxed process that firejail spawns.

The odds of this happening to someone who isn't getting targeted are very very low so using firejail is still alright, but you should consider a non-setuid solution like bubblewrap or just a VM.

[-] zazarpro@lemmy.ml 1 points 1 day ago

Just so you know Firejail is a setuid root binary with a lot of code. This means that if that code gets exploited and the sandboxed process escapes the sandbox it will have root privileges instead of the running users.

Sources: https://github.com/netblue30/firejail, https://madaidans-insecurities.github.io/linux.html#firejail

[-] zazarpro@lemmy.ml 1 points 5 months ago

I already fixed it

[-] zazarpro@lemmy.ml 2 points 5 months ago

Alright, I was able to fix it by installing it under /system/app which doesn't require any extra configuring. I'll share how I did this in an edit of the post. Thanks for all the help :)

[-] zazarpro@lemmy.ml 1 points 5 months ago

Maybe. I installed it as an user app.

[-] zazarpro@lemmy.ml 1 points 5 months ago

How should I install it as a system app if not from a Magisk module?

[-] zazarpro@lemmy.ml 1 points 5 months ago

Oh, I installed MicroG as an user app. I'll try installing it as a system app as a last resort, since reinstalling every messaging would be really tedious.

Also, one question. What do you mean by not installing it as a Magisk module? I'm not sure what other way there is, other than directly writing to /system

[-] zazarpro@lemmy.ml 1 points 5 months ago

Just tried it with Aurora and I get the same message

[-] zazarpro@lemmy.ml 1 points 5 months ago

I reinstalled Signal from the website apk and got the same message. I currently have 5 apps registered, all displayed in the companion app.

[-] zazarpro@lemmy.ml 1 points 5 months ago

Since most people that I know use messaging apps that nag about missing GMS I decided to get MicroG. Now, I want Signal under the Cloud Messaging hood mostly due to battery saving.

[-] zazarpro@lemmy.ml 1 points 5 months ago

It is Signal specific, all other apps, atleast on my phone, that use cloud messaging work.

28
submitted 5 months ago* (last edited 4 months ago) by zazarpro@lemmy.ml to c/signal@lemmy.ml

I tried to set up Signal with my MicroG setup but it just says 'Missing Google Play Services' after entering my phone number. Everything is turned on in MicroG (including cloud messaging and device registration) and other apps that use cloud messaging work. I have a bit of a niche setup (fakegapps + rooted stock rom) but I doubt that would cause problems.

Thanks in advance :)

Edit: I forgot to note, I'm doing this mostly for battery savings

Edit 2: I was able to fix it by installing under /system/app; comment thread: https://lemmy.ml/post/43156989/23961778;

Warning!! You need to have MicroG installed as an user app, already, for this to work.

Steps:

Create a folder on your pc with this structure (might not work for other devices; - means subdirectory): folder and also keep in mind you need to have these apps removed with Magisk so Android doesn't even know they exist:

-module.prop

-system

--product

---app

----GmsCore

-----GmsCore.apk

----Phonesky

-----Phonesky.apk

--system_ext

---app

----GoogleServicesFramework

-----GoogleServicesFramework.apk

module.prop should contain this (without the spaces empty lines): id=yournameforthemodule

name=yournameforthemodule

version=v1.0

versionCode=1

author=yourname

description=blabla

The apks should be this: GmsCore: core MicroG apk ( latest release as of typing: https://github.com/microg/GmsCore/releases/download/v0.3.12.250932/com.google.android.gms-250932024.apk ; or for Huawei: https://github.com/microg/GmsCore/releases/download/v0.3.12.250932/com.google.android.gms-250932024-hw.apk )

Phonesky: fakestore ( https://github.com/microg/GmsCore/releases/download/v0.3.12.250932/com.android.vending-84022624.apk ; Huawei: https://github.com/microg/GmsCore/releases/download/v0.3.12.250932/com.android.vending-84022624-hw.apk )

GoogleServicesFramework: ( updates rarely: https://github.com/microg/GsfProxy/releases/download/v0.1.0/GsfProxy.apk ; Huawei same )

After doing this zip the two folders so it looks like this:

archive:

-system

--....

-module.prop

and flash it to Magisk like any regular module.

I, also, created a Git repo. It's not the best considering I never used Git, but with this you just need to add the apk's: https://gitlab.com/zazarpro/microg-unprivileged-install

view more: next ›

zazarpro

joined 5 months ago