Dude

[lahed]

Hey,

Nice project!, it's possible hook WindowManager for accept TYPE_SECURE_SYSTEM_OVERLAY that requires permission INTERNAL_SYSTEM_WINDOW (signature)

Thank u

[SarotecK]

Thanks for your request.

As a first step I added the WindowManager hook.

Next step will be to analyze the events needed to bypass this permission check.

[SarotecK]

Can you provide a full example where you add the View / Window / Dialog and the exception you got?

So I can verify that I analyze same issue as yours.

Just put the lines of code and the exception here.

[lahed]

Thank you!, yeah:

1. I add new window type SYSTEM_OVERLAY
   //public static final int TYPE_SECURE_SYSTEM_OVERLAY = FIRST_SYSTEM_WINDOW+15; WindowManager.LayoutParams params; params = new WindowManager.LayoutParams( WindowManager.LayoutParams.FIRST_SYSTEM_WINDOW+15, WindowManager.LayoutParams.FLAG_LAYOUT_IN_SCREEN | WindowManager.LayoutParams.FLAG_FULLSCREEN | WindowManager.LayoutParams.FLAG_LAYOUT_NO_LIMITS | WindowManager.LayoutParams.FLAG_NOT_TOUCHABLE | WindowManager.LayoutParams.FLAG_NOT_FOCUSABLE, PixelFormat.TRANSLUCENT ); WindowManager.LayoutParams layoutParams = params; WindowManager windowManager = (WindowManager) getSystemService(WINDOW_SERVICE); windowManager.addView(mainView, layoutParams);

2. TYPE_SECURE_SYSTEM_OVERLAY requires permission of app system, so, Idk if can bypass, error it's:
   Caused by: android.view.WindowManager$BadTokenException: Unable to add window android.view.ViewRootImpl$W@27dec2f -- permission denied for window type 2015

(ref:https://gitlab.tubit.tu-berlin.de/justus.beyer/streamagame_platform_frameworks_base/blob/streamagame-lollipop-x86/core/java/android/view/ViewRootImpl.java#L586)

3. Permission required for TYPE_SECURE_SYSTEM_OVERLAY is permission app system INTERNAL_SYSTEM_WINDOW, so idk how bypass this.

EDIT1: Maybe hooking pakagemanager?, because when I add permission I receive: INTERNAL_SYSTEM_WINDOW requested by ... app is not changeable permission type