[GH-ISSUE #401] [REQUEST] In-app / per-app permission manager #368

New issue

Closed

opened 2026-03-03 15:33:02 +03:00 by kerem · 1 comment

kerem commented

2026-03-03 15:33:02 +03:00

Owner

Originally created by @Zthrowaway on GitHub (Mar 18, 2025).
Original GitHub issue: https://github.com/LiveContainer/LiveContainer/issues/401

If one uses many apps in LiveContainer, they may have given the app many permissions. Paste without asking, access to the camera, microphone, photos, contacts and more are all commonly requested by apps and given by the user. However, there is no permission managing system inside of LifeContainer.

This is technically a security vulnerability (I think?) of sorts - if I, for example, allowed location for Pokémon GO and camera and audio for Snapchat, Snapchat would know my location and Pokémon GO would be able to use my camera, even if that’s not what I allowed access for.

That’s why I ask for a section in the per-app settings for allowing/denying permissions you would need to grant to the app.

Originally created by @Zthrowaway on GitHub (Mar 18, 2025). Original GitHub issue: https://github.com/LiveContainer/LiveContainer/issues/401 If one uses many apps in LiveContainer, they may have given the app many permissions. Paste without asking, access to the camera, microphone, photos, contacts and more are all commonly requested by apps and given by the user. However, there is no permission managing system inside of LifeContainer. This is technically a security vulnerability (I think?) of sorts - if I, for example, allowed location for Pokémon GO and camera and audio for Snapchat, Snapchat would know my location and Pokémon GO would be able to use my camera, even if that’s not what I allowed access for. That’s why I ask for a section in the per-app settings for allowing/denying permissions you would need to grant to the app.

kerem closed this issue

2026-03-03 15:33:03 +03:00

kerem commented

2026-03-03 15:33:03 +03:00

Author

Owner

@hugeBlack commented on GitHub (Mar 18, 2025):

Require a lot of work
Very easy to bypass
so this will never be implemented

Remember, LiveContainer is an app launcher, not an emulator or hypervisor.

@hugeBlack commented on GitHub (Mar 18, 2025): 1. Require a lot of work 2. Very easy to bypass so this will never be implemented Remember, LiveContainer is an app launcher, not an emulator or hypervisor.