Android应用防卸载和设备管理器权限获取

设备管理器权限范围

<device-admin xmlns:android="http://schemas.android.com/apk/res/android">
  <uses-policies>
    <limit-password />
    <watch-login />
    <reset-password />
    <force-lock />
    <wipe-data />
    <expire-password />
    <encrypted-storage />
    <disable-camera />
  </uses-policies>
</device-admin>

立即锁屏 Lock device immediately
锁屏前的不活动时间 Maximum inactivity time lock
指定存储区域加密 Require storage encryption
擦拭数据(恢复出厂) Wipe the device’s data
禁用相机 Disable camera

开启手机PIN或密码 Password enabled
密码最小长度 Minimum password length
密码是字母数字 Alphanumeric password required
密码必须是字母数字符号混合 Complex password required
密码有效期 Password expiration timeout
密码失败次数 Maximum failed password attempts

设备管理器激活

1、创建 MyReceiver 类,必须继承DeviceAdminReceiver类

public class MyReceiver extends DeviceAdminReceiver {       
    @Override
    public void onEnabled(Context context, Intent intent) {
        //设备管理可用
    }

    @Override
    public void onDisabled(Context context, Intent intent) {
        //设备管理不可用
    }

    @Override
    public void onPasswordChanged(Context context, Intent intent) {     
    }
    ...
}

2、在AndroidManifest.xml

<receiver 
        android:name=".MyReceiver"
        android:label="用户可看的权限标题"
        android:description="用户可看的权限描述"
        android:permission="android.permission.BIND_DEVICE_ADMIN"> 
        必须拥有的权限,确保只有系统可以与DeviceAdminReceiver子类交互
    <meta-data
            android:name="android.app.device_admin"
            android:resource="@xml/device_xxx" />

    <intent-filter>
        <action android:name="android.app.action.DEVICE_ADMIN_ENABLED" />
        当用户启用设备管理员APP时,将DeviceAdminReceiver子类设置为接收器
    </intent-filter>        
</receiver>

3、在res/xml/device_xxx.xml
在xml中声明APP需要的设备管理策略,如密码,锁屏,擦除数据,加密等等

<device-admin xmlns:android="http://schemas.android.com/apk/res/android">
  <uses-policies>
    <limit-password />
    <watch-login />
    <reset-password />
    <force-lock />
    <wipe-data />
    <expire-password />
    <encrypted-storage />
    <disable-camera />
  </uses-policies>
</device-admin>

4、激活APP设备管理

ComponentName myReceiverName = new ComponentName(this,MyReceiver.class);    
Intent intent = new Intent(DevicePolicyManager.ACTION_ADD_DEVICE_ADMIN);    
intent.putExtra(DevicePolicyManager.EXTRA_DEVICE_ADMIN, myReceiverName);
intent.putExtra(DevicePolicyManager.EXTRA_ADD_EXPLANATION,"给用户介绍文字");

5、取消APP设备管理,卸载APP

DevicePolicyManager dpm = (DevicePolicyManager) getSystemService(DEVICE_POLICY_SERVICE);
ComponentName myReceiverName = new ComponentName(this,MyReceiver.class);
// 取消设备管理
dpm.removeActiveAdmin(myReceiverName);
// 卸载
Intent intent = new Intent();
intent.setAction("android.intent.action.VIEW");
intent.addCategory("android.intent.category.DEFAULT");
intent.setData(Uri.parse("package:"+getPackageName()));
startActivity(intent);

锁屏/禁用相机/擦除SD卡数据/恢复出厂

DevicePolicyManager dpm = (DevicePolicyManager) getSystemService(DEVICE_POLICY_SERVICE);
ComponentName myReceiverName = new ComponentName(this,MyReceiver.class);
// 2.锁屏/擦除数据/   
if(dpm.isAdminActive(myReceiverName)){  //是否激活APP设备管理
    // 立刻锁屏
    dpm.lockNow();
    // 设置自动锁屏,不活动时间
    dpm.setMaximumTimeToLock(myReceiverName, timeMs);
    // 重置锁屏密码       
    dpm.resetPassword("123456", 0);

    // 禁用相机
    dpm.setCameraDisabled(myReceiverName, false);

    // 擦除SD卡数据
    //dpm.wipeData(DevicePolicyManager.WIPE_EXTERNAL_STORAGE);

    // 恢复出厂
    //dpm.wipeData(0);
}else{
    Toast.makeText(this, "还没有激活APP设备管理", 0).show();
}

使用dpm激活设备管理器并防卸载

Usage :
usage: dpm [subcommand] [options]
usage: dpm set-device-owner
usage: dpm set-profile-owner <USER_ID>

dpm set-device-owner: Sets the given component as active admin, and its package as device owner.
dpm set-profile-owner: Sets the given component as active admin and profile owner for an existing user.

Example：