T-UI Linux CLI Launcher

Updated for compatibility with modern Android versions (API 34+) and enhanced with security hardening.

🚀 Recent Changes & Modernization

These updates ensure the launcher remains functional, secure, and performant on modern Android devices (Android 11 through Android 14+).

Pro Tip: On the very first install, if background transparency does not take effect immediately, simply type \restart\ in the terminal and press enter.

⌨️ New Commands

• username [user] [device]: Instantly customize your terminal prompt. Changes both the username and device name and reloads the UI to apply.
• theme -preset [name]: Rapidly switch between high-quality pre-configured themes.

• bbman: The new BusyBox manager for installing and verifying Linux binaries.

✨ Enhanced Features

• Built-in BusyBox Manager: Gain access to 300+ Linux commands (ls, grep, awk, top, etc.) via the new bbman -install command.
• Theme Preset Shortcut Buttons: Enhanced the theme -preset command to show interactive shortcut buttons for presets.
• Synchronized Theme UI: Applying a preset now automatically colors the shortcut buttons (suggestions) to match the overall theme.
• One-Tap Application: Shortcut buttons for theme presets execute immediately upon clicking.

🐧 BusyBox Integration

To enable a full Linux environment, you can install BusyBox directly from the launcher:

• Type bbman -install in the terminal.
• The launcher will automatically detect your architecture, download the verified binary, and check its integrity.
• Once finished, you can run any Linux command directly (e.g., ls, ping, vi).
• To remove it at any time, use bbman -remove.

🛠 Modern Build System

• Target SDK: Updated to API 34 (Android 14).
• Min SDK: API 21 (Android 5.0).
• AndroidX Migration: Fully migrated from legacy Support Libraries to AndroidX.
• Gradle & AGP: Updated to Gradle 8.2 and Android Gradle Plugin 8.2.0.
• Java Compatibility: Built with Java 17 support.

🛡 Security Hardening (OWASP MASVS Compliance)

This project has been audited and hardened following the OWASP Mobile Application Security Verification Standard (MASVS).

📦 MASVS-STORAGE: Data Storage and Privacy

• Scoped Storage Implementation: All application data has been moved from public external storage (/sdcard/t-ui/) to secure, app-private Scoped Storage (Context.getExternalFilesDir()). This prevents other applications from accessing your T-UI configuration and logs.
• Backup Protection: android:allowBackup is set to false to prevent sensitive data extraction via ADB backups (MASVS-STORAGE-1).
• Secure File Sharing: Uses FileProvider for secure, permission-based file sharing instead of vulnerable file:// URIs.

🌐 MASVS-NETWORK: Network Communication

• Enforced TLS: android:usesCleartextTraffic is disabled globally. All network communications are forced over HTTPS (TLS 1.2+).
• Hardened Service Endpoints: Internal services (Weather API, Connectivity checks) have been upgraded to secure HTTPS endpoints (MASVS-NETWORK-1).

⚙️ MASVS-PLATFORM: Platform Interaction

• Signature-Level Protection: Implemented a custom permission ohi.andre.consolelauncher.permission.RECEIVE_CMD with protecti. This ensures only apps signed with the same developer key can programmatically send commands to the launcher.
• Intent Security: All system-bound PendingIntents use the FLAG_IMMUTABLE flag to prevent intent redirection attacks (Android 12+ requirement).
• Receiver Security: All Broadcast Receivers are registered with appropriate export flags (RECEIVEREXPORTED or RECEIVERNOT_EXPORTED) to prevent unauthorized external triggers.

🛠 MASVS-CODE: Code Quality & Build Settings

• Minification & Obfuscation: Release builds have R8/Proguard enabled (minifyEnabled true) to shrink resources and obfuscate code, making reverse engineering more difficult (MASVS-RESILIENCE-1).
• Foreground Service Security: Updated to comply with Android 14's strict foreground service types (specialUse, mediaPlayback).

🔗 Useful links

Official community  -->     Reddit
Official Group           -->     Telegram
Wiki                             -->     GitHub.com

📚 Open Source Libraries

• CompareString2
• OkHttp
• HTML cleaner
• JsonPath
• jsoup