# MDM Telecom SAFE — Xiaomi HyperOS + Motorola
# Opcao futura na ferramenta: "mdm Telecom"
# Congela carrier/MDM/STK/OMADM permanente (suspend-first).
# NUNCA toca com.android.server.telecom (chamadas) / IMS / Play Store / SystemUI.
# Validado Redmi 2510DRA23L (spinel) Android 16 HyperOS OS3 — 2026-07-25

shell pm enable --user 0 com.android.vending
shell cmd package unsuspend com.android.vending

# ===== GARANTIA: motor de chamadas LIVRE =====
shell pm enable --user 0 com.android.server.telecom
shell cmd package unsuspend com.android.server.telecom
shell pm enable --user 0 com.android.phone
shell cmd package unsuspend com.android.phone

# ===== OTA (mantem congelado) =====
shell am force-stop com.android.updater
shell cmd package suspend com.android.updater
shell cmd jobscheduler cancel -u 0 com.android.updater
shell cmd appops set --user 0 com.android.updater RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.android.updater RUN_ANY_IN_BACKGROUND deny
shell cmd appops set --user 0 com.android.updater POST_NOTIFICATION deny
shell cmd appops set --user 0 com.android.updater START_FOREGROUND deny
shell cmd netpolicy set restrict-background true com.android.updater

shell am force-stop com.xiaomi.mipicks
shell cmd package suspend com.xiaomi.mipicks
shell cmd appops set --user 0 com.xiaomi.mipicks POST_NOTIFICATION deny
shell cmd netpolicy set restrict-background true com.xiaomi.mipicks

shell am force-stop com.xiaomi.discover
shell cmd package suspend com.xiaomi.discover
shell cmd netpolicy set restrict-background true com.xiaomi.discover

shell am force-stop com.google.android.configupdater
shell cmd package suspend com.google.android.configupdater
shell cmd netpolicy set restrict-background true com.google.android.configupdater

# ===== XIAOMI / MTK — MDM Telecom (carrier/MDM/STK) =====
shell am force-stop com.mediatek.mdmconfig
shell cmd package suspend com.mediatek.mdmconfig
shell cmd jobscheduler cancel -u 0 com.mediatek.mdmconfig
shell cmd appops set --user 0 com.mediatek.mdmconfig RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.mediatek.mdmconfig RUN_ANY_IN_BACKGROUND deny
shell cmd appops set --user 0 com.mediatek.mdmconfig POST_NOTIFICATION deny
shell cmd appops set --user 0 com.mediatek.mdmconfig START_FOREGROUND deny
shell cmd appops set --user 0 com.mediatek.mdmconfig WAKE_LOCK deny
shell cmd netpolicy set restrict-background true com.mediatek.mdmconfig

shell am force-stop com.mediatek.mdmlsample
shell cmd package suspend com.mediatek.mdmlsample
shell cmd appops set --user 0 com.mediatek.mdmlsample RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.mediatek.mdmlsample POST_NOTIFICATION deny
shell cmd netpolicy set restrict-background true com.mediatek.mdmlsample

shell am force-stop com.android.carrierconfig
shell cmd package suspend com.android.carrierconfig
shell cmd jobscheduler cancel -u 0 com.android.carrierconfig
shell cmd appops set --user 0 com.android.carrierconfig RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.android.carrierconfig POST_NOTIFICATION deny
shell cmd netpolicy set restrict-background true com.android.carrierconfig

shell am force-stop com.android.carrierconfig.overlay.miui
shell cmd package suspend com.android.carrierconfig.overlay.miui

shell am force-stop com.miui.phone.carriers.overlay.vodafone
shell cmd package suspend com.miui.phone.carriers.overlay.vodafone
shell am force-stop com.miui.phone.carriers.overlay.h3g
shell cmd package suspend com.miui.phone.carriers.overlay.h3g
shell am force-stop com.miui.systemui.carriers.overlay
shell cmd package suspend com.miui.systemui.carriers.overlay

shell am force-stop com.android.stk
shell cmd package suspend com.android.stk
shell cmd jobscheduler cancel -u 0 com.android.stk
shell cmd appops set --user 0 com.android.stk RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.android.stk POST_NOTIFICATION deny
shell cmd appops set --user 0 com.android.stk START_FOREGROUND deny
shell cmd netpolicy set restrict-background true com.android.stk
shell am force-stop com.android.stk.overlay.miui
shell cmd package suspend com.android.stk.overlay.miui

shell am force-stop com.android.managedprovisioning
shell cmd package suspend com.android.managedprovisioning
shell cmd appops set --user 0 com.android.managedprovisioning RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.android.managedprovisioning POST_NOTIFICATION deny
shell cmd appops set --user 0 com.android.managedprovisioning START_FOREGROUND deny
shell cmd netpolicy set restrict-background true com.android.managedprovisioning
shell cmd package suspend com.android.managedprovisioning.overlay

shell am force-stop com.miui.guardprovider
shell cmd package suspend com.miui.guardprovider
shell cmd appops set --user 0 com.miui.guardprovider POST_NOTIFICATION deny
shell cmd appops set --user 0 com.miui.guardprovider RUN_IN_BACKGROUND deny
shell cmd netpolicy set restrict-background true com.miui.guardprovider

shell am force-stop com.android.imsserviceentitlement
shell cmd package suspend com.android.imsserviceentitlement
shell cmd appops set --user 0 com.android.imsserviceentitlement POST_NOTIFICATION deny

# Financeira Google / Trustonic — MORTA (sem net, sem boot, limpa estado; nao so suspend)
shell am force-stop com.google.android.devicelockcontroller
shell am kill com.google.android.devicelockcontroller
shell cmd package suspend com.google.android.devicelockcontroller
shell cmd package suspend --user 0 com.google.android.devicelockcontroller
shell cmd jobscheduler cancel -u 0 com.google.android.devicelockcontroller
shell cmd activity set-inactive com.google.android.devicelockcontroller true
shell pm clear --user 0 com.google.android.devicelockcontroller
shell cmd appops set --user 0 com.google.android.devicelockcontroller INTERNET deny
shell cmd appops set --user 0 com.google.android.devicelockcontroller RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.google.android.devicelockcontroller RUN_ANY_IN_BACKGROUND deny
shell cmd appops set --user 0 com.google.android.devicelockcontroller POST_NOTIFICATION deny
shell cmd appops set --user 0 com.google.android.devicelockcontroller START_FOREGROUND deny
shell cmd appops set --user 0 com.google.android.devicelockcontroller BIND_DEVICE_ADMIN deny
shell cmd appops set --user 0 com.google.android.devicelockcontroller MANAGE_DEVICE_ADMINS deny
shell cmd appops set --user 0 com.google.android.devicelockcontroller CHANGE_COMPONENT_ENABLED_STATE deny
shell cmd appops set --user 0 com.google.android.devicelockcontroller WAKE_LOCK deny
shell cmd netpolicy set restrict-background true com.google.android.devicelockcontroller
shell pm disable-user --user 0 com.google.android.devicelockcontroller/.receivers.LockedBootCompletedReceiver
shell pm disable-user --user 0 com.google.android.devicelockcontroller/.receivers.CheckInBootCompletedReceiver
shell pm disable-user --user 0 com.google.android.devicelockcontroller/.receivers.LockTaskBootCompletedReceiver
shell am force-stop com.android.devicelockcontroller
shell cmd package suspend com.android.devicelockcontroller
shell cmd package suspend --user 0 com.android.devicelockcontroller
shell pm clear --user 0 com.android.devicelockcontroller
shell cmd appops set --user 0 com.android.devicelockcontroller INTERNET deny
shell cmd appops set --user 0 com.android.devicelockcontroller RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.android.devicelockcontroller RUN_ANY_IN_BACKGROUND deny
shell cmd package suspend com.google.android.overlay.devicelockcontroller
shell pm disable-user --user 0 com.google.android.overlay.devicelockcontroller
shell pm uninstall -k --user 0 com.google.android.overlay.devicelockcontroller
shell am force-stop com.trustonic.telecoms.client
shell cmd package suspend com.trustonic.telecoms.client
shell pm disable-user --user 0 com.trustonic.telecoms.client
shell pm uninstall -k --user 0 com.trustonic.telecoms.client
shell cmd appops set --user 0 com.trustonic.telecoms.client INTERNET deny
shell am force-stop com.trustonic.telecoms.standard.dlc
shell cmd package suspend com.trustonic.telecoms.standard.dlc
shell pm disable-user --user 0 com.trustonic.telecoms.standard.dlc
shell pm uninstall -k --user 0 com.trustonic.telecoms.standard.dlc
shell cmd appops set --user 0 com.trustonic.telecoms.standard.dlc INTERNET deny
shell am force-stop com.trustonic.telecoms
shell cmd package suspend com.trustonic.telecoms
shell pm uninstall -k --user 0 com.trustonic.telecoms
shell am force-stop com.xiaomi.trustservice
shell cmd package suspend com.xiaomi.trustservice
shell pm disable-user --user 0 com.xiaomi.trustservice
shell cmd appops set --user 0 com.xiaomi.trustservice INTERNET deny
shell pm uninstall -k --user 0 com.google.android.gms.supervision
shell settings put secure familia_finance_frozen_permanent 1
shell settings put secure familia_finance_never_relock 1
shell settings put secure familia_finance_dead 1
shell settings put secure familia_finance_never_bother 1
shell settings put secure familia_hyperos_finance_safe 1

# Ruido Xiaomi
shell am force-stop com.miui.analytics
shell cmd package suspend com.miui.analytics
shell am force-stop com.miui.msa.global
shell cmd package suspend com.miui.msa.global
shell am force-stop com.xiaomi.glgm
shell cmd package suspend com.xiaomi.glgm
shell am force-stop com.xiaomi.payment
shell cmd package suspend com.xiaomi.payment
shell cmd appops set --user 0 com.xiaomi.payment POST_NOTIFICATION deny

# ===== MOTOROLA — MDM Telecom (se existir no aparelho) =====
shell am force-stop com.motorola.ccc.ota
shell cmd package suspend com.motorola.ccc.ota
shell cmd appops set --user 0 com.motorola.ccc.ota RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.motorola.ccc.ota POST_NOTIFICATION deny
shell cmd netpolicy set restrict-background true com.motorola.ccc.ota
shell am force-stop com.motorola.ccc.notification
shell cmd package suspend com.motorola.ccc.notification
shell cmd appops set --user 0 com.motorola.ccc.notification POST_NOTIFICATION deny
shell am force-stop com.motorola.android.provisioning
shell cmd package suspend com.motorola.android.provisioning
shell am force-stop com.motorola.omadm
shell cmd package suspend com.motorola.omadm
shell am force-stop com.motorola.genie
shell cmd package suspend com.motorola.genie
shell am force-stop com.motorola.systemupdate
shell cmd package suspend com.motorola.systemupdate
shell am force-stop com.motorola.motocare
shell cmd package suspend com.motorola.motocare
shell am force-stop com.motorola.brapps
shell cmd package suspend com.motorola.brapps
shell am force-stop com.motorola.demo
shell cmd package suspend com.motorola.demo
shell am force-stop com.motorola.carrierconfig
shell cmd package suspend com.motorola.carrierconfig
shell am force-stop com.wssyncmldm
shell cmd package suspend com.wssyncmldm

# ===== SELAR ESSENCIAIS =====
shell pm enable --user 0 com.android.vending
shell cmd package unsuspend com.android.vending
shell pm enable --user 0 com.android.server.telecom
shell cmd package unsuspend com.android.server.telecom
shell pm enable --user 0 com.android.phone
shell cmd package unsuspend com.android.phone
shell pm enable --user 0 com.mediatek.ims
shell cmd package unsuspend com.mediatek.ims
shell am force-stop com.android.updater
shell am force-stop com.mediatek.mdmconfig
shell am force-stop com.android.stk
shell am force-stop com.google.android.devicelockcontroller
