Cannot disable a protected package: cloud.shelly.stargate

[wagnst]

adb shell pm disable cloud.shelly.stargate on a wall display X1i

results in

Exception occurred while executing 'disable':
java.lang.SecurityException: Cannot disable a protected package: cloud.shelly.stargate
	at com.android.server.pm.PackageManagerService.setEnabledSetting(PackageManagerService.java:21213)
	at com.android.server.pm.PackageManagerService.setApplicationEnabledSetting(PackageManagerService.java:21041)
	at com.android.server.pm.PackageManagerShellCommand.runSetEnabledSetting(PackageManagerShellCommand.java:2164)
	at com.android.server.pm.PackageManagerShellCommand.onCommand(PackageManagerShellCommand.java:233)
	at android.os.BasicShellCommandHandler.exec(BasicShellCommandHandler.java:98)
	at android.os.ShellCommand.exec(ShellCommand.java:44)
	at com.android.server.pm.PackageManagerService.onShellCommand(PackageManagerService.java:21861)
	at android.os.Binder.shellCommand(Binder.java:929)
	at android.os.Binder.onTransact(Binder.java:813)
	at android.content.pm.IPackageManager$Stub.onTransact(IPackageManager.java:4679)
	at com.android.server.pm.PackageManagerService.onTransact(PackageManagerService.java:4336)
	at android.os.Binder.execTransactInternal(Binder.java:1159)
	at android.os.Binder.execTransact(Binder.java:1123)

[wagnst]

also this is happening

tools/install-privapp.sh ~/Downloads/ShellyElevateV2-3.26170.1325.apk

note: in-app self update needs this apk to share the signing key of future releases
adbd cannot run as root in production builds
mount: '/dev/block/dm-0' not user mountable in fstab

[wagnst]

seems to be the same as if in #85

[WiesiDeluxe]

Workaround for production builds where pm disable is refused: keep the
stock app running and just revoke its overlay permission, which the
shell can do without root:

adb shell appops set cloud.shelly.stargate SYSTEM_ALERT_WINDOW deny
adb shell am force-stop cloud.shelly.stargate

Verified on a Wall Display XL (BLAKE, Android 11, uid 1000 stock app):
the stock overlays (corner buttons, edge gesture strips) stop appearing,
appops shows rejectTime after reboot, and the stock app keeps serving
the Shelly RPC on port 80 so the native HA integration stays alive.
Reversible with appops set ... allow.