Some third-party apps (file managers) are able to access the vault in Obsidian's app specific folder

Bug reports
, , ,
1

Steps to reproduce

Install the app on Android, create an “app storage” vault.
Use any file manager or terminal app to access the vault, which is supposed to be private to the app.

Did you follow the troubleshooting guide? [Y/N]

yes

Expected result

The new vault is created in a folder which is not accessible by other apps.

Actual result

The vault is created under /storage/emulated/0/Android/data/md.obsidian/files/ which is accessible by any app with storage permission.

Environment

App version 1.8.10 on Android 11.

Additional information

According to this post, each app has a private folder under /data/data/ which is indeed only accessible by the owning app. That’s where the vault should go.

2

I can’t reproduce.

Let me double check this.

4

Renamed thread for clarity

The location we are using is correct and should be private to the app according to the Android docs, even for apps having the “All files permissions” (MANAGE_EXTERNAL_STORAGE).

I am aware that there were workaround in the past, from simple to sophisticated, to bypass this restriction. It has become more stringent in newer version of Android.

5

Thanks for looking into it.
From what I read the /sdcard/Android folder has been locked down from Android 11 onwards.
My phone still runs Android 10, hence the issue; it might be worth to mention this caveat though.