Data Isolation Support is a security enhancement module developed by @Harumi that backports native /data/data application storage isolation to legacy Android versions (Android 10 and lower), preventing unauthorized inter-app data sniffing via dynamic mount namespaces.
Storage Sandboxing for Legacy Android
Enforce strict per-application data privacy and sandbox boundaries on Android 7.0 through Android 10.
Private Directory Isolation
Isolates the /data/data path so each running application can only see and access its own assigned private package directory.
Process Monitor Integration
Leverages HuskyDG's magisk_proc_monitor to track application spawns and dynamically unmount global private paths in real time.
Legacy OS Hardening
Brings modern Android 11+ storage isolation standards to older firmware releases including Android Nougat (7.x), Pie (9.0), and Q (10.0).
How It Works & Verification
In Android 10 and older versions, apps could potentially query paths inside /data/data/ to detect installed packages or inspect private caches. This module hooks into the system process lifecycle to isolate mount namespaces per UID at runtime.
You can verify that the sandbox is active by running a stat check inside a non-root terminal session:
