Xposed Modules

DuckDevicePolicy

Makes apps see no device-policy restrictions on your own device — DevicePolicyManager / UserManager checks answered "no restriction", per category, behind a master toggle. Formerly DuckPolicy, same package, so it updates in place and keeps your settings and scope.

DuckDevicePolicy

Needs an LSPosed 2.x fork (Xposed API 101+). Mainline 1.9.x will not load it.

Scope matters. Tick every framework entry your manager offers — android, system, system_server. They disagree about which one actually reaches system_server, and the wrong one silently does nothing. That covers the device-wide categories: app install / uninstall, developer options, device-owner spoof. The target app for everything else, including the device-owner checks Google Photos reads for Locked Folder. Never scope Intune / Company Portal / Authenticator.

Not working? The LSPosed log has installed N/M hooks in <process>, which names anything that did not resolve, and first hit: <category> ... the first time one fires. Quote both when reporting.

Source & issues: https://github.com/Bouteillepleine/DuckDevicePolicy · fork of liyafe1997/FuckDevicePolicy.

简体中文

让 App 在你自己的设备上看到「没有任何设备策略限制」，按类别挂钩 DevicePolicyManager / UserManager 的检查并返回「无限制」，带总开关。 原名 DuckPolicy，包名不变，可直接覆盖升级。需要 LSPosed 2.x 分支（Xposed API 101+）。

作用域决定能否生效：请把管理器提供的所有框架条目都勾上——android、system、 system_server，不同管理器对「哪一个真正进入 system_server」并不一致，勾错的那个不会有任何效果。 它们对应全设备类别（应用安装/卸载、开发者选项、设备所有者伪装）；目标应用 用于其余类别， 包括 Google 相册锁定文件夹读取的「设备所有者 / 完全托管检查」。 请勿将 Intune / 公司门户 / Authenticator 加入作用域。

反馈问题时请附上 LSPosed 日志中的 installed N/M hooks in <进程> 与 first hit: 两行。

Releases

15-4.10

Stable

10/13/2026, 9:24:13 PM

Do not tick the android scope entry. Since 4.8 it hooks nothing, and it has been reported to stop Zygisk loading. Tick only the system_server entry — your manager calls it system or system_server. It is no longer in the Recommended list.

Running your own device-owner app (OwnDroid and friends)? Add it under Device-owner spoof exempt apps on the Categories tab, or it will be told it is not the owner of the device.

Reported by @MootComb.

Full changelog: https://assets.lsposed.org/raw/Bouteillepleine/DuckDevicePolicy/main/CHANGELOG.md?sign=98ecc43f7eea0a2a6147f58960755d02&t=6a03bf00

Assets

1

4.1

Stable

9/23/2026, 8:25:13 AM

Restores sideloading APKs from normal apps (Telegram, browsers, file managers) when a work profile or MDM blocks it, and the developer-options / USB-debugging block.

Two new categories, both on by default, hook com.android.server.pm.UserManagerService inside system_server rather than only the client-side android.os.UserManager wrapper — the service is where the refusal is actually decided, including in the package-installer process the module is not scoped into.

Requires System Framework (android) scope for those two categories. Settings and scope carry over from 4.0.

Full changelog: https://assets.lsposed.org/raw/Bouteillepleine/FuckDevicePolicy/main/CHANGELOG.md?sign=abf9985286f8466d18127aa0d806dd12&t=6a03bf00

Assets

1