Under Android, you can directly set a card in the system framework (/system/framework/framework-res.apk) to prevent the installation of the software, or you can directly delete the corresponding software with a process with root after installation (because you want to operate the /data partition) (do you find that clicking the notification bar of Ali box always prompts that a program is running and cannot be ended? That's right, it's not difficult for an android developer to write such a program in one week (only for Android 4.4 and below). The software list is obtained from a special server.

Now some hackers will modify the hosts file in the system, block the corresponding server domain name, and then cancel the root (to prevent the system from changing the host back), so that the software is not afraid of being deleted.

In fact, Ali Box's system is essentially an Android system, and its operation mode is not much different from that in the world.