com.samsung.android.container Copy

Labelled "ContainerService" and made by Samsung, this is one of the smallest packages on a Galaxy device, between roughly 17 KB and 25 KB in the builds recorded here, with no launcher icon and nothing a user opens. Samsung does not publish documentation for it, so what follows is read from its declared permissions and from the site's own data rather than from a vendor description, and no disable rating is given for that reason. The name invites the assumption that this is the Knox container, and that assumption is worth resisting. Its declared permissions include Android's ASEC volume permissions, which the platform manifest defines as hidden signature-level permissions covering access to ASEC calls and the creation, destruction and mounting or unmounting of ASEC volumes, together with cache filesystem access and the ability to work across users. That points towards ASEC volume handling, a platform storage mechanism, rather than towards Knox management, although declared permissions do not establish the package's complete role. Samsung's Knox work-profile component is a different package and is documented separately on this site. For Android Enterprise, EMM and kiosk use, no public Samsung enrolment, policy or configuration reference for this package was found for this note, and it exposes nothing an administrator sets. Because it is a signature-level platform helper that other components may call, the sensible handling is to leave it alone rather than to trim it. Version note: its version string appears to track the Android release rather than a product version of its own. Samsung's 2021 application list for the Galaxy S21+ records it as version 11 on Android 11, and the builds seen here are reported as versions 12 through 17 on the matching releases, so its observed version string tracks the Android release. Whether its function changed as Android's own container storage evolved could not be sourced, and is flagged here as an open question rather than answered.

• ASEC permission definitions - core/res/AndroidManifest.xml, Android (frameworks/base) source →
• Galaxy S21+ 5G (G996N) Application List - Samsung Knox CC Mode documentation →
• Package provenance for com.samsung.android.container - Android System App Database →

• Signed by the device maker's own signing key (Samsung), so it is an OEM preinstall, but 2 different certificates appear across the fleet, so OEMs ship their own builds of it. It also signs the Android framework, so it is a platform-level key on its device(s). Inferred from the certificate appearing only on Samsung devices (508 packages, 10196 observations).
• Its largest observed manifest declares 8 permissions: 7 signature or system-level and 1 install-time. The signature/system share marks it as a privileged component, not an ordinary app.
• Never reported as user-facing, so it runs as a background or system component rather than an app the user opens.