How to restrict applications from applying for unnecessary permissions?

There are several ways to control permissions: 1. Third party applications. In other words, the use threshold of XX mobile assistants such as LBE and 360 is the lowest, but the disadvantage is that the options provided are relatively simple, and the efficiency is obviously stuck in the old machine. The reliability of these software publishers is debatable. 2. Forcibly revoke the application permission. Including the modification of apk file and the authority management of CM system. The efficiency is the highest, but some applications don't buy this set, and they flash back after modification. It is estimated that the integrity of permissions will be checked (despised) at startup. 3. The XPrivacy recommended here runs directly from the virtual machine level based on the Xposed framework. I don't know the specific principle, but what is certain is that the efficiency is higher than the first type of application. The greater advantage lies in the extremely rich specific options, precise control of each right, and the use of forged data and other methods to ensure the stable operation of the application. The most important thing is that it is completely open source and has higher security. However, there is a certain threshold for use. It is recommended to have at least a basic understanding of Android before using it.