Closed
Bug 879199
Opened 11 years ago
Closed 11 years ago
[SMS] Remove mobileconnection permission
Categories
(Firefox OS Graveyard :: Gaia::SMS, defect)
Tracking
(blocking-b2g:koi+, b2g18 affected)
People
(Reporter: pauljt, Assigned: borjasalguero)
References
Details
(Keywords: sec-want, Whiteboard: [u=commsapps-user c=messaging p=0.5])
Attachments
(1 file)
As far as I can tell, the SMS app doesnt need the mobileconnection permission. We should remove this as a hardening step if this permission isn't needed.
|
Reporter | |
Comment 1•11 years ago
|
||
Really minor change (app owner to confirm that permission is no longer needed and then remove mobileconnection permission from manifest), but only a defence-in-depth, so not urgent. Nominating for koi.
blocking-b2g: --- → koi?
|
||
Comment 2•11 years ago
|
||
per comment 1: KOI+ since it's minor and coming from security team
blocking-b2g: koi? → koi+
|
|
||
Updated•11 years ago
|
Whiteboard: [u=commsapps-user c=messaging p=0]
|
Assignee | |
Updated•11 years ago
|
Assignee: nobody → fbsc
|
|
Assignee | |
Updated•11 years ago
|
Whiteboard: [u=commsapps-user c=messaging p=0] → [u=commsapps-user c=messaging p=0.5]
|
|
Assignee | |
Updated•11 years ago
|
OS: Mac OS X → Gonk (Firefox OS)
Hardware: x86 → ARM
|
|
Assignee | |
Comment 3•11 years ago
|
||
Attachment #787487 -
Flags: review?(felash)
|
|
Assignee | |
Updated•11 years ago
|
Summary: Remove mobileconnection permission from SMS app → [SMS] Remove mobileconnection permission
|
||
Comment 4•11 years ago
|
||
Comment on attachment 787487 [details]
Pull Request
Right, back then we were using it in error handling but now we get the error name from the mobile messaging API instead.
r=me
Attachment #787487 -
Flags: review?(felash) → review+
|
|
Assignee | |
Comment 5•11 years ago
|
||
https://github.com/mozilla-b2g/gaia/commit/87d2327072c64899352c3ee4ff457605111c2fae https://github.com/borjasalguero/gaia/commit/ad5014ac7d3e89999d7e4a0210c681e0939a6e8d R+. Merged!
|
|
Assignee | |
Updated•11 years ago
|
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•