Closed Bug 1218661 Opened 9 years ago Closed 6 years ago

NSec package's permission is not isolated

Categories

(Firefox OS Graveyard :: Infrastructure, defect)

Product:
Firefox OS Graveyard
Component:
Infrastructure
Platform:
ARM
Gonk (Firefox OS)
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: mlien, Unassigned)

References

Details

[Blocking Requested - why for this release]:

[Description]
Navigate to two packages but use same permission, it won't isolated

[Reproduce Steps]
1. Enable two preferences "network.http.enable-packaged-apps" and "network.http.signed-packages.enabled"
2. Set "network.http.signed-packages.trusted-root" to "http://people.mozilla.org/~mlien/"
3. Navigate to "http://people.mozilla.org/~mlien/geoloc.pak!//index.html" in Browser app
4. Choose share location from prompt confirmation page
5. Navigate to "http://people.mozilla.org/~mlien/uitest_privileged.pak!//index.html"
6. Tap Geolocation -> Find Location

[Expected Result]
Confirmation page should prompt again

[Actual Result]
It will use another package's setting

[Build Information]
Build ID               20151025090221
Gaia Revision          1c6628ed1e40575e5ec3669ab6ef389d4ebeea65
Gaia Date              2015-10-23 17:01:43
Gecko Revision         https://hg.mozilla.org/mozilla-central/rev/d53a52b39a95dced722cca90ac74529b66dd5253
Gecko Version          44.0a1
Device Name            aries
Firmware(Release)      4.4.2
Firmware(Incremental)  eng.worker.20151025.082115
Firmware Date          Sun Oct 25 08:21:23 UTC 2015
Bootloader             s1

[Reproduce Rate]
100%
We need 1178526 to land for this to work as expected.
blocking-b2g: 2.5? → ---
Depends on: 1178526
QA Whiteboard: [COM=NSec]
verify again with the latest build, even bug 1178526 is fixed but the permission between two signed packages still not isolated

Build Information:
Build ID               20151118043538
Gaia Revision          28d63cf3bdc4417f7ad8cab2230f096bf9f6d3b5
Gaia Date              2015-11-17 07:35:12
Gecko Revision         https://hg.mozilla.org/mozilla-central/rev/eb3016abd37db2e6a6d923265047e84b12c0af61
Gecko Version          45.0a1
Device Name            aries
Firmware(Release)      4.4.2
Firmware(Incremental)  eng.worker.20151118.035413
Firmware Date          Wed Nov 18 03:54:21 UTC 2015
Bootloader             s1
Firefox OS is not being worked on
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.