811571 - Don't allow applications without appropriate permissions to receive telephony and SMS system messages

Status: RESOLVED DUPLICATE of bug 805655

(Firefox OS Graveyard :: General, defect)

Description

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Currently we broadcast a number of telephony and SMS related system messages.

Additionally, we currently don't have any security checks regarding which apps can subscribe to what system message. This means that even non-reviewed unprivileged apps can subscribe to arbitrary system messages.

We need to fix.

I suggest that we create a mapping of system messages to permission. I.e. we require that "telephony" access is required for all telephony system messages, and that "sms" is required for all SMS related system messages.

Alternatively we stop broadcasting these messages and send them directly to the built-in telephony and SMS apps. However philikon has been reluctant to that.