Closed Bug 843388 Opened 13 years ago Closed 8 years ago

Enhance rilproxy security

Categories

(Firefox OS Graveyard :: General, defect)

Product:
Firefox OS Graveyard
Component:
General
Platform:
ARM
Gonk (Firefox OS)
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: psiddh, Unassigned)

References

Details

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:16.0) Gecko/20100101 Firefox/16.0 Build ID: 20121006022900 Steps to reproduce: Follow up to the bug : https://bugzilla.mozilla.org/show_bug.cgi?id=812394. Actual results: 'rilproxy' , processes the messages on its end-point (socket ). Though it is done by Gecko process on the other end point, there is a need to add the checks in 'rilproxy' Expected results: There is a need to add explicit check in 'rilproxy' to only honor messages coming from gecko / phone process and no one else. Currently android rildaemon does an explicit check so that rild socket only receives messages from 'phone' process ONLY. Also rilproxy after the fix for #812394, need not start itself as 'root' user any longer. It can be 'radio' user itself.
OS: All → Gonk (Firefox OS)
Hardware: All → ARM
> Also rilproxy after the fix for #812394, need not start itself as 'root' > user any longer. It can be 'radio' user itself. See bug 1121986.
See Also: → 1121986
Firefox OS is not being worked on
Status: UNCONFIRMED → RESOLVED
Closed: 8 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.