As far as I can tell, the SMS app doesnt need the mobileconnection permission. We should remove this as a hardening step if this permission isn't needed.
Really minor change (app owner to confirm that permission is no longer needed and then remove mobileconnection permission from manifest), but only a defence-in-depth, so not urgent. Nominating for koi.
blocking-b2g: --- → koi?
per comment 1: KOI+ since it's minor and coming from security team
blocking-b2g: koi? → koi+
Whiteboard: [u=commsapps-user c=messaging p=0]
Whiteboard: [u=commsapps-user c=messaging p=0] → [u=commsapps-user c=messaging p=0.5]
OS: Mac OS X → Gonk (Firefox OS)
Hardware: x86 → ARM
Summary: Remove mobileconnection permission from SMS app → [SMS] Remove mobileconnection permission
Comment on attachment 787487 [details] Pull Request Right, back then we were using it in error handling but now we get the error name from the mobile messaging API instead. r=me
Attachment #787487 - Flags: review?(felash) → review+
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.