[SMS] Remove mobileconnection permission

RESOLVED FIXED

Status

RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: pauljt, Assigned: borjasalguero)

Tracking

({sec-want})

unspecified
ARM
Gonk (Firefox OS)
sec-want

Firefox Tracking Flags

(blocking-b2g:koi+, b2g18 affected)

Details

(Whiteboard: [u=commsapps-user c=messaging p=0.5])

Attachments

(1 attachment)

(Reporter)

Description

5 years ago
As far as I can tell, the SMS app doesnt need the mobileconnection permission. We should remove this as a hardening step if this permission isn't needed.
(Reporter)

Comment 1

5 years ago
Really minor change (app owner to confirm that permission is no longer needed and then remove mobileconnection permission from manifest), but only a defence-in-depth, so not urgent. Nominating for koi.
blocking-b2g: --- → koi?
per comment 1: KOI+ since it's minor and coming from security team
blocking-b2g: koi? → koi+
Whiteboard: [u=commsapps-user c=messaging p=0]
(Assignee)

Updated

5 years ago
Assignee: nobody → fbsc
(Assignee)

Updated

5 years ago
Whiteboard: [u=commsapps-user c=messaging p=0] → [u=commsapps-user c=messaging p=0.5]
(Assignee)

Updated

5 years ago
OS: Mac OS X → Gonk (Firefox OS)
Hardware: x86 → ARM
(Assignee)

Comment 3

5 years ago
Created attachment 787487 [details]
Pull Request
Attachment #787487 - Flags: review?(felash)
(Assignee)

Updated

5 years ago
Summary: Remove mobileconnection permission from SMS app → [SMS] Remove mobileconnection permission
Comment on attachment 787487 [details]
Pull Request

Right, back then we were using it in error handling but now we get the error name from the mobile messaging API instead.

r=me
Attachment #787487 - Flags: review?(felash) → review+
(Assignee)

Updated

5 years ago
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.