Closed Bug 879199 Opened 9 years ago Closed 9 years ago

[SMS] Remove mobileconnection permission

Categories

(Firefox OS Graveyard :: Gaia::SMS, defect)

ARM
Gonk (Firefox OS)
defect
Not set
normal

Tracking

(blocking-b2g:koi+, b2g18 affected)

RESOLVED FIXED
blocking-b2g koi+
Tracking Status
b2g18 --- affected

People

(Reporter: pauljt, Assigned: borjasalguero)

References

Details

(Keywords: sec-want, Whiteboard: [u=commsapps-user c=messaging p=0.5])

Attachments

(1 file)

As far as I can tell, the SMS app doesnt need the mobileconnection permission. We should remove this as a hardening step if this permission isn't needed.
Really minor change (app owner to confirm that permission is no longer needed and then remove mobileconnection permission from manifest), but only a defence-in-depth, so not urgent. Nominating for koi.
blocking-b2g: --- → koi?
per comment 1: KOI+ since it's minor and coming from security team
blocking-b2g: koi? → koi+
Whiteboard: [u=commsapps-user c=messaging p=0]
Assignee: nobody → fbsc
Whiteboard: [u=commsapps-user c=messaging p=0] → [u=commsapps-user c=messaging p=0.5]
OS: Mac OS X → Gonk (Firefox OS)
Hardware: x86 → ARM
Attached file Pull Request
Attachment #787487 - Flags: review?(felash)
Summary: Remove mobileconnection permission from SMS app → [SMS] Remove mobileconnection permission
Comment on attachment 787487 [details]
Pull Request

Right, back then we were using it in error handling but now we get the error name from the mobile messaging API instead.

r=me
Attachment #787487 - Flags: review?(felash) → review+
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.