914239 - Enable app debugging on device

Status: RESOLVED FIXED

(DevTools Graveyard :: WebIDE, defect)

Description

[Alexandre Poirot [:ochameau]]

For now, all recent devtool new features related to apps have been disabled by the pref "devtools.debugger.enable-content-actors". 
But thanks to bug 832000, and the usage of unix domain socket instead of TCP socket, apps can no longer query the remote debugger protocol and gain access to geater priviledges.
So we should be able to enable access to these new features once the developer turn the remote debugging setting on.

Having said that, there is still some corner cases, where these features would allow getting acccess to private data that you won't be able to access by using the app. Like being able to get passwords from the email app by attaching a debugger to it.

We should be able to flag apps that have been installed via the remote protocol and only allow to debug these apps. But in any case, we would need another setting for firefox os contributors in order to debug gaia apps.

We might also consider the existing "remote debugging" setting as being unsafe and do not overcomplexify it by various security details. I'm not sure the simple adb shell access is much more safe than giving access to app developer tools?

Comment 2

[Alexandre Poirot [:ochameau]]

Attachment: Remove devtools.debugger.enable-content-actors pref to enable app debugging by default

Comment 3

[Paul Rouget [:paul]]

Comment on attachment 802208 [details] [diff] [review]
Remove devtools.debugger.enable-content-actors pref to enable app debugging by default

Please only change the pref. We might need to turn this off again in the future.

Comment 4

[Alexandre Poirot [:ochameau]]

Attachment: Enable app debugging r=paul

Comment 5

[Paul Rouget [:paul]]

https://hg.mozilla.org/integration/fx-team/rev/6b98e5ee513b

Comment 6

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/6b98e5ee513b