Join GitHub today
GitHub is home to over 20 million developers working together to host and review code, manage projects, and build software together.
support toggling the INTERNET permission off and on #128
Comments
thestinger
added
the
Type: enhancement
label
Dec 31, 2015
thestinger
changed the title from
allow revoking the network permission
to
support revoking the network permission
Dec 31, 2015
thestinger
changed the title from
support revoking the network permission
to
support toggling the network permission off and on
Dec 31, 2015
thestinger
added
project
Language: Java
labels
Jun 14, 2016
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
Show comment Hide comment
eighthave
Aug 12, 2016
The problem with the network permission is that there are ways around it. I think this still applies in Android: https://threatpost.com/android-application-allows-remote-access-no-permissions-required-122011/76017/
I think that's why Google is granting the network permission automatically these days.
eighthave
commented
Aug 12, 2016
|
The problem with the network permission is that there are ways around it. I think this still applies in Android: https://threatpost.com/android-application-allows-remote-access-no-permissions-required-122011/76017/ I think that's why Google is granting the network permission automatically these days. |
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
Show comment Hide comment
thestinger
Aug 12, 2016
Contributor
@eighthave There aren't any details there. Google doesn't grant it automatically. They only stopped marking it as a dangerous permission. They did that because then it wouldn't be enabled by default for the new API levels rather than simply being listed on installation. Every app would need to learn to check for it and request it from the user. It would be too painful for users and developers.
|
@eighthave There aren't any details there. Google doesn't grant it automatically. They only stopped marking it as a dangerous permission. They did that because then it wouldn't be enabled by default for the new API levels rather than simply being listed on installation. Every app would need to learn to check for it and request it from the user. It would be too painful for users and developers. |
thestinger
referenced this issue
Aug 21, 2016
Closed
Where to push a modified kernel image before calling release.sh #373
thestinger
referenced this issue
Dec 20, 2016
Closed
add a gui to set iptables rules per-app, per-connection type, per-user #274
thestinger
added
the
Priority: high
label
Jun 11, 2017
thestinger
changed the title from
support toggling the network permission off and on
to
support toggling the INTERNET permission off and on
Jul 21, 2017
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
Show comment Hide comment|
This is now implemented. |
thestinger commentedDec 31, 2015
•
edited
Edited 1 time
-
thestinger
edited Jun 14, 2016
It's currently implemented via a group id, so dynamically toggling it might not be trivial. It could be implemented by providing a secondary dynamic layer with iptables rules if necessary. There's already code in the netd service doing something similar for features like Doze.