support toggling the INTERNET permission off and on #128

Closed
thestinger opened this Issue Dec 31, 2015 · 3 comments

Comments

Projects
None yet
2 participants
@thestinger
Contributor

thestinger commented Dec 31, 2015

It's currently implemented via a group id, so dynamically toggling it might not be trivial. It could be implemented by providing a secondary dynamic layer with iptables rules if necessary. There's already code in the netd service doing something similar for features like Doze.

@thestinger thestinger changed the title from allow revoking the network permission to support revoking the network permission Dec 31, 2015

@thestinger thestinger changed the title from support revoking the network permission to support toggling the network permission off and on Dec 31, 2015

@thestinger thestinger referenced this issue Jan 17, 2016

Closed

replace obsolete AOSP applications #123

2 of 4 tasks complete
@eighthave

This comment has been minimized.

Show comment Hide comment
@eighthave

eighthave Aug 12, 2016

The problem with the network permission is that there are ways around it. I think this still applies in Android: https://threatpost.com/android-application-allows-remote-access-no-permissions-required-122011/76017/

I think that's why Google is granting the network permission automatically these days.

The problem with the network permission is that there are ways around it. I think this still applies in Android: https://threatpost.com/android-application-allows-remote-access-no-permissions-required-122011/76017/

I think that's why Google is granting the network permission automatically these days.

@thestinger

This comment has been minimized.

Show comment Hide comment
@thestinger

thestinger Aug 12, 2016

Contributor

@eighthave There aren't any details there. Google doesn't grant it automatically. They only stopped marking it as a dangerous permission. They did that because then it wouldn't be enabled by default for the new API levels rather than simply being listed on installation. Every app would need to learn to check for it and request it from the user. It would be too painful for users and developers.

Contributor

thestinger commented Aug 12, 2016

@eighthave There aren't any details there. Google doesn't grant it automatically. They only stopped marking it as a dangerous permission. They did that because then it wouldn't be enabled by default for the new API levels rather than simply being listed on installation. Every app would need to learn to check for it and request it from the user. It would be too painful for users and developers.

@thestinger thestinger changed the title from support toggling the network permission off and on to support toggling the INTERNET permission off and on Jul 21, 2017

@thestinger

This comment has been minimized.

Show comment Hide comment
@thestinger

thestinger Jul 21, 2017

Contributor

This is now implemented.

Contributor

thestinger commented Jul 21, 2017

This is now implemented.

@thestinger thestinger closed this Jul 21, 2017

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment