daimajia / daimajia/droidwall

CHECK_LICENSE permission apps broken

Open
#225 0 comments 0 reactions 0 assignees View on GitHub
auto-migrated Priority-Medium Type-Defect
Dominant language
No language data
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

```
What steps will reproduce the problem?
1. Install new app with permission com.android.vending.CHECK_LICENSE (and
without INTERNET permission)
2. No record for the new app is shown in droidwall
3. New app cannot check license

See
http://developer.android.com/guide/publishing/licensing.html#manifest-permission
Sample app (atm on sale, i.e. free):
http://www.getjar.com/mobile/167414/advanced-task-manager-for-google-nexus-one/

I don't know what the best solution here would be. Some thoughts:

i) automatically grant the app the right to access the inet if it does not also
want the permission to access the inet
ii) treat it like any app that wants to access the internet (and mark it als
'license check permission'-only app)
```

Original issue reported on code.google.com by `chr.eg...@gmail.com` on 24 Dec 2011 at 4:24

Contributor guide

No contributing guide indexed for this repository

Research direction

Reproduce the problem with an Android app declaring com.android.vending.CHECK_LICENSE without INTERNET, then trace how DroidWall discovers and classifies app permissions. Done means the app is represented correctly and can perform its license check according to one of the proposed permission-handling behaviors; the issue does not identify specific files or tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
android
Domain
mobile, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.