good enough! thanks a lot for clearing it up.. that answers my speculations
about security..


On Tue, Apr 14, 2009 at 10:37 PM, Dianne Hackborn <hack...@android.com>wrote:

> Correct.  The user needs to be involved in installing apps by confirming it
> in the UI (you can invoke this UI if you want).  In cupcake you can load
> arbitrary Dalvik code in to your process, though you need to be aware that
> the code will be running as your own app.
>
>
> On Tue, Apr 14, 2009 at 7:06 PM, tiwana <tiwana.birj...@gmail.com> wrote:
>
>>
>> I am sorry i am not sure if i get it . So are you tryin to say that
>> one third party app would not be able to install another
>> app which will run as a separate app but it can add classes to the
>> existing process....
>>
>> On Apr 14, 8:39 pm, Dianne Hackborn <hack...@android.com> wrote:
>> > This is exactly as I have already said: this API is not available to
>> third
>> > party apps, and cupcake will not change this.  Addressing the original
>> > poster, there is a new API in cupcake to be able to dynamically load
>> classes
>> > with Dalvik.
>> >
>> >
>> >
>> > On Tue, Apr 14, 2009 at 1:13 AM, tiwana <tiwana.birj...@gmail.com>
>> wrote:
>> >
>> > > So i downloaded the system images of cupcake for my emulator , my
>> > > emulator shows that it is now upgraded to version 1.5 ,i wrote an app
>> > > which can install other apps, gave this app INSTLL_PACKAGES permission
>> > > and installed this app in normal /data/app folder. But still when i
>> > > run this app i get the exception that INSTALL_PACKAGES cannot be
>> > > granted. i go to settings and see my app does not have this
>> > > permission. Is this because the system images available on net are not
>> > > fully developed?
>> >
>> > > On Apr 14, 12:01 am, zhoubo shi <zhoubo....@gmail.com> wrote:
>> > > > I think we should not write  anything  to  the system folder.
>> >
>> > > > 2009/4/14 Dianne Hackborn <hack...@android.com>
>> >
>> > > > > Nothing has been announced yet.
>> >
>> > > > > On Mon, Apr 13, 2009 at 1:37 PM, tiwana <tiwana.birj...@gmail.com
>> >
>> > > wrote:
>> >
>> > > > >> So when will be the cupcake available?
>> >
>> > > > >> On Apr 9, 7:06 pm, Dianne Hackborn <hack...@android.com> wrote:
>> > > > >> > That's why apps can't install other apps without the user being
>> > > > >> involved.  I
>> > > > >> > was addressing the first part of the original poster's request,
>> > > being
>> > > > >> able
>> > > > >> > to download and run Dalvik code in your own process.  In that
>> case
>> > > the
>> > > > >> new
>> > > > >> > API will let you do this, though of course you are running the
>> other
>> > > > >> code as
>> > > > >> > -yourself- so taking responsibility for anything it does.
>> >
>> > > > >> > On Thu, Apr 9, 2009 at 3:35 PM, BIRJODH <
>> birjodh.tiw...@gmail.com>
>> > > > >> wrote:
>> >
>> > > > >> > > Would not it be somewhat dangerous to allow apps is /data/app
>> > > folder
>> > > > >> > > to install other applications?? An app can just create an
>> infinite
>> > > > >> > > loop in which downloads applications which do not require any
>> > > > >> > > permission and keep on installing them and fill out the
>> memory
>> > > space?
>> >
>> > > > >> > > Birjodh
>> >
>> > > > >> > > On Apr 9, 1:56 pm, Dianne Hackborn <hack...@android.com>
>> wrote:
>> > > > >> > > > There is an API in cupcake to allow you to perform the
>> dexopt
>> > > into
>> > > > >> your
>> > > > >> > > own
>> > > > >> > > > directory.  That will be available when cupcake is
>> available.
>> >
>> > > > >> > > > On Thu, Apr 9, 2009 at 2:05 AM, Eborix13 <
>> ebori...@yahoo.com>
>> > > > >> wrote:
>> >
>> > > > >> > > > > Hi,
>> >
>> > > > >> > > > > We are a team of Android developers and we are facing a
>> > > serious
>> > > > >> > > > > problem for quite some time. Our app (a game client) is
>> > > designed
>> > > > >> in
>> > > > >> > > > > such a way, that once it's installed it can be used to
>> > > download
>> > > > >> games
>> > > > >> > > > > from a game server. In order for the downloaded games to
>> work,
>> > > > >> they
>> > > > >> > > > > have to be installed and launched by the client.
>> >
>> > > > >> > > > > The problem is that the client has no write/update rights
>> for
>> > > the
>> > > > >> /
>> > > > >> > > > > data/dalvik-cache directory, unless we specifically
>> execute
>> > > the
>> > > > >> chmod
>> > > > >> > > > > 777 command for that directory. Setting the
>> > > > >> > > > > android.permission.INSTALL_PACKAGES permission in the
>> client's
>> > > > >> > > > > manifest file also doesn't work. After reading countless
>> > > forums
>> > > > >> where
>> > > > >> > > > > other people have complained about the same problem, we
>> would
>> > > like
>> > > > >> to
>> > > > >> > > > > know when this issue is going to be resolved. Apparently
>> the
>> > > code
>> > > > >> for
>> > > > >> > > > > this feature already exists (the DexFile class of the so
>> > > called
>> > > > >> > > > > "cupcake" release) but it hasn't been released yet.
>> >
>> > > > >> > > > > What's more frustrating is that the Android team points
>> out
>> > > that
>> > > > >> all
>> > > > >> > > > > Android apps are equal, that system apps are equal in
>> rights
>> > > to
>> > > > >> custom
>> > > > >> > > > > apps. Obviously this is not the case. If the client game
>> app
>> > > is
>> > > > >> > > > > installed in the /system/app the problem described above
>> is
>> > > > >> solved.
>> > > > >> > > > > System apps have the right to dynamically install other
>> apps.
>> > > > >> Regular
>> > > > >> > > > > apps (installed in the /data/data folder) do not.
>> >
>> > > > >> > > > > Is this issue going to be resolved anytime soon? Will the
>> > > > >> "cupcake"
>> > > > >> > > > > DexFile class going to be present in the next release?
>> This is
>> > > a
>> > > > >> > > > > rather urgent problem since we are waiting for this new
>> > > > >> functionality
>> > > > >> > > > > in order to continue development.
>> >
>> > > > >> > > > > Thank you...
>> >
>> > > > >> > > > --
>> > > > >> > > > Dianne Hackborn
>> > > > >> > > > Android framework engineer
>> > > > >> > > > hack...@android.com
>> >
>> > > > >> > > > Note: please don't send private questions to me, as I don't
>> have
>> > > > >> time to
>> > > > >> > > > provide private support, and so won't reply to such
>> e-mails.
>> > >  All
>> > > > >> such
>> > > > >> > > > questions should be posted on public forums, where I and
>> others
>> > > can
>> > > > >> see
>> > > > >> > > and
>> > > > >> > > > answer them.
>> >
>> > > > >> > --
>> > > > >> > Dianne Hackborn
>> > > > >> > Android framework engineer
>> > > > >> > hack...@android.com
>> >
>> > > > >> > Note: please don't send private questions to me, as I don't
>> have
>> > > time to
>> > > > >> > provide private support, and so won't reply to such e-mails.
>>  All
>> > > such
>> > > > >> > questions should be posted on public forums, where I and others
>> can
>> > > see
>> > > > >> and
>> > > > >> > answer them.
>> >
>> > > > > --
>> > > > > Dianne Hackborn
>> > > > > Android framework engineer
>> > > > > hack...@android.com
>> >
>> > > > > Note: please don't send private questions to me, as I don't have
>> time
>> > > to
>> > > > > provide private support, and so won't reply to such e-mails.  All
>> such
>> > > > > questions should be posted on public forums, where I and others
>> can see
>> > > and
>> > > > > answer them.
>> >
>> > --
>> > Dianne Hackborn
>> > Android framework engineer
>> > hack...@android.com
>> >
>> > Note: please don't send private questions to me, as I don't have time to
>> > provide private support, and so won't reply to such e-mails.  All such
>> > questions should be posted on public forums, where I and others can see
>> and
>> > answer them.
>>
>>
>
>
> --
> Dianne Hackborn
> Android framework engineer
> hack...@android.com
>
>
> Note: please don't send private questions to me, as I don't have time to
> provide private support, and so won't reply to such e-mails.  All such
> questions should be posted on public forums, where I and others can see and
> answer them.
>
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers-unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to