> Runs as a distinct ID, great, but that goes out the window with sd support > and shared UIDs.
Yes, the shared storage area is shared. Not all storage is shared. Shared UIDs only work when all apps asking to share a UID are signed by the same developer. If that developer is malicious, the apps can collude to hurt you using their shared power. But they still won't be able to get access to resources owned by other apps or for which they didn't ask permission. > (There was a discussion earlier about how a developer could > issue several innocuous apps that shared uid - without notifying the user - Actually, every time you install an app that shares the UID of one or more others, the install screen shows you the union of all permissions that UID will have. So the user is notified. -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/android-security-discuss?hl=en.
