[android-developers] Re: Permissions for System Apps (not in /data/system/packages.xml?)

2012-06-26 Thread Jason Meyer
As Dianne already guessed, my intentions are "semi-misguided". I am a researcher in the field of mobile malware, which is why I asked (and nope, this ain't my real name ;) ). Just to be sure I wanted some confirmation for my guesses. If all goes well, the result of my current work will be some cha

[android-developers] Re: Permissions for System Apps (not in /data/system/packages.xml?)

2012-06-25 Thread Jason Meyer
On 25 Jun., 02:26, Dianne Hackborn wrote: > Why do you care if there is a tag? Because I figured that is what controls which Permissions can be used by apps. At least for apps stored in "user space" (/data/app/) this seems to be true. As stated here, you can revoke permissions granted at instal

[android-developers] Re: Permissions for System Apps (not in /data/system/packages.xml?)

2012-06-24 Thread Jason Meyer
I am not sure if it's a standard Android component, and indeed I guess it's not. Still, the possibility exists. However, other system apps show the same behavior regarding their packages.xml entries. Anyway, here's the whole block: I would guess that a file manager would typically a

[android-developers] Re: Permissions for System Apps (not in /data/system/packages.xml?)

2012-06-24 Thread Jason Meyer
Hey everyone, I checked back all the details you gave me. However, my findings are still not satisfactory. The shared UID bit turned out to be true - for some of the packages stored in /system/app/, but unfortunately not for all. System apps with a shared user ID usually get their permissions def

[android-developers] Re: Permissions for System Apps (not in /data/system/packages.xml?)

2012-06-18 Thread Jason Meyer
> > Nonetheless, I am still wondering: Does that mean that an app stored > > as APK in /system/app/ can use any permission which is <= > > "signatureOrSystem"? > > Well, sure, if they request it, just like any other SDK app. I am not quite sure what you mean by "request it". As far as I know, there

[android-developers] Re: Permissions for System Apps (not in /data/system/packages.xml?)

2012-06-18 Thread Jason Meyer
Thanks for your quick reply, Mark. Nonetheless, I am still wondering: Does that mean that an app stored as APK in /system/app/ can use any permission which is <= "signatureOrSystem"? Or can only permissions == "signatureOrSystem" be made use of? (the latter is definitely not the case, see below)

[android-developers] Permissions for System Apps (not in /data/system/packages.xml?)

2012-06-17 Thread Jason Meyer
Hi everyone, after doing a bit of research I've gotten very curious: Where are the permissions stored which were granted to apps installed in /system/app? I checked out my phone's packages.xml file (located in /data/system/ packages.xml). "User apps" stored in /data/app/ have , but none of the AP