>
> Now I need to know how the service could:
> 1) Start a GUI-related activity (.apk).
> 2) Subscribe to receive broadcasts.
>
>
These are tasks performed by ActivityManagerService, I think. See the
(hidden/system-internal) interface of ActivityManagerService; you should
find something useful i
Hi,
> I had thought about before too. From the implementation point of view,
> you need someone to send you either a binder or handler (like
> invitation) to be able to create a kernel level reference (numbered
> locally), which you can then use to start transaction with. As the
> reference n
Hi,
sounds like a great piece of work. I'm not into the details of that
low-level kernel stuff, but there's one question that sticks around in my
mind:
>From a security pov, is it possible to guess binder reference numbers of
binder nodes, thus by-passing the service manager to initiate IPC
'