Confirmed users
1,225
edits
Security/B2G/PermissionReview: Difference between revisions
Jump to navigation
Jump to search
no edit summary
Ptheriault (talk | contribs) m (a) |
No edit summary |
||
| Line 56: | Line 56: | ||
=== Telephony & Mobile === | === Telephony & Mobile === | ||
Telephony & mobileconnection seem more dangerous - not sure that there is a strong use case here? Thoughts? Do you really want websites making phone calls, locking your SIM card? | Telephony & mobileconnection seem more dangerous - not sure that there is a strong use case here? Thoughts? Do you really want websites making phone calls, locking your SIM card? | ||
== Applications vs API usage == | |||
With the target of making as many apps as possible hosted, an analysis has been carried out to check what are the Gaia Application dependencies on the FirefoxOS APIs. | |||
The idea is identifying which APIs are used by every application and why are those APIs required (i.e. what is the purpose of using that API). | |||
The ultimate target is checking if the Apps could be developed as hosted by: | |||
*Reducing functionality | |||
*Exposing APIs to hosted content currently not available to it (it might require splitting current APIs in smallest pieces) | |||
*Access to the functionality by alternative mechanism without using an API (e.g. Activities, Services…) | |||
NOTE: There are some scripts that allow to automate part of this process and generate automatically the application vs. permission matrix and the Security Domain vs. APIs matrix. The scripts are available at (https://github.com/mcjimenez/appsVSperms). | |||