Fix the security issue that preloaded apps can get SSID & BSSID
NetworkMonitor sends "android.net.conn.NETWORK_CONDITIONS_MEASURED" broadcast with Wifi SSID & BSSID. The receiver of this broadcast is only required to have "android.permission.ACCESS_NETWORK_CONDITIONS" permission but not the "android.permission.ACCESS_FINE_LOCATION". It's incorrect because if the apps want to know the Wifi SSID and BSSID, they should get the run-time permission with user consent. Since this broadcast is not used anymore, delete it and the related code. Bug: 175213041 Test: atest NetworkStackNextTests NetworkStackTests Change-Id: I12050737291c7fa0ebff4e7411b91f4c6f57a413 Merged-In: I12050737291c7fa0ebff4e7411b91f4c6f57a413 Ignore-AOSP-First: This is a security patch which cannot submit in AOSP.
Loading
-
mentioned in commit 1a33815c
-
mentioned in commit 9a403a9d
-
mentioned in commit aaf8f3dc
-
mentioned in commit df04809f
-
mentioned in commit 2d7714ec
-
mentioned in commit 2de36c05
-
mentioned in commit aeab3f7b
-
mentioned in commit c9978ebd
-
mentioned in commit a30388b8
-
mentioned in commit 8c52bf59
-
mentioned in commit afb9068c
Please register or sign in to comment