diff options
| author | lucaslin <lucaslin@google.com> | 2021-04-20 03:25:32 +0800 |
|---|---|---|
| committer | android-build-team Robot <android-build-team-robot@google.com> | 2021-05-20 00:01:51 +0000 |
| commit | 94eb94069bfcee96196d5409beab86c4b1f0407b (patch) | |
| tree | 087519cd66351f5ab0a8e469298255ddf0ae5d8c /common/networkstackclient | |
| parent | c08c38e345a686ed12d5b4f944bb451c9293a254 (diff) | |
Fix the security issue that preloaded apps can get SSID & BSSID
NetworkMonitor sends "android.net.conn.NETWORK_CONDITIONS_MEASURED"
broadcast with Wifi SSID & BSSID. The receiver of this broadcast
is only required to have "android.permission.ACCESS_NETWORK_CONDITIONS"
permission but not the "android.permission.ACCESS_FINE_LOCATION".
It's incorrect because if the apps want to know the Wifi SSID and
BSSID, they should get the run-time permission with user consent.
Since this broadcast is not used anymore, delete it and the related
code.
Bug: 175213041
Test: atest NetworkStackNextTests NetworkStackTests
Change-Id: I12050737291c7fa0ebff4e7411b91f4c6f57a413
Merged-In: I12050737291c7fa0ebff4e7411b91f4c6f57a413
Ignore-AOSP-First: This is a security patch which cannot submit in
AOSP.
(cherry picked from commit 0dc33442b74703f7700ba78b05d3c5ec30c07055)
Diffstat (limited to 'common/networkstackclient')
0 files changed, 0 insertions, 0 deletions