Skip to content
Commit 999901aa authored by Michael Groover's avatar Michael Groover
Browse files

Revert READ_PHONE_STATE from an install to runtime permission

After all of the sensitive APIs were moved out of READ_PHONE_STATE for
apps targeting R+ READ_PHONE_STATE was downgraded to an install
permission. However this granted apps targeting pre-R access to the
device phone number without user consent. This commit reverts
READ_PHONE_STATE to a runtime permission which will require apps
targeting pre-R to still obtain user consent to access the device
phone number while still preventing access to the phone group and
the other sensitive APIs exposed there.

Bug: 154368168
Test: Manually installed app requesting READ_PHONE_STATE and invoking
      getLine1Number; verified without permission granted the method
      threw a SecurityException.
Change-Id: I410aa9f287f8fa2b076910e531d833bd87923ccb
parent a4a01127
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment