Revert READ_PHONE_STATE from an install to runtime permission
After all of the sensitive APIs were moved out of READ_PHONE_STATE for apps targeting R+ READ_PHONE_STATE was downgraded to an install permission. However this granted apps targeting pre-R access to the device phone number without user consent. This commit reverts READ_PHONE_STATE to a runtime permission which will require apps targeting pre-R to still obtain user consent to access the device phone number while still preventing access to the phone group and the other sensitive APIs exposed there. Bug: 154368168 Test: Manually installed app requesting READ_PHONE_STATE and invoking getLine1Number; verified without permission granted the method threw a SecurityException. Change-Id: I410aa9f287f8fa2b076910e531d833bd87923ccb
Loading
Please register or sign in to comment