Geek Answers Handbook

Migrating to temporary permissions: how do you find all current permissions?

Is there an easy way to identify all the API calls that the Android application allows you to adapt to use run-time permissions in Android M (6, API 23)?

It seems like you just need to find out by testing, trial version and bugs or expert knowledge (for example: uploading API documents and source code). I expected Google to release a migration tool, but I did not see any evidence of this. It doesn't look like this will make your applications vulnerable to run-time crashes if someone disables permission access after installation, even if you don't use runtime permission tags in the manifest.

What are the best migration methods for runtime permissions?

+6
source share
1 answer

I was not able to find any existing tools, so our team at Galois adapted the static analysis tool that we have created over the past 4 years to identify calls to security methods in Android binary applications.

You can use it at:

There is more detailed information here:

http://galois.com/blog/2015/10/fuse-analyzer-handling-runtime-permissions-android-6-0/

+3
source

More articles:


All Articles