permissions - Why Android VPN applications do not use BIND_VPN_SERVICE? -
i analyzing android vpn applications(e.g., hola**) permissions usage. stated, far google official manual(http://developer.android.com/reference/android/manifest.permission.html), vpn application must use bind_vpn_service permission hola not stat in manifest file. want know why not use permission , how (or in general vpn apps) offers vpn service?
** hola's permissions in manifest file:
- android.permission.receive_boot_completed
- android.permission.read_external_storage
- android.permission.write_external_storage
- android.permission.get_accounts
- android.permission.read_phone_state
- android.permission.internet
- android.permission.access_network_state
- android.permission.get_tasks
- android.permission.system_alert_window
- android.permission.modify_audio_settings
- android.permission.wake_lock
- com.google.android.c2dm.permission.receive
- org.hola.permission.c2d_message
- com.android.browser.permission.read_history_bookmarks
- com.android.browser.permission.write_history_bookmarks
- android.permission.access_fine_location
i want know why not use permission
because not need permission, because cannot hold permission. bind_vpn_service signature-level permission.
quoting the documentation bind_vpn_service, emphasis added:
must required vpnservice, ensure system can bind it.
where should find bind_vpn_service in app's manifest not in <uses-permission> element, rather in android:permission attribute on <service> element vpnservice implementation. app defending component using permission, not using permission talk other apps.
Comments
Post a Comment