Closed Bug 977390 Opened 11 years ago Closed 7 years ago

Test Agent requests power permission but is not a certified app

Categories

(Firefox OS Graveyard :: Gaia, defect)

x86
macOS
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED WONTFIX

People

(Reporter: pauljt, Unassigned)

References

Details

(Keywords: sec-other)

I noticed when looking at 963137 that Test Agent requests the "power" permission but that is a certified permission, and test agent doesnt specify its type as certified in its manifest, so it wont get this permission. I confirmed through testing in app manager that Test Agent does not have this permission on a Buri device. (This probably doesnt need to be security sensitive, but 963137 is, so just in case 963137 is actually an issue, I am keeping this hidden for now.)
I think it used to use mozPower at one point so that the device does not disable the screen. But I don't find this now, only in an obsolete piece of code for the old integration framework that we don't use anymore anyway. So I'd say we can just remove that permission.
Keywords: sec-other
Group: core-security
Group: b2g-core-security
Group: core-security → b2g-core-security
Firefox OS is not being worked on
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WONTFIX
Group: b2g-core-security
You need to log in before you can comment on or make changes to this bug.