On Friday, March 2, 2012 12:52:27 AM UTC-5, Harsha Joshi wrote:
>
> hi 
> i am developing a native library. Proving a JNI wrapper and then a 
> java API library on top of it for app developers. 
>
> However i want to control the permissions as to who has to access it. 
> Basically i want to verify that only specific applications are able to 
> load this library. 
>

If this is a library which gets packaged in an application, you may want to 
look into doing something with authorization tokens which you would issue 
and the library would check when loaded, refusing to run if there isn't a 
match.  You might be able to pair the token to the package signing key. 
 But be aware that as the checking will be local, it's subject to being 
reverse engineered and defeated. 

-- 
You received this message because you are subscribed to the Google Groups 
"Android Security Discussions" group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/android-security-discuss/-/SOIMQAYSIB4J.
To post to this group, send email to android-security-discuss@googlegroups.com.
To unsubscribe from this group, send email to 
android-security-discuss+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/android-security-discuss?hl=en.

Reply via email to