would not storing uid range on sdcard itself be a security risk? Fred Grott http://mobilebytes.wordpress.com
On Wed, Aug 12, 2009 at 3:57 PM, lbcoder <[email protected]> wrote: > > Apps on different sdcards requesting the same uid: > set aside a uid range for sdcard-only use and keep the uid database > for that range stored on the sdcard along with apk, dalvik cache, and > home directory. Then it doesn't matter if different apps on different > sdcards request the same uid. You can never have a conflict with > internal uids since they are from different and mutually exclusive > ranges, and you can never have a conflict between uids on different > sdcards since the programs can never be present simultaneously. > > Factory reset should not affect sdcard at all, as it does currently, > it should just wipe the /data internal partition. Could also give an > option "would you also like to wipe the sdcard <y/n>?", otherwise just > leave the sdcard wiping to formatting. > > > > (7) About apps on removable storage: > > > > Yup, that's a painful part. We (Google) have felt that pain even > > before the G1 was released, as even our handful of test apps wouldn't > > fit on the internal storage of a Dream. This is one of those areas > > where there's always been some higher priority work for the Google > > Android engineers who know that area of the code (see my comment above > > about decisions and commitments not being made by engineers). There > > have been quite a few discussions about this on open-source lists, but > > those barely scratched the surface beyond the equivalent of "works for > > me" and didn't seem to get into the meat of the problem (making it > > work fully is a surprisingly deep issue). The right group to discuss > > this is android-platform. Be prepared to think about what happens e.g. > > when two apps are installed on two separate SD cards but request the > > same UID, or about the way to deal with a factory reset. > > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Android Discuss" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-discuss?hl=en -~----------~----~----~----~------~----~------~--~---
