Akhilesh,

No such mechanism currently exists in the Android source code.

However, if I remember correctly, bluetooth is one of the few permissions that are enforced via UNIX gid (see comments in /system/ etc/permissions.xml). A while ago, I tracked the INTERNET permission down to the "inet" gid, which is enforced by a modification to the sockets interface in the Linux kernel. If all you want to do is disable bluetooth access for some time period, find where the "net_bt" and "net_bt_admin" gids are used to enforce access (e.g., kernel, /dev/ *). However, be aware of open file descriptors that may need to be revoked.

Good luck,

-Will


On Jul 8, 2009, at 2:19 AM, Akhilesh Gupta wrote:


Hi
The documentation mentions that "the permissions required by an
application are declared statically in that application, so they can
be known up-front at install time and will not change after that."
Suppose there is a necessity to enforce a system wide security policy
to not allow bluetooth access(for example) to any application for a
certain period of time. Is there a way to revoke the permission for
bluetooth access from all applications for that period of time?
If there is no direct way of doing this, can someone guide me on what
I can modify/add in the android source code(or where to look in the
source) to add this capability to my android compilation.

Thank You
Akhilesh Gupta


--
William Enck
PhD Candidate
Department of Computer Science and Engineering
The Pennsylvania State University
[email protected]

Reply via email to