Hey,

that's a nice project indeed.

The file "dom/permission/PermissionSettings.js" contains the permission
checks. As far as I understand, you should be able to create an audit
trail by adding some additional logging in PermissionsSettings.get
<https://mxr.mozilla.org/mozilla-central/source/dom/permission/PermissionSettings.js#36>.


I don't know if this on a public roadmap, but at least the Firefox OS
Security team has thought about this feature. If you can commit to
working in the open (e.g., on Bugzilla), we could take a look at getting
this into Firefox OS itself in the long run.

Cheers,
Freddy

On 18.04.2015 01:21, Inble Visiman wrote:
> Hi Team:
> 
> we are a team of two students working on Firefox OS for a small project.
> 
> We are trying to create a system app to monitor the frequency of apps
> getting the information on the phone.
> Like: What app is accessing what kind of service in the background at
> what time.
> 
> Did so far:
> We compiled the OS from source, located the permissionManager.js file
> and found that it is the one showing the popup when the app actually
> wants the permission to access any service (ex: location, contacts etc.).
> 
> We first thought we can get the information of the app(s) from here. But
> then we saw, when the app actually requests the permission and when user
> selects "remember" option at this prompt - the app will just be using
> the service in the background from next time.
> 
> We found an option in settings that actually manages the app permissions
> (ask,deny,grant)
> So basically, here the apps shows "grant" (if the user enables the
> remember option at the prompt screen)
> 
> 
> *Question is:*
> Do we have to write our piece of code in every service (like location,
> Contacts etc..) like a interface and call the event listening to a
> function which collects the data?  if yes, where is the code for these
> services saved in B2G? 
> 
> or 
> 
> Is there any existing interface kind of thing through which all the
> requests from apps go to services?
> 
> 
> Thank you so much.
> 
> 
> _______________________________________________
> dev-b2g mailing list
> [email protected]
> https://lists.mozilla.org/listinfo/dev-b2g
> 

_______________________________________________
dev-b2g mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-b2g

Reply via email to