0

I was trying to evaluate effective permissions usage of an apk using axplorer mapping files. During evaluation I obtained an effective use of the android.permission.INTERNET permission equal to 0.

This sounds pretty weird considering that this is maybe the most USED permission of all (android doc just tells an apk must declare this permission "In order to perform network operation"...)

This weird result depends on the fact that in axplorer mapping files there aren't mappings of famous "internet using" methods (java.net.HttpURLConnection, java.net.HttpsUrlConnection, java.net.Socket etc...) with android.permission.INTERNET permission.

I also knew that axplorer project replaced pscout project, so I took a look at pscout's mapping files either and found that in pscout's mapping files of android versions from Jelly Bean to Froyo there actually ARE mappings of java.net.HttpURLConnection, java.net.Socket etc.. methods with the permission, but for 4.11-5.11 android version, there is no mapping with these methods, and the mapping files become very similar to axplorer mapping files of android more recent versions.

Someone can help me find out why I'm seeing this strange case in permissions mappings?

I need to evaluate permissions effectively usage, but a "zero usage" of android.permission.INTERNET has really to be false... Someone can help me with that? Maybe there's something wrong in my idea?

  • Leaving as just a comment, since this isn't complete, but might provide some ideas for research: INTERNET permission is tied to inet GID, which is handled in a special way in Android Linux Kernel. – domen Mar 1 at 9:37
  • Thanky you for answering anyway: every help is appreciated :). Could you give me some documentation about INTERNET permission tying with inet GID? – Alessio Martorana Mar 1 at 11:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.