From 93e6b6f9b5debfc8fac3bad1390254e389f7432e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20Sch=C3=BCrmann?= <dominik@dominikschuermann.de>
Date: Mon, 29 Jun 2015 10:54:04 +0200
Subject: Use signature-level signature for TemporaryStorageProvider and
 describe the security model

---
 OpenKeychain/src/main/AndroidManifest.xml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

(limited to 'OpenKeychain/src/main/AndroidManifest.xml')

diff --git a/OpenKeychain/src/main/AndroidManifest.xml b/OpenKeychain/src/main/AndroidManifest.xml
index d5db3c2da..c8073da00 100644
--- a/OpenKeychain/src/main/AndroidManifest.xml
+++ b/OpenKeychain/src/main/AndroidManifest.xml
@@ -48,9 +48,10 @@
         android:name="android.hardware.screen.portrait"
         android:required="false" />
 
-    <permission android:name="${applicationId}.WRITE_TEMPORARY_STORAGE" />
-
-    <uses-permission android:name="${applicationId}.WRITE_TEMPORARY_STORAGE" />
+    <!-- TemporaryStorageProvider should be writable by OpenKeychain only, thus signature-level permission -->
+    <permission
+        android:name="${applicationId}.WRITE_TEMPORARY_STORAGE"
+        android:protectionLevel="signature" />
 
     <uses-permission android:name="android.permission.INTERNET" />
     <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" />
-- 
cgit v1.2.3