Objective of Kitkat SD Card Permissions

Search This thread

nlatifolia

Senior Member
Jan 6, 2014
178
38
Regarding 4.4 Kitkat External SD Card access permision, anyone can explain to us what is the objective of having such rigid permissions ?

"....

Starting in Android 4.4, the owner, group and modes of files on external storage devices are now synthesized based on directory structure. This enables apps to manage their package-specific directories on external storage without requiring they hold the broad WRITE_EXTERNAL_STORAGE permission. For example, the app with package name com.example.foo can now freely access Android/data/com.example.foo/ on external storage devices with no permissions. These synthesized permissions are accomplished by wrapping raw storage devices in a FUSE daemon.
..."

Full source : http://source.android.com/devices/tech/storage/
 

aydc

Senior Member
Jul 31, 2006
1,036
390
On 4.3 and older, a malicious app can wipe the whole sdcard with standard permissions. New permissions prevent it.
 
  • Like
Reactions: denski101

nlatifolia

Senior Member
Jan 6, 2014
178
38
On 4.3 and older, a malicious app can wipe the whole sdcard with standard permissions. New permissions prevent it.

So this is useful then not a considered 'bug'..

I guess there will be no benefits anymore to use 3rd party file manager if we dont root our phones. Niche market just collapsed.
 

pete4k

Senior Member
Jan 2, 2014
975
288
Sorry, but I have follow up questions:
I wonder how many malicious pieces of software like that are in a Google Play store to warrant breaking most third party applications that write to SD card? But I guess now, that apps can't write to SD card, there will be not much to protect there anyhow? And how will this all work in the future, once apps get their permissions fixed? I won't be allowed to access my card or format it at will? or will I be able to grant those permissions, but then how would I know the software is malicious any more than I know now? Am I too stupid to grasp the logic of all this?
 

nlatifolia

Senior Member
Jan 6, 2014
178
38
Sorry, but I have follow up questions:
I wonder how many malicious pieces of software like that are in a Google Play store to warrant breaking most third party applications that write to SD card? But I guess now, that apps can't write to SD card, there will be not much to protect there anyhow? And how will this all work in the future, once apps get their permissions fixed? I won't be allowed to access my card or format it at will? or will I be able to grant those permissions, but then how would I know the software is malicious any more than I know now? Am I too stupid to grasp the logic of all this?

That's what I had in mind too but if you see from the source link above I think Google is anticipating MULTI USER environment where some "stuffs" from me could wrack havoc some of "your stuffs". That scenario actually will only happen on MULTI USER tablet / smartphone, but that surely not mainstream are they ?
 

meti84

Member
Nov 19, 2008
49
11
Brescia
Samsung Galaxy A52 5G
Sorry, but I have follow up questions:
I wonder how many malicious pieces of software like that are in a Google Play store to warrant breaking most third party applications that write to SD card? But I guess now, that apps can't write to SD card, there will be not much to protect there anyhow? And how will this all work in the future, once apps get their permissions fixed? I won't be allowed to access my card or format it at will? or will I be able to grant those permissions, but then how would I know the software is malicious any more than I know now? Am I too stupid to grasp the logic of all this?

As stated on source.android.com:

Starting in Android 4.4, the owner, group and modes of files on external storage devices are now synthesized based on directory structure. This enables apps to manage their package-specific directories on external storage without requiring they hold the broad WRITE_EXTERNAL_STORAGE permission. For example, the app with package name com.example.foo can now freely access Android/data/com.example.foo/ on external storage devices with no permissions. These synthesized permissions are accomplished by wrapping raw storage devices in a FUSE daemon.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    On 4.3 and older, a malicious app can wipe the whole sdcard with standard permissions. New permissions prevent it.