Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The result is a file that is world readable but not writable. If one were to instead create a file via the native development kit using the java native interface and relied on the default permissions, the result would be a new file with the following permissions :

-rw-rw-rw-

This new file is ends up being world readable and world writable . When because when native code is used to create files, the umask of the zygote process is inherited (which is set to 000) is inherited. Such relaxed permissions could potentially lead to security issues since the new file may be corrupted intentionally or otherwise by another application on the device if the file location is known [Intrepidus 2012].

...