(THIS CODING RULE OR GUIDELINE IS UNDER CONSTRUCTION)

This rule was developed in part by Robin Yuan at the October 20-22, 2017 OurCS Workshop (http://www.cs.cmu.edu/ourcs/register.html). 
For more information about this statement, see the About the OurCS Workshop page.

Chin, et al., [Chin 2011] says: "If a Service is exported and not protected with strong permissions, then any application can start and bind to the Service. Depending on the duties of a particular Service, it may leak information or perform unauthorized tasks. Services sometimes maintain singleton application state, which could be corrupted."

...

Automatic detection of an exported service is straightforward. It is not feasible to automatically determine whether appropriate permissions have been set in the manifest.

Related Guidelines

Fill in the table below with at least one entry row, per these instructions, then remove this purple-font section.

Bibliography

...