????(?)Android??????

????Android???????????????????????ó?????????????2?????????κζ???????ó?????????????????????????????

?????????ó???????????????????С????????????????ó??????????????????“permissions”?????????????????????????????????????ó????????“permissions” ?????м?????????????????????????????????????????????????????????ó????????“permissions”??????о??????????????????????????????????

???????е?Android??ó???(.apk???)?????????????????????????????????????????С????????????????ó??????????????????CA??????(???CA???????????????????????????verisign??)??Android??ó???????(????????????)???self-signed???(????????)????????????????ó?????佨?????ι????????????????????????????????????????????????????????????????????????permisssions????????????????IDs??

????(??)??ó???????IDs????????????

??????ó???????IDs??

????????Android??ó???(.apk???)??????????????????е?Linux???ID??????????????????У??????????????ó?????н?????????ID???????????????豸???????????????

???????????????????????????????????????package?е??????????????????????У?????????????Linux?????????????????????AndroidManifest.xml????е?manifest?????sharedUserId?????????????package???????????ID???????????????????package?????????????ó?????????????ID(???????)????????????????????????

???????????????????????????ó?????????????????(??????????????sharedUserId)???????????????ID??

???????????????

???????д洢????ó????е???????????????????——????ó???????ID?????????????ó????????????Щ?????????????·???getSharedPreferences(String?? int)??openFileOutput(String?? int)???? openOrCreateDatabase(String?? int?? SQLiteDatabase.CursorFactory)????????????????????????????MODE_WORLD_READABLE and/or MODE_WORLD_WRITEABLE???λ???????????????????ó???????д????????????????Щ???λ??????????????????ó??????????????????κ???ó???????????

????(??)???(permission)

??????????????????????????????Android????????????????(Normal)??Σ?????(dangerous)?????????(signature)????/???????(signature or system)?????????????????????????????????????????????

?????????????Σ??????????????????????????????????衣??????????????????????????????????ó??????platform???????????????????????????????????????????????????y??????????????

????????????????κ??????????????????????????????

??????Android??????????????????SDK????????????????Щ?????????Щ?????????????

???????????ó??????????????AndroidManifest.xml???????????? ????????????????磬?????ó???????????????????activities?????????????????ò????????????£???

????android:name="com.me.app.myapp.permission.DEADLY_ACTIVITY"

????android:label="@string/permlab_deadlyActivity"

????android:description="@string/permdesc_deadlyActivity"

????android:permissionGroup="android.permission-group.COST_MONEY"

????android:protectionLevel="dangerous"

????/>

????(??)??????(uses-permission)

????????????????????users-permission?????????????????????????????????????ó??????????????????Ч????????????????????????????????????????platform???????ó????????????????

???????????ó????????????·???????

???? ??????????(permission??protectlevel?????normal????dangerous)?????????apk????????????????permission??

???? ??????????(permission??protectlevel?????signature????signatureorsystem)?????????apk???????????apk???????????signature??

??????????????????????????AndroidManifest.xml????а???????????? ???????????????

????????????????????????SMS???????ó????????????????