Exposing 'sdcard' to Device Storage

[Andrew Overholt]

Hi,

During B2G triage today we discussed this bug:

Device Storage - Expose 'sdcard'
https://bugzilla.mozilla.org/show_bug.cgi?id=781363

Some security concerns were brought up about exposing the entire sdcard
filesystem to Device Storage. The reason we'd want to do that, though,
is to let apps like the music app scan the whole sdcard for music files.

Does anyone have any thoughts about the tradeoffs here?

Thanks,

Andrew

[Doug Turner]

> Some security concerns were brought up about exposing the entire sdcard
>
> filesystem to Device Storage. The reason we'd want to do that, though,
>
> is to let apps like the music app scan the whole sdcard for music files.
>
> Does anyone have any thoughts about the tradeoffs here?

What were the security concerns? Can't really address them if they aren't defined.

[Doug Turner]

> Some security concerns were brought up about exposing the entire sdcard
>
> filesystem to Device Storage. The reason we'd want to do that, though,
>
> is to let apps like the music app scan the whole sdcard for music files.
>
> Does anyone have any thoughts about the tradeoffs here?

[Lucas Adamski]

I do think https://bugzilla.mozilla.org/show_bug.cgi?id=781358 is a better solution. Seems like once we open up access
we'll never be able to have a more meaningful controls that only allow access to your photos/media, music, etc
directories. But I also don't think its a world-ending event if we do.
Lucas.

On 8/10/2012 11:27 AM, Andrew Overholt wrote:
> Hi,
>
> During B2G triage today we discussed this bug:
>
> Device Storage - Expose 'sdcard'
> https://bugzilla.mozilla.org/show_bug.cgi?id=781363
>

> Some security concerns were brought up about exposing the entire sdcard filesystem to Device Storage. The reason we'd
> want to do that, though, is to let apps like the music app scan the whole sdcard for music files.
>
> Does anyone have any thoughts about the tradeoffs here?
>

> Thanks,
>
> Andrew
> _______________________________________________
> dev-webapps mailing list
> dev-w...@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-webapps