ArcaneChat / android

⚡ Fast encrypted chats for the family
GNU General Public License v3.0
134 stars 3 forks source link

remove unnecessary CAMERA permission (since built-in camera was removed) #16

Closed adbenitez closed 9 months ago

adbenitez commented 9 months ago

also tweak build.gradle to avoid unnecessary metadata

solve #15

adbenitez commented 9 months ago

cc @IzzySoft

github-actions[bot] commented 9 months ago

To test the changes in this pull request, install this apk: 📦 app-preview.apk

IzzySoft commented 9 months ago

Scanning deltalab-armeabi-v7a-debug-1.43.0.apk, the CAMERA permission is still there:

Offending libs:
---------------
* Mapbox Android SDK (/com/mapbox): NonFreeComp

1 offenders.

Dangerous flags:
----------------
* debuggable

Permissions:
------------
* android.permission.READ_CONTACTS
* android.permission.READ_MEDIA_IMAGES
* android.permission.READ_MEDIA_VIDEO
* android.permission.READ_EXTERNAL_STORAGE
* android.permission.WRITE_EXTERNAL_STORAGE
* android.permission.POST_NOTIFICATIONS
* android.permission.ACCESS_BACKGROUND_LOCATION
* android.permission.ACCESS_COARSE_LOCATION
* android.permission.ACCESS_FINE_LOCATION
* android.permission.RECORD_AUDIO
* android.permission.MODIFY_AUDIO_SETTINGS
* android.permission.RECEIVE_BOOT_COMPLETED
* android.permission.VIBRATE
* android.permission.ACCESS_NETWORK_STATE
* android.permission.WAKE_LOCK
* android.permission.INTERNET
* android.permission.INSTALL_SHORTCUT
* com.android.launcher.permission.INSTALL_SHORTCUT
* android.permission.ACCESS_WIFI_STATE
* android.permission.RAISED_THREAD_PRIORITY
* android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
* android.permission.FOREGROUND_SERVICE
* android.permission.REQUEST_INSTALL_PACKAGES
* android.permission.CAMERA
* chat.delta.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
* com.sec.android.provider.badge.permission.READ
* com.sec.android.provider.badge.permission.WRITE
* com.htc.launcher.permission.READ_SETTINGS
* com.htc.launcher.permission.UPDATE_SHORTCUT
* com.sonyericsson.home.permission.BROADCAST_BADGE
* com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
* com.anddoes.launcher.permission.UPDATE_COUNT
* com.majeur.launcher.permission.UPDATE_BADGE
* com.huawei.android.launcher.permission.CHANGE_BADGE
* com.huawei.android.launcher.permission.READ_SETTINGS
* com.huawei.android.launcher.permission.WRITE_SETTINGS
* android.permission.READ_APP_BADGE
* com.oppo.launcher.permission.READ_SETTINGS
* com.oppo.launcher.permission.WRITE_SETTINGS
* me.everything.badger.permission.BADGE_COUNT_READ
* me.everything.badger.permission.BADGE_COUNT_WRITE

No DEPENDENCY_INFO_BLOCK though, but that might be due to

Signer #1 certificate DN: C=US, O=Android, CN=Android Debug
adbenitez commented 9 months ago

mmmh weird, probably there is something wrong in the pull request preview APKs I don't really use them

will create a new release and see what the scanner says

IzzySoft commented 9 months ago

will create a new release and see what the scanner says

Will be scanned automatically when pulled here. Results visible with the WebIf at around 7 pm UTC then. Though you can also use the scanner yourself if you wish, it's FOSS :wink: Details outlined at: Identify modules in apps