mock location check - Githubissues

traccar / traccar-client-android

Traccar Client for Android

https://www.traccar.org/client

Apache License 2.0

639 stars 710 forks source link

mock location check #74

Open vkrastanov opened 10 years ago

vkrastanov commented 10 years ago

It would be great if the client can detect whether "Allow mock location" is enabled and stop sending it's coordinates in order to prevent sending spoofed locations.

// returns true if mock location enabled, false if not enabled.
if (Settings.Secure.getString(getContentResolver(),
       Settings.Secure.ALLOW_MOCK_LOCATION).equals("0")) 
       return false; 
       else return true;

However some users want to use mock locations (for testing purposes for example), so it would be best if this check can be enabled/disabled and implemented with another feature: password protection for client settings.

vkrastanov commented 10 years ago

Actually one additional check can be made to secure the location even more - root check. I guess that even if mock location is disabled but the phone is 'rooted', spoofed locations can be send (haven't tested all this).

private static boolean isRooted() {
    return findBinary("su");
}

public static boolean findBinary(String binaryName) {
    boolean found = false;
    if (!found) {
        String[] places = {"/sbin/", "/system/bin/", "/system/xbin/", "/data/local/xbin/",
                "/data/local/bin/", "/system/sd/xbin/", "/system/bin/failsafe/", "/data/local/"};
        for (String where : places) {
            if ( new File( where + binaryName ).exists() ) {
                found = true;
                break;
            }
        }
    }
    return found;
}