Android Remote Service External access control

<Service>

You can restrict external access by using the following parameters

Android:exported= "false" //Do not allow other processes to access

android:process= ": Remote" //Declare service standalone run process name

If you need to support external access, but restrict access to only certain processes

<permission
Android:name= "Com.example.REQUEST_FINGERPRINT"
Android:protectionlevel= "signature"/> //Declaring a custom permission

<service

Android:exported= "true" //Allow other processes to access

android:process= ": Remote" //Declare service standalone run process name

android:permission= "Com.example.REQUEST_FINGERPRINT" > //declaring permission for external access to be registered

Then reference the permissions in the app that requires remote access to the service

<uses-permission android:name= "Com.example.REQUEST_FINGERPRINT"/>

In SDK API 21, if you declare an externally accessible service without declaring the required permissions, you will see warning in the IDE:exported service does not require permission

If the app accesses a service that requires permissions, the app crashes and prompts for error: Notallowed to the bind to service Intent


Android Remote Service External access control