Android security and permissions ② -- Security Architecture (sandbox)

An important design point in Android security is that by default, applications do not have the permission to perform harmful operations on other applications, operating systems, or users.

Operations include:

Read/write users' private data (such as contact information or email)

Read/write files of other applications

Perform Network Access

Maintain device activity

The application process is a secure sandbox ). It cannot interfere with other applications unless explicitly stated when it needs to add functionality not provided by the original sandboxPermission

The sanbox is understood as follows:

The process of an application is located in the sandbox area. It has many functions. If it needs to add functions not provided by the original sandbox, it will interfere with other applications, in this way, you can gain access to other applications by declaring some permissions.