View Issue Details

IDProjectCategoryView StatusLast Update
0001503T99X171.00 SKB EagleSWpublic2024-04-23 11:57
Reporter(SW) Jason LingAssigned To(SW) Jason LingDue Date
PrioritynormalSeveritys4-minorReproducibilityalways
Status closedResolutionnot fixable 
Summary0001503: [BTS] MBA_policy_violation-BFX-AT100
DescriptionHi YK,

Recently, Google updated the BTS test suite. Our other customers have encountered MBA policy violation.
so I built the latest code (2022/06/30) to check if Smart3 has this failure.

Please check the attachment.

You can ignore the warning "Vulnerable /system/app/PushAgent/PushAgent.apk", because you've already created https://jira.skbroadband.com/browse/BTVD-21408 (this warning will be treated as an alert on 2022-08-16)

There are 2 deadlines: 2022-10-28 and 2022-09-28. Please check all apps in the attachment.

I think you can ignore the following warning in attachment, the owner of these 3 apps are Foxconn and Amlogic. I'll check it later.
MBA policy violation in /system/app/mediaProcessorDemo/mediaProcessorDemo.apk (Amlogic)
MBA policy violation in /system/priv-app/LeanbackCustomizer/LeanbackCustomizer.apk (Foxconn)
MBA policy violation in /system/priv-app/TvSettings/TvSettings.apk (Amlogic)

For mediaProcessorDemo.apk, as far as I know, it's test app for LibTsPlayer. Does SKB still need to include it in FW?

Thanks,
Jason
TagsNo tags attached.
Attach Tags

Activities

(SW) Jason Ling

2022-06-30 18:24

developer  

(ALTech) Younkwang Jung

2022-07-05 14:58

developer   ~0010309

Hi jason

mediaProcessorDemo.apk is a test app
If FXN doesn't need this app, it can be removed.
And regarding MBA policy violation, Amlogic tells me to refer to the site below.
https://source.android.com/devices/tech/config/perms-allowlist

SKB is planning to solve the warning issue below by July at BPM-3150 ( https://jira.skbroadband.com/browse/BTVD-21408 )
<Future instances of this issue will be treated as an alert on 2022-08-16.>
Vulnerable /system/app/PushAgentService/PushAgentService.apk

Thank you
YK.Jung

(SW) Jason Ling

2022-07-05 15:20

developer   ~0010310

Last edited: 2022-07-05 15:33

Hi YK,

Regarding mediaProcessorDemo.apk, Foxconn has never used it before.
mediaProcessorDemo.apk is test app for LibTsPlayer, I think SPTEK and Amlogic used it before.

Should we remove it? or Do you need to discuss it with SPTEK or Amogic?
If SPTEK and Amlogic no longer use it, we can help remove it.

Another suggestion, mediaProcessorDemo is programmed by Amlogic, I think Amlogic can remove it in common SDK, each OEMs can merge this patch from common SDK.

(ALTech) Wooshin Kang

2022-07-07 08:25

developer   ~0010323

Last edited: 2022-07-07 08:25

Hi Jason,

SKB made their jira ticket, please check OWNER tab if there is may wrong information.
https://jira.skbroadband.com/browse/BPM-3378
Thank.

(ALTech) Wooshin Kang

2022-07-18 08:32

developer   ~0010393

Hi Jason,

Please update about current status.

Thanks.

(ALTech) Wooshin Kang

2022-07-18 08:32

developer   ~0010394

Hi Jason,

Please update about current status.

Thanks.

(SW) Jason Ling

2022-07-18 15:29

developer   ~0010402

Hi Wooshin,

I've asked at least 2 Soc vendors and they don't have any updates.
I'll also ask Synaptics within today.

(SW) Jason Ling

2022-08-09 11:29

developer   ~0010560

Last edited: 2022-08-09 11:29

Hi Wooshin,

I submitted the eagle test build yesterday for checking MBA warning.

So far I've heard at least 2 Soc vendors saying this policy doesn't apply to TV. But they all have only verbal exemptions.

For the eagle test build yesterday.
We can see 22 warning (MBA0809-1.jpg)
But if we click the fingerprint (MBA0809-2.jpg)
The warning will change to "exempted".

I'm not sure if the keyword "exempt" means not for TV.

It looks a bit different from Intek's result.

If you have more information, please share with us.

Thanks,
MBA0809-1.jpg (67,873 bytes)   
MBA0809-1.jpg (67,873 bytes)   
MBA0809-2.jpg (107,622 bytes)   
MBA0809-2.jpg (107,622 bytes)   

(ALTech) Wooshin Kang

2022-08-09 11:49

developer   ~0010561

Last edited: 2022-08-09 12:03

Hi Jason,

Yes, Our test result is different with competitor's
Can you check it with 3PL ?
I will share it to SKB and other competitors and will discuss

Thanks.

(SW) Jason Ling

2022-08-09 16:53

developer   ~0010565

Hi Wooshin,

I checked it with our 3PL this afternoon.

Our 3PL just replied
we don't need to care about "Exempted" anymore even there is a comment "Future instances of this issue will be treated as an alert on 2022-xx-xx." in each "Exempted"

But this afternoon, Amlogic Taiwan FAE send me the screen capture of one issue tracker.
The content is related to MBA.

I saw the some key points from Google comment,
For example, The following is one of MBA warning.
App must be added to allowlist, because it declares: android.permission.INSTALL_PACKAGES.

There is an allow list in Google Server, not in FW.
If you have MBA Alerts in the future and you feel your app must still use the permission, each permission will need to be justified, reviewed and approved by Google.

Issue History

Date Modified Username Field Change
2022-06-30 18:24 (SW) Jason Ling New Issue
2022-06-30 18:24 (SW) Jason Ling Status new => assigned
2022-06-30 18:24 (SW) Jason Ling Assigned To => (ALTech) Younkwang Jung
2022-06-30 18:24 (SW) Jason Ling File Added: MBA_policy_violation-BFX-AT100.pdf
2022-07-01 08:30 (SW) Jason Ling Issue Monitored: (SW) Jacky Chiang
2022-07-01 08:30 (SW) Jason Ling Issue Monitored: (SW) Kerwin Chen
2022-07-05 14:53 (ALTech) Younkwang Jung Issue Monitored: (ALTech) SY Yoon
2022-07-05 14:53 (ALTech) Younkwang Jung Issue Monitored: (ALTech) JunGyu Kim
2022-07-05 14:54 (ALTech) Younkwang Jung Issue Monitored: (ALTech) Sangmin Choi
2022-07-05 14:54 (ALTech) Younkwang Jung Issue Monitored: (ALTech) Wooshin Kang
2022-07-05 14:58 (ALTech) Younkwang Jung Note Added: 0010309
2022-07-05 15:20 (SW) Jason Ling Note Added: 0010310
2022-07-05 15:33 (SW) Jason Ling Note Edited: 0010310
2022-07-07 08:25 (ALTech) Wooshin Kang Note Added: 0010323
2022-07-07 08:25 (ALTech) Wooshin Kang Note Edited: 0010323
2022-07-18 08:32 (ALTech) Wooshin Kang Note Added: 0010393
2022-07-18 08:32 (ALTech) Wooshin Kang Note Added: 0010394
2022-07-18 15:29 (SW) Jason Ling Note Added: 0010402
2022-08-09 11:29 (SW) Jason Ling Note Added: 0010560
2022-08-09 11:29 (SW) Jason Ling File Added: MBA0809-1.jpg
2022-08-09 11:29 (SW) Jason Ling File Added: MBA0809-2.jpg
2022-08-09 11:29 (SW) Jason Ling Note Edited: 0010560
2022-08-09 11:49 (ALTech) Wooshin Kang Note Added: 0010561
2022-08-09 12:03 (ALTech) Wooshin Kang Note Edited: 0010561
2022-08-09 16:53 (SW) Jason Ling Note Added: 0010565
2024-04-23 11:57 (ALTech) Younkwang Jung Assigned To (ALTech) Younkwang Jung => (SW) Jason Ling
2024-04-23 11:57 (ALTech) Younkwang Jung Status assigned => closed
2024-04-23 11:57 (ALTech) Younkwang Jung Resolution open => not fixable