What is “android:allowBackup”?

by

For this lint warning, as for all other lint warnings, note that you can get a fuller explanation than just what is in the one line error message; you don’t have to search the web for more info.

If you are using lint via Eclipse, either open the lint warnings view, where you can select the lint error and see a longer explanation, or invoke the quick fix (Ctrl-1) on the error line, and one of the suggestions is “Explain this issue”, which will also pop up a fuller explanation. If you are not using Eclipse, you can generate an HTML report from lint (lint --html <filename>) which includes full explanations next to the warnings, or you can ask lint to explain a particular issue. For example, the issue related to allowBackup has the id AllowBackup (shown at the end of the error message), so the fuller explanation is:

$ ./lint --show AllowBackup
AllowBackup
-----------
Summary: Ensure that allowBackup is explicitly set in the application's
manifest

Priority: 3 / 10
Severity: Warning
Category: Security

The allowBackup attribute determines if an application’s data can be backed up and restored, as documented here.

By default, this flag is set to true. When this flag is set to true, application data can be backed up and restored by the user using adb backup and adb restore.

This may have security consequences for an application. adb backup allows users who have enabled USB debugging to copy application data off of the device. Once backed up, all application data can be read by the user. adb restore allows creation of application data from a source specified by the user. Following a restore, applications should not assume that the data, file permissions, and directory permissions were created by the application itself.

Setting allowBackup="false" opts an application out of both backup and restore.

To fix this warning, decide whether your application should support backup and explicitly set android:allowBackup=(true|false)

Click here for More information

More Related Contents:

  1. This Handler class should be static or leaks might occur: IncomingHandler
  2. ClassNotFoundException after ADT update
  3. How to attach javadoc or sources to jars in libs folder?
  4. Android backup/restore: how to backup an internal database?
  5. ADT will not allow creation of Android Activity
  6. Unexpected value from nativeGetEnabledTags: 0
  7. Uninstalling Android ADT
  8. Gson NoClassDefFoundError after ADT and SDK Tools update to v17
  9. How do I set ANDROID_SDK_HOME environment variable?
  10. Error Message : This Android SDK requires Android Developer Toolkit version 22.6.1 or above
  11. How can I update my ADT in Eclipse?
  12. Run lint when building android studio projects
  13. How to create an animated GIF from JPEGs in Android (development)
  14. Eclipse Indigo – Cannot install Android ADT Plugin
  15. Android – Preserve or delete files created by the application on uninstall
  16. BufferOverflowException when building application
  17. Using the new “manifestmerger” property in Android
  18. Why MediaPlayer throws NOT present error when creating instance of it?
  19. Android Eclipse NoClassDefFoundError for external .jar files
  20. When does ADT set BuildConfig.DEBUG to false?
  21. No repository found error in Installing ADT in eclipse Indigo
  22. Why is 0dp considered a performance enhancement?
  23. Can’t update Eclipse ADT to 22
  24. In android is there any way to preserve SharedPreferences after an uninstall
  25. Android Lint limit languages to check for missing translations
  26. Setting background colour of Android layout element
  27. Avoid Android Lint complains about not-translated string
  28. This Android SDK requires Android Developer Toolkit version 23.0.0 or above
  29. Emulator problem in Android
  30. Eclipse Juno ADT plugin NDK path removed?

Leave a Comment