@@ -40,15 +40,14 @@ includes reading or writing the user's private data (such as contacts or
4040e-mails), reading or writing another application's files, performing
4141network access, keeping the device awake, etc.<p>
4242
43- <p>An application's process is a secure sandbox. It can't disrupt other
44- applications, except by explicitly declaring the <em>permissions</em> it needs
45- for additional capabilities not provided by the basic sandbox. These
46- permissions it requests can be handled by the operating in various ways,
47- typically by automatically allowing or disallowing based on certificates or
48- by prompting the user. The permissions required by an application are declared
49- statically in that application, so they can be known up-front at install time
50- and will not change after that.</p>
51-
43+ <p>An application's process runs in a security sandbox. The sandbox is designed
44+ to prevent applications from disrupting each other, except by explicitly
45+ declaring the <em>permissions</em> they need for additional capabilities not
46+ provided by the basic sandbox. The system handles requests for permissions
47+ in various ways, typically by automatically allowing or disallowing based on
48+ certificates or by prompting the user. The permissions required by an
49+ application are declared statically in that application, so they can be known
50+ up-front at install time and will not change after that.</p>
5251
5352<a name="signing"></a>
5453<h2>Application Signing</h2>
0 commit comments