SnoopSnitch

The following permissions are required to run SnoopSnitch:

• ACCESS_SUPERUSER: Open Qualcomm diagnosis interface to capture radio data
• CALL_PHONE, READ_PHONE_STATE, SEND_SMS, RECEIVE_SMS: Generate mobile network traffic recorded in active tests
• GET_TASKS: Retrieve state of helper processes interacting with diagnosis interface
• WAKE_LOCK: Acquire CPU for long-running analysis steps
• ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION: record location of IMSI catchers and security events if configured
• INTERNET: Download new data from gsmmap.org, upload radio traces and debug logs upon request
• ACCESS_NETWORK_STATE: Postpone uploads until network is available

In addition, the app requires root privileges, which are only used to access the /dev/diag interface from which baseband information is read.