diff options
| author | Jeff Davidson <jpd@google.com> | 2015-02-10 10:02:11 -0800 |
|---|---|---|
| committer | Jeff Davidson <jpd@google.com> | 2015-02-10 23:41:42 -0800 |
| commit | b21298a686b04d55ff97223dd317497845713f4b (patch) | |
| tree | f601ce3c9ba7082f91d21dcf4bd17e6cf2fa1b68 /rs/java/android/renderscript/ProgramFragmentFixedFunction.java | |
| parent | 175ddbcf2ed71fdcd44a9b64cdc5d479df496a4d (diff) | |
Do not enforce CONTROL_VPN for calls from lockdown VPN.
Clearly document which methods in Vpn.java are designed to be used to
service a Binder call, and which must therefore check permissions and
clear the calling identity, and which methods are designed for
internal use only and which therefore need not check permission.
Add a new startLegacyVpnPrivileged method which bypasses the
permission checks, to be used by lockdown VPN which is a trusted
system service. Ensure that the existing startLegacyVpn method checks
permissions as this is used whenever we respond to a binder call.
Bug: 19311172
Change-Id: I34f13258ee7481f1356bc523124cf5db068b4972
Diffstat (limited to 'rs/java/android/renderscript/ProgramFragmentFixedFunction.java')
0 files changed, 0 insertions, 0 deletions