diff options
author | Rubin Xu <rubinxu@google.com> | 2018-01-02 20:37:35 +0000 |
---|---|---|
committer | Rubin Xu <rubinxu@google.com> | 2018-01-12 19:01:40 +0000 |
commit | cc391c2c13b30c494908309659509f8426af48ea (patch) | |
tree | cd3f44778ab171e0a48b33eebba95cdb2c658b71 /rs/java/android/renderscript/ProgramFragmentFixedFunction.java | |
parent | 79131f7a227eb5f2bbd4e6ea29e14d834c634101 (diff) |
Implement DISALLOW_SHARE_INTO_MANAGED_PROFILE
Add a user restriction to allow profile owners to enforce a stronger
isolation of managed profile by preventing users sharing data into
the profile. This is achieved by disabling a subset of built-in cross
profile intent filters added by ManagedProvisioning during profile
inflation.
Implementation wise, DevicePolicyManagerService listens for the restriction
change and notifies ManagedProvisioning to modify the built-in intent
filters. This is needed since ManagedProvisioning has ground truth of all
built-in intent filters and manages them. It also has the advantage that
ManagedProvisioning only needs to run when a policy change happens.
Test: cts-tradefed run cts-dev -m CtsDevicePolicyManagerTestCases -t com.android.cts.devicepolicy.ManagedProfileTest#testDisallowSharingIntoProfileFromPersonal
Test: cts-tradefed run cts-dev -m CtsDevicePolicyManagerTestCases -t com.android.cts.devicepolicy.ManagedProfileTest#testDisallowSharingIntoProfileFromProfile
Bug: 63911046
Change-Id: Ia6d12a5086627d1280325cd19d6e3a0752dae633
Diffstat (limited to 'rs/java/android/renderscript/ProgramFragmentFixedFunction.java')
0 files changed, 0 insertions, 0 deletions