summaryrefslogtreecommitdiff
path: root/services/devicepolicy
diff options
context:
space:
mode:
authorAlex Johnston <acjohnston@google.com>2020-05-20 12:39:36 +0100
committerAlex Johnston <acjohnston@google.com>2020-05-20 12:50:04 +0100
commit67623cf5566014310b19b7a08561276ee4ab3c6a (patch)
tree659900bdf90a517f1c62367d7f709b682e2d3104 /services/devicepolicy
parent78a66d6c36451d8c91b2473e3b4ac8bafbd79b41 (diff)
setAutoTimeRequired disabled on managed profile
* A security exception should be thrown when setAutoTimeRequired is called on a managed profile * Update javadoc Bug: 156620695 Test: atest com.android.server.devicepolicy.DevicePolicyManagerTest atest com.android.cts.devicepolicy.MixedDeviceOwnerTest#testSetAutoTimeRequired atest com.android.cts.devicepolicy.MixedProfileOwnerTest#testSetAutoTimeRequired atest com.android.cts.devicepolicy.MixedManagedProfileOwnerTest#testSetAutoTimeRequired Change-Id: Ifb53c218947f62aa446aa607d3f4eee354586395
Diffstat (limited to 'services/devicepolicy')
-rw-r--r--services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java3
1 files changed, 3 insertions, 0 deletions
diff --git a/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java b/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java
index 966694ad346c..84d8cee1fe73 100644
--- a/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java
+++ b/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java
@@ -7968,6 +7968,9 @@ public class DevicePolicyManagerService extends BaseIDevicePolicyManager {
final int userHandle = UserHandle.getCallingUserId();
boolean requireAutoTimeChanged = false;
synchronized (getLockObject()) {
+ if (isManagedProfile(userHandle)) {
+ throw new SecurityException("Managed profile cannot set auto time required");
+ }
ActiveAdmin admin = getActiveAdminForCallerLocked(who,
DeviceAdminInfo.USES_POLICY_PROFILE_OWNER);
if (admin.requireAutoTime != required) {