diff options
| author | Linus Tufvesson <lus@google.com> | 2020-02-28 10:21:00 +0000 |
|---|---|---|
| committer | Linus Tufvesson <lus@google.com> | 2020-04-30 17:17:18 +0100 |
| commit | 9d8d152aee80f0281656ff303df5087e6d9c9b8f (patch) | |
| tree | 394a723838f71c361e5af8b2bae345c294e97489 /tools/aapt2/java/JavaClassGenerator.cpp | |
| parent | 26e2c92945811acd6077bddd91d7d003148ef731 (diff) | |
Don't allow activites on virtual displays
.. unless the caller has ACTIVITY_EMBEDDING permission or is already
present on the display. This prevents non privileged apps from elevating
their FG state by creating a private VD and putting an activity there.
Which would keep their stack considered FG even after their activity on
the main display is no longer visible.
Test: atest CtsWindowManagerDeviceTestCases:MultiDisplaySecurityTests
Bug: 146768652
Change-Id: I1f9662c2bd14b34e00fbc8ebb926538f0329c37a
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions