diff options
| author | Todd Kennedy <toddke@google.com> | 2018-05-29 15:18:06 -0700 |
|---|---|---|
| committer | Todd Kennedy <toddke@google.com> | 2018-05-30 13:56:17 -0700 |
| commit | ef9acb6ed97ececa4c8554adb693ec948a963db1 (patch) | |
| tree | 88965c52e964c34056ba99735d7f2a66577c45fc /tools/aapt2/java/JavaClassGenerator.cpp | |
| parent | e3348a25935099838a917cf4556c4dccc714e0ef (diff) | |
Ensure permission held for MATCH_KNOWN_PACKAGES
There's an escape clause that passes the cross user permissions
if the caller UID is identical to the target user ID [eg. we're not
operating across users]. However, the method getInstalledPackagesList()
uses android.permission.INTERACT_ACROSS_USERS to filter the results and
a calling UID check is not sufficient. Ensuure the permission is
actually held, regardless of the calling UID or target user.
Change-Id: Iebf88668766d387a15246d6eea6420610665105a
Fixes: 80435086
Test: atest CtsAppSecurityHostTestCases:ApplicationVisibilityTest
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions