diff options
| author | Carmen Jackson <carmenjackson@google.com> | 2021-06-23 11:41:15 -0700 |
|---|---|---|
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2021-06-24 23:53:17 +0000 |
| commit | 54e961f5a4d285d587bd5bdce0a57ba0b2509550 (patch) | |
| tree | 93656c7f62ded5d129cdcd139aeb8186351aed2d /tools/aapt2/java/JavaClassGenerator_test.cpp | |
| parent | 9dd561f2a032908f6c916be577f6a7136c9b03ef (diff) | |
Add Binder.clearCallingIdentity to TracingServiceProxy
The TracingServiceProxy is called by traced, which runs as UID 9999 and
therefore doesn't have the required permissions to start a foreground service.
So, clear that calling identity so that the identity checked for this
permission is system_server, which does have the correct permissions.
We'll ensure that no other processes can utilize this path via selinux
rules.
Bug: 191391382
Test: Manually tested that before this change, I saw an
'ActivityManager: startForegroundService() not allowed' error when
taking a bugreport while a trace is running, while after this change the
bugreport was taken successfully with no errors, and the trace was
included in the bugreport.
Change-Id: I4ae68047d588dfc87225ddf41288dc4093a71313
Merged-In: I472fe8acc2e59e93afd8475f51b5f347cd3ccc5d
(cherry picked from commit 1a856d556c829c20f2891d1f6a4545aa65baedb8)
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator_test.cpp')
0 files changed, 0 insertions, 0 deletions