d9d17367670eb930d74d2e2ffeeb3c0e9bea0a23 - platform/frameworks/base

commit	d9d17367670eb930d74d2e2ffeeb3c0e9bea0a23	[log] [tgz]
author	Winson <chiuwinson@google.com>	Wed Oct 02 12:41:29 2019 -0700
committer	Winson <chiuwinson@google.com>	Thu Nov 21 12:01:41 2019 -0800
tree	38a6bcc86d8166a2bdb1122e0dbd5f4bad20e5ce
parent	64ed3ec44c68664ade3c7fa04f692a7144479ca6 [diff]

Overlayable actor enforcement

Validates that the caller of an OverlayManager API that mutates state
is actually allowed to act on the target as defined in the target's
overlayable tag.

<overlayable name="MyResources" actor="namespace/name">

An actor is valid if any of the following is true:
 - is root/system
 - is the target overlay package
 - has the CHANGE_OVERLAY_PACKAGES permission and an actor is not defined
 - is the same package name as the sole resolved Activity for the actor specified
     in the overlayable definition, with only pre-installed, namespaced actors
     currently supported

Bug: 119442583
Bug: 135052950

Test: atest SystemConfigNamedActorTest
Test: atest com.android.server.om

Change-Id: If56b9e8366852eaef84f6bb25c3e6871eaa3f219

core/java/android/content/om/OverlayableInfo.java[Added - diff]
core/java/android/content/res/ApkAssets.java[diff]
core/java/com/android/server/SystemConfig.java[diff]
core/jni/android_content_res_ApkAssets.cpp[diff]
libs/androidfw/include/androidfw/LoadedArsc.h[diff]
services/core/java/com/android/server/om/OverlayActorEnforcer.java[Added - diff]
services/core/java/com/android/server/om/OverlayManagerService.java[diff]
services/tests/servicestests/Android.bp[diff]
services/tests/servicestests/src/com/android/server/om/OverlayActorEnforcerTests.kt[Added - diff]
services/tests/servicestests/src/com/android/server/systemconfig/SystemConfigNamedActorTest.kt[Added - diff]
services/tests/servicestests/src/com/android/server/systemconfig/SystemConfigTest.java[Renamed from services/tests/servicestests/src/com/android/server/SystemConfigTest.java - diff]

11 files changed