tree 9dc17991b7f9a4375281c6e5c4eb11963ec18273
parent 3802a2b526cd599f2880c25fec38dcec6abc8bef
author Janis Danisevskis <jdanis@google.com> 1488998100 -0800
committer Janis Danisevskis <jdanis@google.com> 1490293248 -0700

Fixes attestation id gathering from secondary android user

When Keystore attempts to gather the application attestation
ID for an app that runs not as the primary user/owner of the
device, the PackageManager would deny package manager access
to the required PackageInfo on the grounds that the request
came from a different user
(violates android.permission.INTERACT_ACROSS_USERS)

This patch adds an additional check to
KeyAttestationApplicationIdProviderService, that verifies the
caller is indeed Keystore. Then it drops the caller context
and retrieves the requested PackageInfo, before restoring
the calling context.

Bug: 35719178
Test: install APK [1] and run as secondary user

[1] https://drive.google.com/file/d/0BzV-JgYFLSDIRGY1WENncmFMVW8/view?ts=58d3f3e6
Change-Id: I91f93a56d10498e1ee3bdb983c701033594c3e57