f28bec4150dc3c4e85c5991f2ea97cc3b2419032 - platform/frameworks/base

commit	f28bec4150dc3c4e85c5991f2ea97cc3b2419032	[log] [tgz]
author	Mårten Kongstad <marten.kongstad@sony.com>	Thu Nov 16 13:07:30 2017 +0100
committer	Todd Kennedy <toddke@google.com>	Tue May 08 16:13:42 2018 -0700
tree	f08ad7e12243139b7a9189d547a41d55498d9bd3
parent	3e9331125af5a71d9a22df453558284e976d7a29 [diff]

OMS: harden permission checks

The IOverlayManager.aidl interface is protected by certain permissions.
The overlay manager implements the permission checks by calling
enforceCallingOrSelfPermission, but this method needlessly includes the
permissions of system_server in the check.

Harden the permission checks by switching from
enforceCallingOrSelfPermission to enforceCallingPermission.

Bug: 78809702
Test: atest OverlayHostTests OverlayDeviceTests
Change-Id: I5851dd1683adf644ea8e5a58dce4d7377664342e

services/core/java/com/android/server/om/OverlayManagerService.java[diff]

1 file changed

tree: f08ad7e12243139b7a9189d547a41d55498d9bd3