| commit | 75ae46d035ce600be3cac3ee597d5e379636fa42 | [log] [tgz] |
|---|---|---|
| author | Dmitry Dementyev <dementyev@google.com> | Tue Feb 14 13:15:36 2017 -0800 |
| committer | Dmitry Dementyev <dementyev@google.com> | Tue Feb 21 11:05:45 2017 -0800 |
| tree | cef06e80c951400a9b2fe14d85f3581c2ff7767c | |
| parent | 2e006b2b07c7c333c51fb9b447b8df6df66ba421 [diff] |
Add permission check to Intents used by Authenticator Settings. Setting shares system uid and can be used to bypass different security checks. We add proper handling for intents which resolve toexported=true activities with permission filed. Added nested preferences filtering. Bug: 33123882 Test: manual tests Change-Id: Ib5bab7989fc44b4391f9050c6b18f81c58c09cf6