Merge "Revert "Revert "[SettingsProvider] enforce permission on openFile""" into tm-dev am: d42fff5d21

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/18090063

Change-Id: Ie984132366dd4edcdf17f7e3719b4410e0782b08
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

packages/SettingsProvider/src/com/android/providers/settings/SettingsProvider.java

@@ -818,6 +818,13 @@ public class SettingsProvider extends ContentProvider {
             getContext().enforceCallingPermission(Manifest.permission.INTERACT_ACROSS_USERS,
                     "Access files from the settings of another user");
         }
+        final String callingPackage = getCallingPackage();
+        if (mode.contains("w") && !Settings.checkAndNoteWriteSettingsOperation(getContext(),
+                Binder.getCallingUid(), callingPackage, getCallingAttributionTag(),
+                true /* throwException */)) {
+            Slog.e(LOG_TAG, "Package: " + callingPackage + " is not allowed to modify "
+                    + "system settings files.");
+        }
         uri = ContentProvider.getUriWithoutUserId(uri);
 
         final String cacheRingtoneSetting;