Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

am 3eaf7d21: am 6501720c: am 489043d4: am 9a81a182: Merge "Don\'t always transfer device owner status to other users." into mnc-dev

Browse Source 
* commit '3eaf7d2155d0c513eb08f66abc02f87b09659be7':
  Don't always transfer device owner status to other users.
This commit is contained in:
Rubin Xu
2015-07-31 13:33:39 +00:00
committed by Android Git Automerger
parent 33cb97c0f0 3eaf7d2155
commit 0550536b27
1 changed files with 15 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java
View File

@@ -1277,11 +1277,13 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
&& !hasUserSetupCompleted(userId);
if (reqPolicy == DeviceAdminInfo.USES_POLICY_DEVICE_OWNER) {
if (ownsDevice || (userId == UserHandle.USER_OWNER && ownsInitialization)) {
if ((userId == UserHandle.USER_OWNER && (ownsDevice || ownsInitialization))
|| (ownsDevice && ownsProfile)) {
return true;
}
} else if (reqPolicy == DeviceAdminInfo.USES_POLICY_PROFILE_OWNER) {
if (ownsDevice || ownsProfile || ownsInitialization) {
if ((userId == UserHandle.USER_OWNER && ownsDevice) || ownsProfile
|| ownsInitialization) {
return true;
}
} else {
@@ -4244,6 +4246,17 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
throw new IllegalArgumentException("Invalid component name " + initializer
+ " for device initializer");
}
boolean isInitializerSystemApp;
try {
isInitializerSystemApp = isSystemApp(AppGlobals.getPackageManager(),
initializer.getPackageName(), Binder.getCallingUserHandle().getIdentifier());
} catch (RemoteException | IllegalArgumentException e) {
isInitializerSystemApp = false;
Slog.e(LOG_TAG, "Fail to check if device initialzer is system app.", e);
}
if (!isInitializerSystemApp) {
throw new IllegalArgumentException("Only system app can be set as device initializer.");
}
synchronized (this) {
enforceCanSetDeviceInitializer(who);