Allow any device with a device_owner to execute setDeviceOwnerSystemPropertyLocked(). am: 735b4dc0af am: d78a0d21cb

am: 82a3793269

Change-Id: I3f7fe9ba2c572eb0dda23386a62c50f58a6a08f9
This commit is contained in:
Greg Plesur
2017-02-09 20:06:10 +00:00
committed by android-build-merger

View File

@@ -1886,11 +1886,14 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
}
private void setDeviceOwnerSystemPropertyLocked() {
// Device owner may still be provisioned, do not set the read-only system property yet.
// Wear devices don't set device_provisioned until the device is paired, so allow
// device_owner property to be set without that.
if (!mIsWatch
&& mInjector.settingsGlobalGetInt(Settings.Global.DEVICE_PROVISIONED, 0) == 0) {
final boolean deviceProvisioned =
mInjector.settingsGlobalGetInt(Settings.Global.DEVICE_PROVISIONED, 0) != 0;
// If the device is not provisioned and there is currently no device owner, do not set the
// read-only system property yet, since Device owner may still be provisioned. For Wear
// devices, if there is already a device owner then it's OK to set the property to true now,
// regardless the provision state.
final boolean isWatchWithDeviceOwner = mIsWatch && mOwners.hasDeviceOwner();
if (!isWatchWithDeviceOwner && !deviceProvisioned) {
return;
}
// Still at the first stage of CryptKeeper double bounce, mOwners.hasDeviceOwner is