Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[automerger] Limit IsSeparateProfileChallengeAllowed to system callers am: 9061fcc46b am: 39f5432697 am: 9c0bc5405e am: 55209aca88 am: d5ce9a41b6

Browse Source 
Change-Id: I9f9adc6f9979b3ee946e43150556f0ba971a67f8
This commit is contained in:
Android Build Merger (Role)
2019-04-10 12:44:06 +00:00
parent 2833e406e0 d5ce9a41b6
commit 20007cb46f
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java
View File

@@ -3436,6 +3436,9 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
@Override @Override
public boolean isSeparateProfileChallengeAllowed(int userHandle) { public boolean isSeparateProfileChallengeAllowed(int userHandle) {
if (!isCallerWithSystemUid()) {
throw new SecurityException("Caller must be system");
}
ComponentName profileOwner = getProfileOwner(userHandle); ComponentName profileOwner = getProfileOwner(userHandle);
// Profile challenge is supported on N or newer release. // Profile challenge is supported on N or newer release.
return profileOwner != null && return profileOwner != null &&