Add missing check in hasGrantedPolicy

Add check that if component name is specified, it belong to the caller.

Bug: 192247339
Test: NA

Change-Id: I6f821d039a6dfd70fb005165af2c5cb13ad3de9b
Merged-In: I6f821d039a6dfd70fb005165af2c5cb13ad3de9b
(cherry picked from commit c7abd726dd)
This commit is contained in:
Ayush Sharma
2021-09-13 14:27:52 +00:00
parent 4f3715c78d
commit 251176e774

View File

@@ -3599,6 +3599,9 @@ public class DevicePolicyManagerService extends BaseIDevicePolicyManager {
final CallerIdentity caller = getCallerIdentity();
Preconditions.checkCallAuthorization(hasFullCrossUsersPermission(caller, userHandle));
Preconditions.checkCallAuthorization(
isCallingFromPackage(adminReceiver.getPackageName(), caller.getUid())
|| isSystemUid(caller));
synchronized (getLockObject()) {
ActiveAdmin administrator = getActiveAdminUncheckedLocked(adminReceiver, userHandle);