Add missing check in hasGrantedPolicy
Add check that if component name is specified, it belong to the caller.
Bug: 192247339
Test: NA
Change-Id: I6f821d039a6dfd70fb005165af2c5cb13ad3de9b
Merged-In: I6f821d039a6dfd70fb005165af2c5cb13ad3de9b
(cherry picked from commit c7abd726dd)
This commit is contained in:
@@ -3599,6 +3599,9 @@ public class DevicePolicyManagerService extends BaseIDevicePolicyManager {
|
||||
|
||||
final CallerIdentity caller = getCallerIdentity();
|
||||
Preconditions.checkCallAuthorization(hasFullCrossUsersPermission(caller, userHandle));
|
||||
Preconditions.checkCallAuthorization(
|
||||
isCallingFromPackage(adminReceiver.getPackageName(), caller.getUid())
|
||||
|| isSystemUid(caller));
|
||||
|
||||
synchronized (getLockObject()) {
|
||||
ActiveAdmin administrator = getActiveAdminUncheckedLocked(adminReceiver, userHandle);
|
||||
|
||||
Reference in New Issue
Block a user