Merge "Add permission check to setAllowOnlyVpnForUids" into pi-dev

2018-03-08 15:38:18 +00:00
parent 6279c5ab6e be806661d0
commit 269357aa0e
1 changed files with 2 additions and 0 deletions
--- a/services/core/java/com/android/server/NetworkManagementService.java
+++ b/services/core/java/com/android/server/NetworkManagementService.java
@@ -1789,6 +1789,8 @@ public class NetworkManagementService extends INetworkManagementService.Stub
    @Override
    public void setAllowOnlyVpnForUids(boolean add, UidRange[] uidRanges)
            throws ServiceSpecificException {
+        mContext.enforceCallingOrSelfPermission(NETWORK_STACK, TAG);
+
        try {
            mNetdService.networkRejectNonSecureVpn(add, uidRanges);
        } catch (ServiceSpecificException e) {