Merge "Add permission checks to unified challenge cache APIs"

2022-09-30 18:11:19 +00:00
parent 29c159c087 d0d0a1c62e
commit 4b3b29f03b
1 changed files with 2 additions and 0 deletions
--- a/services/core/java/com/android/server/locksettings/LockSettingsService.java
+++ b/services/core/java/com/android/server/locksettings/LockSettingsService.java
@@ -2940,6 +2940,7 @@ public class LockSettingsService extends ILockSettings.Stub {

    @Override
    public boolean tryUnlockWithCachedUnifiedChallenge(int userId) {
+        checkPasswordReadPermission();
        try (LockscreenCredential cred = mManagedProfilePasswordCache.retrievePassword(userId)) {
            if (cred == null) {
                return false;
@@ -2951,6 +2952,7 @@ public class LockSettingsService extends ILockSettings.Stub {

    @Override
    public void removeCachedUnifiedChallenge(int userId) {
+        checkWritePermission();
        mManagedProfilePasswordCache.removePassword(userId);
    }