Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "RESTRICT AUTOMERGE Relax security exception for backport" into oc-dev

Browse Source
This commit is contained in:
TreeHugger Robot
2018-08-17 18:56:28 +00:00
committed by Android (Google) Code Review
parent fc28b6b724 a2405766db
commit 5b78b0015e
1 changed files with 13 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
services/core/java/com/android/server/pm/PackageManagerService.java
View File

@@ -4477,9 +4477,19 @@ public class PackageManagerService extends IPackageManager.Stub
if ((flags & PackageManager.MATCH_ANY_USER) != 0) {
// require the permission to be held; the calling uid and given user id referring
// to the same user is not sufficient
enforceCrossUserPermission(Binder.getCallingUid(), userId, false, false, true,
"MATCH_ANY_USER flag requires INTERACT_ACROSS_USERS permission at "
+ Debug.getCallers(5));
try {
enforceCrossUserPermission(Binder.getCallingUid(), userId, false, false, true,
"MATCH_ANY_USER flag requires INTERACT_ACROSS_USERS permission at "
+ Debug.getCallers(5));
} catch (SecurityException se) {
// For compatibility reasons, we can't throw a security exception here if we're
// looking for applications in our own user id. Instead, unset the MATCH_ANY_USER
// flag and move on.
if (userId != UserHandle.getCallingUserId()) {
throw se;
}
flags &= ~PackageManager.MATCH_ANY_USER;
}
} else if ((flags & PackageManager.MATCH_UNINSTALLED_PACKAGES) != 0 && isCallerSystemUser
&& sUserManager.hasManagedProfile(UserHandle.USER_SYSTEM)) {
// If the caller wants all packages and has a restricted profile associated with it,