Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Adds caller check to getAllPackages()" into rvc-dev

Browse Source
This commit is contained in:
Patrick Baumann
2021-03-03 18:18:56 +00:00
committed by Android (Google) Code Review
parent 91ceae3ef7 9b694ef4d4
commit 649d086c2c
2 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
core/java/android/os/Process.java
View File

@@ -202,6 +202,12 @@ public class Process {
*/ */
public static final int SE_UID = 1068; public static final int SE_UID = 1068;
/**
* Defines the UID/GID for the iorapd.
* @hide
*/
public static final int IORAPD_UID = 1071;
/** /**
* Defines the UID/GID for the NetworkStack app. * Defines the UID/GID for the NetworkStack app.
* @hide * @hide

4
services/core/java/com/android/server/pm/PackageManagerService.java
View File

@@ -6169,6 +6169,10 @@ public class PackageManagerService extends IPackageManager.Stub
@Override @Override
public List<String> getAllPackages() { public List<String> getAllPackages() {
// Allow iorapd to call this method.
if (Binder.getCallingUid() != Process.IORAPD_UID) {
enforceSystemOrRootOrShell("getAllPackages is limited to privileged callers");
}
final int callingUid = Binder.getCallingUid(); final int callingUid = Binder.getCallingUid();
final int callingUserId = UserHandle.getUserId(callingUid); final int callingUserId = UserHandle.getUserId(callingUid);
synchronized (mLock) { synchronized (mLock) {