Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only am: fa94ce5c77

Browse Source 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/20321691

Change-Id: Ib9a16d7b8d8bc17f9a02e1584be05bbe56199f97
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Jing Ji
2023-03-03 01:29:55 +00:00
committed by Automerger Merge Worker
parent dd4c9e8255 fa94ce5c77
commit 71620c5151
3 changed files with 38 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
core/java/android/app/ActivityManager.java
View File

@@ -3934,6 +3934,9 @@ public class ActivityManager {
* processes to reclaim memory; the system will take care of restarting
* these processes in the future as needed.
*
* <p class="note">Third party applications can only use this API to kill their own processes.
* </p>
*
* @param packageName The name of the package whose processes are to
* be killed.
*/

6
core/res/AndroidManifest.xml
View File

@@ -3151,7 +3151,11 @@
android:protectionLevel="normal" />
<!-- Allows an application to call
{@link android.app.ActivityManager#killBackgroundProcesses}.
{@link android.app.ActivityManager#killBackgroundProcesses}.
<p class="note">Third party applications can only use this API to kill their own
processes.</p>
<p>Protection level: normal
-->
<permission android:name="android.permission.KILL_BACKGROUND_PROCESSES"

32
services/core/java/com/android/server/am/ActivityManagerService.java
View File

@@ -3836,8 +3836,20 @@ public class ActivityManagerService extends IActivityManager.Stub
Slog.w(TAG, msg);
throw new SecurityException(msg);
}
final int callingUid = Binder.getCallingUid();
final int callingPid = Binder.getCallingPid();
final int callingAppId = UserHandle.getAppId(callingUid);
userId = mUserController.handleIncomingUser(Binder.getCallingPid(), Binder.getCallingUid(),
ProcessRecord proc;
synchronized (mPidsSelfLocked) {
proc = mPidsSelfLocked.get(callingPid);
}
final boolean hasKillAllPermission = PERMISSION_GRANTED == checkPermission(
android.Manifest.permission.FORCE_STOP_PACKAGES, callingPid, callingUid)
|| UserHandle.isCore(callingUid)
|| (proc != null && proc.info.isSystemApp());
userId = mUserController.handleIncomingUser(callingPid, callingUid,
userId, true, ALLOW_FULL_ONLY, "killBackgroundProcesses", null);
final int[] userIds = mUserController.expandUserId(userId);
@@ -3852,7 +3864,7 @@ public class ActivityManagerService extends IActivityManager.Stub
targetUserId));
} catch (RemoteException e) {
}
if (appId == -1) {
if (appId == -1 || (!hasKillAllPermission && appId != callingAppId)) {
Slog.w(TAG, "Invalid packageName: " + packageName);
return;
}
@@ -3880,6 +3892,22 @@ public class ActivityManagerService extends IActivityManager.Stub
throw new SecurityException(msg);
}
final int callingUid = Binder.getCallingUid();
final int callingPid = Binder.getCallingPid();
ProcessRecord proc;
synchronized (mPidsSelfLocked) {
proc = mPidsSelfLocked.get(callingPid);
}
if (callingUid >= FIRST_APPLICATION_UID
&& (proc == null || !proc.info.isSystemApp())) {
final String msg = "Permission Denial: killAllBackgroundProcesses() from pid="
+ callingPid + ", uid=" + callingUid + " is not allowed";
Slog.w(TAG, msg);
// Silently return to avoid existing apps from crashing.
return;
}
final long callingId = Binder.clearCallingIdentity();
try {
synchronized (this) {