Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow system process register AttributionSource for app from other user

Browse Source 
Bug: 226322308
Test: TH
Change-Id: I397b1384fc067b372d83f32554967a3d09633a9e
This commit is contained in:
Nate Jiang
2022-06-01 15:38:33 -07:00
parent d79cb12422
commit 740634f4f5
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
services/core/java/com/android/server/pm/permission/PermissionManagerService.java
View File

@@ -966,8 +966,14 @@ public class PermissionManagerService extends IPermissionManager.Stub {
final PackageManagerInternal packageManagerInternal = LocalServices.getService(
PackageManagerInternal.class);
if (packageManagerInternal.getPackageUid(source.getPackageName(), 0,
UserHandle.getUserId(callingUid)) != source.getUid()) {
// TODO(b/234653108): Clean up this UID/package & cross-user check.
// If calling from the system process, allow registering attribution for package from
// any user
int userId = UserHandle.getUserId((callingUid == Process.SYSTEM_UID ? source.getUid()
: callingUid));
if (packageManagerInternal.getPackageUid(source.getPackageName(), 0, userId)
!= source.getUid()) {
throw new SecurityException("Cannot register attribution source for package:"
+ source.getPackageName() + " from uid:" + callingUid);
}