Merge "Don't create system fixed, revoked permissions" into qt-dev am: ed225f65b0

am: 260eb1893e Change-Id: I51f16388fbe6f3f70770243aa11e445c89572ce2
2019-05-31 14:49:21 -07:00
parent b6eb56f332 260eb1893e
commit 85db44d908
1 changed files with 8 additions and 0 deletions
--- a/services/core/java/com/android/server/pm/permission/PermissionManagerService.java
+++ b/services/core/java/com/android/server/pm/permission/PermissionManagerService.java
@@ -1173,6 +1173,14 @@ public class PermissionManagerService {
                                    }
                                }

+                                if (hardRestricted && !restrictionExempt
+                                        && (flags & FLAG_PERMISSION_SYSTEM_FIXED) != 0) {
+                                    // Applying a hard restriction implies revoking it. This might
+                                    // lead to a system-fixed, revoked permission.
+                                    flags &= ~FLAG_PERMISSION_SYSTEM_FIXED;
+                                    wasChanged = true;
+                                }
+
                                if (wasChanged) {
                                    updatedUserIds = ArrayUtils.appendInt(updatedUserIds, userId);
                                }