Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Re-evaluate permission state upon known certs change.

Browse Source 
Bug: 288515705
Test: PkgInstallSignatureVerificationTest
Change-Id: I7a21dc48e209d0773da4297028d45ce212881b1d
This commit is contained in:
Hai Zhang
2023-06-23 11:54:23 -07:00
parent 728e677876
commit 8e8b067e28
1 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
services/permission/java/com/android/server/permission/access/permission/AppIdPermissionPolicy.kt
View File

@@ -519,9 +519,15 @@ class AppIdPermissionPolicy : SchemePolicy() {
val isPermissionChanged = oldPermission == null ||
newPackageName != oldPermission.packageName ||
newPermission.protectionLevel != oldPermission.protectionLevel || (
oldPermission.isReconciled && newPermission.isRuntime &&
newPermission.groupName != null &&
newPermission.groupName != oldPermission.groupName
oldPermission.isReconciled && (
(
newPermission.isKnownSigner &&
newPermission.knownCerts != oldPermission.knownCerts
) || (
newPermission.isRuntime && newPermission.groupName != null &&
newPermission.groupName != oldPermission.groupName
)
)
)
if (isPermissionChanged) {
changedPermissionNames += permissionName