Merge "Prevent system uid component from running in an isolated app process" into oc-dev
This commit is contained in:
@@ -3562,7 +3562,8 @@ public class ActivityManagerService extends IActivityManager.Stub
|
|||||||
final int procCount = procs.size();
|
final int procCount = procs.size();
|
||||||
for (int i = 0; i < procCount; i++) {
|
for (int i = 0; i < procCount; i++) {
|
||||||
final int procUid = procs.keyAt(i);
|
final int procUid = procs.keyAt(i);
|
||||||
if (UserHandle.isApp(procUid) || !UserHandle.isSameUser(procUid, uid)) {
|
if (UserHandle.isApp(procUid) || !UserHandle.isSameUser(procUid, uid)
|
||||||
|
|| UserHandle.isIsolated(procUid)) {
|
||||||
// Don't use an app process or different user process for system component.
|
// Don't use an app process or different user process for system component.
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user