Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Enforce USE_ATTESTATION_VERIFICATION_SERVICE permission to call APIs.

Browse Source 
Bug: 233223690
Test: atest AttestationVerificationTest
Test: removed permission from test AndroidManifest and verified failure
Change-Id: I6dda91bb0bdf52e8e1456c0a607c224528a6d24a
This commit is contained in:
Dave McCloskey
2022-05-19 09:54:54 -07:00
parent 8890d47366
commit 931bdc3451
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
services/core/java/com/android/server/security/AttestationVerificationManagerService.java
View File

@@ -16,6 +16,7 @@
package com.android.server.security;
import static android.Manifest.permission.USE_ATTESTATION_VERIFICATION_SERVICE;
import static android.security.attestationverification.AttestationVerificationManager.PROFILE_PEER_DEVICE;
import static android.security.attestationverification.AttestationVerificationManager.PROFILE_SELF_TRUSTED;
import static android.security.attestationverification.AttestationVerificationManager.RESULT_FAILURE;
@@ -60,6 +61,7 @@ public class AttestationVerificationManagerService extends SystemService {
Bundle requirements,
byte[] attestation,
AndroidFuture resultCallback) throws RemoteException {
enforceUsePermission();
try {
Slog.d(TAG, "verifyAttestation");
verifyAttestationForAllVerifiers(profile, localBindingType, requirements,
@@ -73,9 +75,14 @@ public class AttestationVerificationManagerService extends SystemService {
@Override
public void verifyToken(VerificationToken token, ParcelDuration parcelDuration,
AndroidFuture resultCallback) throws RemoteException {
enforceUsePermission();
// TODO(b/201696614): Implement
resultCallback.complete(RESULT_UNKNOWN);
}
private void enforceUsePermission() {
getContext().enforceCallingOrSelfPermission(USE_ATTESTATION_VERIFICATION_SERVICE, null);
}
};
private void verifyAttestationForAllVerifiers(