Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Tweak javadoc of setResetPasswordToken" into oc-dev

Browse Source 
am: ae23290ef5

Change-Id: Ib8988c2c0c07aba71fe995a64c7bb7d8fe504141
This commit is contained in:
Rubin Xu
2017-04-05 20:07:18 +00:00
committed by android-build-merger
parent 20ea785a18 ae23290ef5
commit b9b4825c8b
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
core/java/android/app/admin/DevicePolicyManager.java
View File

@@ -2768,9 +2768,11 @@ public class DevicePolicyManager {
* or clears the lockscreen password.
* <p>
* <em>This token is highly sensitive and should be treated at the same level as user
* credentials. In particular, NEVER store this token on device in plaintext, especially in
* Device-Encrypted storage if the token will be used to reset password on FBE devices before
* user unlocks.
* credentials. In particular, NEVER store this token on device in plaintext. Do not store
* the plaintext token in device-encrypted storage if it will be needed to reset password on
* file-based encryption devices before user unlocks. Consider carefully how any password token
* will be stored on your server and who will need access to them. Tokens may be the subject of
* legal access requests.
* </em>
*
* @param admin Which {@link DeviceAdminReceiver} this request is associated with.