Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Apply check to Activity starting flow if it is a SandboxedActivity

Browse Source 
SandboxedActivity is a new an Activity which is part of the SdkSanbox
App and will run insdie sandbox process.
This cl adds a check to starting activity flow in case that the activity
is SandboxedActivity to ensure that the caller app can start it.

Test: atest com.android.server.sdksandbox.SdkSandboxManagerServiceUnitTest
Bug: 261730613
Change-Id: Ia862bfd8a2108d36ae7f08ed657f4b797cde6076
This commit is contained in:
Mohammed Rashidy
2022-12-07 18:21:30 +00:00
parent 3ee31de144
commit d2b4c9594a
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
services/core/java/com/android/server/wm/ActivityTaskManagerService.java
View File

@@ -37,6 +37,7 @@ import static android.app.ActivityTaskManager.INVALID_TASK_ID;
import static android.app.ActivityTaskManager.RESIZE_MODE_PRESERVE_WINDOW;
import static android.app.WindowConfiguration.ACTIVITY_TYPE_DREAM;
import static android.app.WindowConfiguration.WINDOWING_MODE_PINNED;
import static android.app.sdksandbox.SdkSandboxManager.ACTION_START_SANDBOXED_ACTIVITY;
import static android.content.Intent.FLAG_ACTIVITY_EXCLUDE_FROM_RECENTS;
import static android.content.Intent.FLAG_ACTIVITY_NEW_TASK;
import static android.content.pm.ActivityInfo.RESIZE_MODE_UNRESIZEABLE;
@@ -1260,6 +1261,17 @@ public class ActivityTaskManagerService extends IActivityTaskManager.Stub {
assertPackageMatchesCallingUid(callingPackage);
enforceNotIsolatedCaller("startActivityAsUser");
boolean isSandboxedActivity = (intent != null && intent.getAction() != null
&& intent.getAction().equals(ACTION_START_SANDBOXED_ACTIVITY));
if (isSandboxedActivity) {
SdkSandboxManagerLocal sdkSandboxManagerLocal = LocalManagerRegistry.getManager(
SdkSandboxManagerLocal.class);
sdkSandboxManagerLocal.enforceAllowedToHostSandboxedActivity(
intent, Binder.getCallingUid(), callingPackage
);
}
if (Process.isSdkSandboxUid(Binder.getCallingUid())) {
SdkSandboxManagerLocal sdkSandboxManagerLocal = LocalManagerRegistry.getManager(
SdkSandboxManagerLocal.class);