+ * SystemUI always run as user 0 to process all of direct reply. SystemUI has the poer of + * INTERACT_ACROSS_USERS_FULL. However, all of the notifications not only belong to user 0 but + * also to the other users in multiple user environment. + *
+ * + * @see #setRestrictedAcrossUser(boolean) + */ + private boolean mIsRestrictedAcrossUser; + private volatile Locale mCurrentSpellCheckerLocaleCache; // It is possible to have a selection even when mEditor is null (programmatically set, like when @@ -10439,6 +10456,24 @@ public class TextView extends View implements ViewTreeObserver.OnPreDrawListener : mCurrentSpellCheckerLocaleCache; } + /** + * To notify the TextView to restricted the power of the app granted INTERACT_ACROSS_USERS_FULL + * permission. + *+ * Most of applications should not granted the INTERACT_ACROSS_USERS_FULL permssion. + * SystemUI is the special one that run in user 0 process to handle multiple user notification. + * Unforunately, the power of INTERACT_ACROSS_USERS_FULL should be limited or restricted for + * preventing from information leak.
+ *This function call is called for SystemUI Keyguard and Notification.
+ * + * @param isRestricted is true if the power of INTERACT_ACROSS_USERS_FULL should be limited. + * @hide + */ + @RequiresPermission(INTERACT_ACROSS_USERS_FULL) + public final void setRestrictedAcrossUser(boolean isRestricted) { + mIsRestrictedAcrossUser = isRestricted; + } + /** * This is a temporary method. Future versions may support multi-locale text. * Caveat: This method may not return the latest text services locale, but this should be @@ -11647,6 +11682,12 @@ public class TextView extends View implements ViewTreeObserver.OnPreDrawListener } boolean canCut() { + if (mIsRestrictedAcrossUser + && UserHandle.myUserId() != ActivityManager.getCurrentUser()) { + // When it's restricted, and the curren user is not the process user. It can't cut + // because it may cut the text of the user 10 into the clipboard of user 0. + return false; + } if (hasPasswordTransformationMethod()) { return false; } @@ -11660,6 +11701,12 @@ public class TextView extends View implements ViewTreeObserver.OnPreDrawListener } boolean canCopy() { + if (mIsRestrictedAcrossUser + && UserHandle.myUserId() != ActivityManager.getCurrentUser()) { + // When it's restricted, and the curren user is not the process user. It can't copy + // because it may copy the text of the user 10 to the clipboard of user 0. + return false; + } if (hasPasswordTransformationMethod()) { return false; } @@ -11689,6 +11736,12 @@ public class TextView extends View implements ViewTreeObserver.OnPreDrawListener } boolean canPaste() { + if (mIsRestrictedAcrossUser + && UserHandle.myUserId() != ActivityManager.getCurrentUser()) { + // When it's restricted, and the curren user is not the process user. It can't paste + // because it may copy the text from the user 0 clipboard in current user is 10. + return false; + } return (mText instanceof Editable && mEditor != null && mEditor.mKeyListener != null && getSelectionStart() >= 0 diff --git a/packages/SystemUI/src/com/android/keyguard/KeyguardPasswordView.java b/packages/SystemUI/src/com/android/keyguard/KeyguardPasswordView.java index 9a0abc56afdf1..3f168dae0e03b 100644 --- a/packages/SystemUI/src/com/android/keyguard/KeyguardPasswordView.java +++ b/packages/SystemUI/src/com/android/keyguard/KeyguardPasswordView.java @@ -79,6 +79,7 @@ public class KeyguardPasswordView extends KeyguardAbsKeyInputView @Override protected void resetState() { + mPasswordEntry.setRestrictedAcrossUser(true); mSecurityMessageDisplay.setMessage(""); final boolean wasDisabled = mPasswordEntry.isEnabled(); setPasswordEntryEnabled(true); @@ -169,6 +170,7 @@ public class KeyguardPasswordView extends KeyguardAbsKeyInputView Context.INPUT_METHOD_SERVICE); mPasswordEntry = findViewById(getPasswordTextViewId()); + mPasswordEntry.setRestrictedAcrossUser(true); mPasswordEntryDisabler = new TextViewInputDisabler(mPasswordEntry); mPasswordEntry.setKeyListener(TextKeyListener.getInstance()); mPasswordEntry.setInputType(InputType.TYPE_CLASS_TEXT diff --git a/packages/SystemUI/src/com/android/systemui/statusbar/policy/RemoteInputView.java b/packages/SystemUI/src/com/android/systemui/statusbar/policy/RemoteInputView.java index fe84acd7b108e..78ea72e322db5 100644 --- a/packages/SystemUI/src/com/android/systemui/statusbar/policy/RemoteInputView.java +++ b/packages/SystemUI/src/com/android/systemui/statusbar/policy/RemoteInputView.java @@ -192,6 +192,7 @@ public class RemoteInputView extends LinearLayout implements View.OnClickListene LayoutInflater.from(context).inflate(R.layout.remote_input, root, false); v.mController = controller; v.mEntry = entry; + v.mEditText.setRestrictedAcrossUser(true); v.setTag(VIEW_TAG); // Disable the TextClassifier to avoid cross user interactions.