Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Permission protect receipt of QUERY_PACKAGE_RESTART

Browse Source 
This change adds a signature permission to the system manifest intended
to guard receipt of the QUERY_PACKAGE_RESTART ordered broadcast so that
arbitrary apps cannot receive or inject bad data into the response.

Bug: 230755401
Test: manual - settings force stop works
Change-Id: Idffc0c1af702da9cb06747c800266efc48592b02
This commit is contained in:
Patrick Baumann
2022-07-12 17:07:11 +00:00
parent d59f2a46f5
commit e5e6e52f0f
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
core/res/AndroidManifest.xml
View File

@@ -6532,6 +6532,12 @@
<permission android:name="android.permission.MAKE_UID_VISIBLE"
android:protectionLevel="signature" />
<!-- Limits the system as the only handler of the QUERY_PACKAGE_RESTART broadcast
@hide -->
<permission android:name="android.permission.HANDLE_QUERY_PACKAGE_RESTART"
android:protectionLevel="signature" />
<uses-permission android:name="android.permission.HANDLE_QUERY_PACKAGE_RESTART" />
<!-- Attribution for Geofencing service. -->
<attribution android:tag="GeofencingService" android:label="@string/geofencing_service"/>
<!-- Attribution for Country Detector. -->