Merge "Revert "Revert "[SettingsProvider] enforce permission on openFile""" into tm-dev am: d42fff5d21 am: 00871b04b4

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/18090063

Change-Id: Id6445124166e6cf33b6742d24937c7e4380bf4b5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
TreeHugger Robot
2022-05-04 02:14:39 +00:00
committed by Automerger Merge Worker

View File

@@ -818,6 +818,13 @@ public class SettingsProvider extends ContentProvider {
getContext().enforceCallingPermission(Manifest.permission.INTERACT_ACROSS_USERS,
"Access files from the settings of another user");
}
final String callingPackage = getCallingPackage();
if (mode.contains("w") && !Settings.checkAndNoteWriteSettingsOperation(getContext(),
Binder.getCallingUid(), callingPackage, getCallingAttributionTag(),
true /* throwException */)) {
Slog.e(LOG_TAG, "Package: " + callingPackage + " is not allowed to modify "
+ "system settings files.");
}
uri = ContentProvider.getUriWithoutUserId(uri);
final String cacheRingtoneSetting;