Disallow prepare()-ing over an always on VPN app (1b1bcd7b) · Commits · e / os / android_frameworks_base

services/core/java/com/android/server/connectivity/Vpn.java

+6 −1

Original line number	Diff line number	Diff line
		@@ -264,7 +264,12 @@ public class Vpn {
		return true;
		}

		// Check if the caller is authorized.
		// Stop an existing always-on VPN from being dethroned by other apps.
		if (getAlwaysOnPackage() != null) {
		return false;
		}

		// Check that the caller is authorized.
		enforceControlPermission();

		prepareInternal(newPackage);