Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1d4edc60 authored by Sandeep Bandaru's avatar Sandeep Bandaru Committed by Android (Google) Code Review
Browse files

Merge "Extend service permission list only accessible from SystemUid." into main

parents c54807b8 31ce2795

services/core/java/com/android/server/am/ActiveServices.java

+4 −1
Original line number Diff line number Diff line
@@ -5077,7 +5077,10 @@ public final class ActiveServices { 
                        + " requires " + r.permission);

                return new ServiceLookupResult(r.permission);

            } else if ((Manifest.permission.BIND_HOTWORD_DETECTION_SERVICE.equals(r.permission)

                    || Manifest.permission.BIND_VISUAL_QUERY_DETECTION_SERVICE.equals(r.permission))

                    || Manifest.permission.BIND_VISUAL_QUERY_DETECTION_SERVICE.equals(r.permission)

                    || Manifest.permission.BIND_WEARABLE_SENSING_SERVICE.equals(r.permission)

                    || Manifest.permission.BIND_ON_DEVICE_SANDBOXED_INFERENCE_SERVICE.equals(

                    r.permission))

                    && callingUid != Process.SYSTEM_UID) {

                // Hotword detection and visual query detection must run in its own sandbox, and we

                // don't even trust its enclosing application to bind to it - only the system.