Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 251176e7 authored by Ayush Sharma's avatar Ayush Sharma
Browse files

Add missing check in hasGrantedPolicy 

Add check that if component name is specified, it belong to the caller.

Bug: 192247339
Test: NA

Change-Id: I6f821d039a6dfd70fb005165af2c5cb13ad3de9b
Merged-In: I6f821d039a6dfd70fb005165af2c5cb13ad3de9b
(cherry picked from commit c7abd726)
parent 4f3715c7

services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java

+3 −0
Original line number Diff line number Diff line
@@ -3599,6 +3599,9 @@ public class DevicePolicyManagerService extends BaseIDevicePolicyManager { 














        final CallerIdentity caller = getCallerIdentity();















        Preconditions.checkCallAuthorization(hasFullCrossUsersPermission(caller, userHandle));













        Preconditions.checkCallAuthorization(













                isCallingFromPackage(adminReceiver.getPackageName(), caller.getUid())













                        || isSystemUid(caller));





























        synchronized (getLockObject()) {















            ActiveAdmin administrator = getActiveAdminUncheckedLocked(adminReceiver, userHandle);