Merge "DPC should not be allowed to grant development permission" (35af532f) · Commits · e / os / android_frameworks_base

services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java

+13 −0

Original line number	Diff line number	Diff line
		@@ -99,6 +99,7 @@ import android.content.pm.PackageManager;
		import android.content.pm.PackageManager.NameNotFoundException;
		import android.content.pm.PackageManagerInternal;
		import android.content.pm.ParceledListSlice;
		import android.content.pm.PermissionInfo;
		import android.content.pm.ResolveInfo;
		import android.content.pm.ServiceInfo;
		import android.content.pm.StringParceledListSlice;
		@@ -9572,6 +9573,9 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
		< android.os.Build.VERSION_CODES.M) {
		return false;
		}
		if (!isRuntimePermission(permission)) {
		return false;
		}
		final PackageManager packageManager = mInjector.getPackageManager();
		switch (grantState) {
		case DevicePolicyManager.PERMISSION_GRANT_STATE_GRANTED: {
		@@ -9598,6 +9602,8 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
		return true;
		} catch (SecurityException se) {
		return false;
		} catch (NameNotFoundException e) {
		return false;
		} finally {
		mInjector.binderRestoreCallingIdentity(ident);
		}
		@@ -9647,6 +9653,13 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
		}
		}

		public boolean isRuntimePermission(String permissionName) throws NameNotFoundException {
		final PackageManager packageManager = mInjector.getPackageManager();
		PermissionInfo permissionInfo = packageManager.getPermissionInfo(permissionName, 0);
		return (permissionInfo.protectionLevel & PermissionInfo.PROTECTION_MASK_BASE)
		== PermissionInfo.PROTECTION_DANGEROUS;
		}

		@Override
		public boolean isProvisioningAllowed(String action, String packageName) {
		Preconditions.checkNotNull(packageName);