Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9061fcc4 authored by Pavel Grafov's avatar Pavel Grafov
Browse files

Limit IsSeparateProfileChallengeAllowed to system callers 

Fixes: 128599668
Test: build, set up separate challenge
Merged-In: I2fef9ab13614627c0f1bcca04759d0974fc6181a
Change-Id: I2fef9ab13614627c0f1bcca04759d0974fc6181a
parent 7b5a5769

services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java

+3 −0
Original line number Diff line number Diff line
@@ -2999,6 +2999,9 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub { 


    @Override

    public boolean isSeparateProfileChallengeAllowed(int userHandle) {

        if (!isCallerWithSystemUid()) {

            throw new SecurityException("Caller must be system");

        }

        ComponentName profileOwner = getProfileOwner(userHandle);

        // Profile challenge is supported on N or newer release.

        return profileOwner != null &&