Enforce missing permission getCameraDisabled
Add following checks: * Caller has cross user permission if user other than caller is queried * If componentName is specified than it belongs to the caller. Also, Merged security exceptions in getCallerIdentity, as there was a information leak. From different security exceptions it could be deduced if particular package is admin package. Bug: 193033501 Test: atest MixedProfileOwnerHostSideTransferTest#testTransferPolicies atest OrgOwnedProfileOwnerTest#testCameraDisabledOnParentIsEnforced atest ManagedProfileTest#testCameraPolicy atest MixedDeviceOwnerTest#testSetCameraDisabledLogged atest MixedProfileOwnerTest#testSetCameraDisabledLogged atest MixedManagedProfileOwnerTest#testSetCameraDisabledLogged atest com.android.server.devicepolicy.DevicePolicyManagerTest#testDaDisallowedPolicies_SecurityException atest com.android.server.devicepolicy.DevicePolicyManagerTest#testGetMacAddress Change-Id: I521ffd81f93c5c2576e9324152856b4a4933c094 Merged-In: I521ffd81f93c5c2576e9324152856b4a4933c094 (cherry picked from commit 30e223d1)
Loading
Please register or sign in to comment