Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d1719284 authored by Gavin Corkery's avatar Gavin Corkery Committed by Automerger Merge Worker
Browse files

Merge "Add DeviceConfig flag for enforcing receiver restrictions" into tm-dev... 

Merge "Add DeviceConfig flag for enforcing receiver restrictions" into tm-dev am: c7c60d5e am: 1669c5fe

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/18356870



Change-Id: Ib9e877132f6cf27af0ad57df60d987ec3cd535ad
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents b9b794e2 1669c5fe

services/core/java/com/android/server/am/ActivityManagerService.java

+53 −1
Original line number Diff line number Diff line
@@ -1531,6 +1531,8 @@ public class ActivityManagerService extends IActivityManager.Stub 
    // Encapsulates the global setting "hidden_api_blacklist_exemptions"

    final HiddenApiSettings mHiddenApiBlacklist;













    final SdkSandboxSettings mSdkSandboxSettings;



























    private final PlatformCompat mPlatformCompat;





























    PackageManagerInternal mPackageManagerInt;










@@ -2236,6 +2238,53 @@ public class ActivityManagerService extends IActivityManager.Stub













        }















    }



























    /**













     * Handles settings related to the enforcement of SDK sandbox restrictions.













     */













    static class SdkSandboxSettings implements DeviceConfig.OnPropertiesChangedListener {

























        private final Context mContext;













        private final Object mLock = new Object();

























        @GuardedBy("mLock")













        private boolean mEnforceBroadcastReceiverRestrictions;

























        /**













         * Property to enforce broadcast receiver restrictions for SDK sandbox processes. If the













         * value of this property is {@code true}, the restrictions will be enforced.













         */













        public static final String ENFORCE_BROADCAST_RECEIVER_RESTRICTIONS =













                "enforce_broadcast_receiver_restrictions";

























        SdkSandboxSettings(Context context) {













            mContext = context;













        }

























        void registerObserver() {













            synchronized (mLock) {













                mEnforceBroadcastReceiverRestrictions = DeviceConfig.getBoolean(













                        DeviceConfig.NAMESPACE_SDK_SANDBOX,













                        ENFORCE_BROADCAST_RECEIVER_RESTRICTIONS, false);













                DeviceConfig.addOnPropertiesChangedListener(DeviceConfig.NAMESPACE_SDK_SANDBOX,













                        mContext.getMainExecutor(), this);













            }













        }

























        @Override













        public void onPropertiesChanged(DeviceConfig.Properties properties) {













            synchronized (mLock) {













                mEnforceBroadcastReceiverRestrictions = properties.getBoolean(













                        ENFORCE_BROADCAST_RECEIVER_RESTRICTIONS, false);













            }













        }

























        boolean isBroadcastReceiverRestrictionsEnforced() {













            synchronized (mLock) {













                return mEnforceBroadcastReceiverRestrictions;













            }













        }













    }



























    AppOpsManager getAppOpsManager() {















        if (mAppOpsManager == null) {















            mAppOpsManager = mContext.getSystemService(AppOpsManager.class);










@@ -2278,6 +2327,7 @@ public class ActivityManagerService extends IActivityManager.Stub













        mProcStartHandlerThread = null;















        mProcStartHandler = null;















        mHiddenApiBlacklist = null;













        mSdkSandboxSettings = null;















        mFactoryTest = FACTORY_TEST_OFF;















        mUgmInternal = LocalServices.getService(UriGrantsManagerInternal.class);















        mInternal = new LocalService();










@@ -2397,6 +2447,7 @@ public class ActivityManagerService extends IActivityManager.Stub













        mAtmInternal = LocalServices.getService(ActivityTaskManagerInternal.class);





























        mHiddenApiBlacklist = new HiddenApiSettings(mHandler, mContext);













        mSdkSandboxSettings = new SdkSandboxSettings(mContext);





























        Watchdog.getInstance().addMonitor(this);















        Watchdog.getInstance().addThread(mHandler);










@@ -7904,6 +7955,7 @@ public class ActivityManagerService extends IActivityManager.Stub













        final boolean alwaysFinishActivities =















                Settings.Global.getInt(resolver, ALWAYS_FINISH_ACTIVITIES, 0) != 0;















        mHiddenApiBlacklist.registerObserver();













        mSdkSandboxSettings.registerObserver();















        mPlatformCompat.registerContentObserver();





























        mAppProfiler.retrieveSettings();










@@ -12975,7 +13027,7 @@ public class ActivityManagerService extends IActivityManager.Stub













        // Allow Sandbox process to register only unexported receivers.















        if ((flags & Context.RECEIVER_NOT_EXPORTED) != 0) {















            enforceNotIsolatedCaller("registerReceiver");













        } else {













        } else if (mSdkSandboxSettings.isBroadcastReceiverRestrictionsEnforced()) {















            enforceNotIsolatedOrSdkSandboxCaller("registerReceiver");















        }















        ArrayList<Intent> stickyIntents = null;