Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f4811159 authored by Julia Reynolds's avatar Julia Reynolds
Browse files

Check caller's uid before allowing notification policy access. 

Bug: 29421441
Change-Id: I7460268595e932d54660b02007bcd68b95fe8aec
parent d061c3ab

services/core/java/com/android/server/notification/NotificationManagerService.java

+5 −0
Original line number Diff line number Diff line
@@ -1642,6 +1642,7 @@ public class NotificationManagerService extends SystemService { 
        }



        private void enforcePolicyAccess(String pkg, String method) {

            checkCallerIsSameApp(pkg);

            if (!checkPolicyAccess(pkg)) {

                Slog.w(TAG, "Notification policy access denied calling " + method);

                throw new SecurityException("Notification policy access denied");
@@ -3130,6 +3131,10 @@ public class NotificationManagerService extends SystemService { 
        if (isCallerSystem()) {

            return;

        }

        checkCallerIsSameApp(pkg);

    }



    private static void checkCallerIsSameApp(String pkg) {

        final int uid = Binder.getCallingUid();

        try {

            ApplicationInfo ai = AppGlobals.getPackageManager().getApplicationInfo(