Merge remote-tracking branch 'origin/lineage-16.0' into v1-pie (c3a799e9) · Commits · e / os / android_packages_apps_Settings

src/com/android/settings/CredentialStorage.java

+14 −1

Original line number	Diff line number	Diff line
		@@ -131,7 +131,7 @@ public final class CredentialStorage extends Activity {
		String action = intent.getAction();
		UserManager userManager = (UserManager) getSystemService(Context.USER_SERVICE);
		if (!userManager.hasUserRestriction(UserManager.DISALLOW_CONFIG_CREDENTIALS)) {
		if (ACTION_RESET.equals(action)) {
		if (ACTION_RESET.equals(action) && checkCallerIsSelf()) {
		new ResetDialog();
		} else {
		if (ACTION_INSTALL.equals(action) && checkCallerIsCertInstallerOrSelfInProfile()) {
		@@ -427,6 +427,19 @@ public final class CredentialStorage extends Activity {
		}
		}

		/**
		* Check that the caller is Settings.
		*/
		private boolean checkCallerIsSelf() {
		try {
		return Process.myUid() == android.app.ActivityManager.getService()
		.getLaunchedFromUid(getActivityToken());
		} catch (RemoteException re) {
		// Error talking to ActivityManager, just give up
		return false;
		}
		}

		/**
		* Check that the caller is either certinstaller or Settings running in a profile of this user.
		*/

src/com/android/settings/users/AppRestrictionsFragment.java

+17 −7

Original line number	Diff line number	Diff line
		@@ -17,6 +17,7 @@
		package com.android.settings.users;

		import android.app.Activity;
		import android.content.ActivityNotFoundException;
		import android.content.BroadcastReceiver;
		import android.content.Context;
		import android.content.Intent;
		@@ -44,6 +45,7 @@ import android.support.v7.preference.Preference.OnPreferenceChangeListener;
		import android.support.v7.preference.Preference.OnPreferenceClickListener;
		import android.support.v7.preference.PreferenceGroup;
		import android.support.v7.preference.PreferenceViewHolder;
		import android.util.EventLog;
		import android.util.Log;
		import android.view.View;
		import android.view.View.OnClickListener;
		@@ -634,7 +636,15 @@ public class AppRestrictionsFragment extends SettingsPreferenceFragment implemen
		} else if (restrictionsIntent != null) {
		preference.setRestrictions(restrictions);
		if (invokeIfCustom && AppRestrictionsFragment.this.isResumed()) {
		try {
		assertSafeToStartCustomActivity(restrictionsIntent);
		} catch (ActivityNotFoundException \| SecurityException e) {
		// return without startActivity
		Log.e(TAG, "Cannot start restrictionsIntent " + e);
		EventLog.writeEvent(0x534e4554, "200688991", -1 /* UID */, "");
		return;
		}

		int requestCode = generateCustomActivityRequestCode(
		RestrictionsResultReceiver.this.preference);
		AppRestrictionsFragment.this.startActivityForResult(
		@@ -648,14 +658,14 @@ public class AppRestrictionsFragment extends SettingsPreferenceFragment implemen
		if (intent.getPackage() != null && intent.getPackage().equals(packageName)) {
		return;
		}
		// Activity can be started if intent resolves to multiple activities
		List<ResolveInfo> resolveInfos = AppRestrictionsFragment.this.mPackageManager
		.queryIntentActivities(intent, 0 /* no flags */);
		if (resolveInfos.size() != 1) {
		return;
		ResolveInfo resolveInfo = mPackageManager.resolveActivity(
		intent, PackageManager.MATCH_DEFAULT_ONLY);

		if (resolveInfo == null) {
		throw new ActivityNotFoundException("No result for resolving " + intent);
		}
		// Prevent potential privilege escalation
		ActivityInfo activityInfo = resolveInfos.get(0).activityInfo;
		ActivityInfo activityInfo = resolveInfo.activityInfo;
		if (!packageName.equals(activityInfo.packageName)) {
		throw new SecurityException("Application " + packageName
		+ " is not allowed to start activity " + intent);