Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f43f129d authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Automerger Merge Worker
Browse files

Merge "Add caller check to com.android.credentials.RESET" into qt-dev am: 50b65a16 am: 1ef5f42b 

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/apps/Settings/+/16577205

Change-Id: Ibc94e102fc69e4e2052526e1ee000684c5d7724f
parents 7f848f44 1ef5f42b

src/com/android/settings/security/CredentialStorage.java

+14 −1
Original line number Diff line number Diff line
@@ -85,7 +85,7 @@ public final class CredentialStorage extends FragmentActivity { 
        final String action = intent.getAction();

        final UserManager userManager = (UserManager) getSystemService(Context.USER_SERVICE);

        if (!userManager.hasUserRestriction(UserManager.DISALLOW_CONFIG_CREDENTIALS)) {

            if (ACTION_RESET.equals(action)) {

            if (ACTION_RESET.equals(action) && checkCallerIsSelf()) {

                new ResetDialog();

            } else {

                if (ACTION_INSTALL.equals(action) && checkCallerIsCertInstallerOrSelfInProfile()) {
@@ -317,6 +317,19 @@ public final class CredentialStorage extends FragmentActivity { 
        finish();

    }



    /**

     * Check that the caller is Settings.

     */

    private boolean checkCallerIsSelf() {

        try {

            return Process.myUid() == android.app.ActivityManager.getService()

                    .getLaunchedFromUid(getActivityToken());

        } catch (RemoteException re) {

            // Error talking to ActivityManager, just give up

            return false;

        }

    }



    /**

     * Check that the caller is either certinstaller or Settings running in a profile of this user.

     */