Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 63f269a9 authored by Phil Weaver's avatar Phil Weaver
Browse files

Migrate to new overlay-preventing flag. 

Bug: 62196835
Test: Revoke camera app's access to the camera. Start camera
app. Attempt to cover the permission dialog with an app overlay
from an accessibility service.

Change-Id: I27d357b2aa61193380b7ef1dcc88bbac9553644e
parent cb44628e

AndroidManifest.xml

+1 −0
Original line number Diff line number Diff line
@@ -21,6 +21,7 @@ 
    <uses-permission android:name="android.permission.KILL_UID" />

    <uses-permission android:name="android.permission.MANAGE_APP_OPS_RESTRICTIONS" />

    <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />

    <uses-permission android:name="android.permission.HIDE_NON_SYSTEM_OVERLAY_WINDOWS" />



    <uses-permission android:name="com.google.android.permission.INSTALL_WEARABLE_PACKAGES" />

src/com/android/packageinstaller/permission/ui/OverlayTouchActivity.java

+6 −25
Original line number Diff line number Diff line
@@ -15,34 +15,15 @@ 
 */

package com.android.packageinstaller.permission.ui;



import static android.view.WindowManager.LayoutParams.PRIVATE_FLAG_HIDE_NON_SYSTEM_OVERLAY_WINDOWS;



import android.app.Activity;

import android.app.AppOpsManager;

import android.os.Binder;

import android.os.IBinder;

import android.os.UserHandle;

import android.os.Bundle;



public class OverlayTouchActivity extends Activity {

    private final IBinder mToken = new Binder();



    @Override

    protected void onResume() {

        super.onResume();

        setOverlayAllowed(false);

    }



    @Override

    protected void onPause() {

        super.onPause();

        setOverlayAllowed(true);

    }



    private void setOverlayAllowed(boolean allowed) {

        AppOpsManager appOpsManager = getSystemService(AppOpsManager.class);

        if (appOpsManager != null) {

            appOpsManager.setUserRestrictionForUser(AppOpsManager.OP_SYSTEM_ALERT_WINDOW, !allowed,

                    mToken, null, UserHandle.USER_ALL);

            appOpsManager.setUserRestrictionForUser(AppOpsManager.OP_TOAST_WINDOW, !allowed,

                    mToken, null, UserHandle.USER_ALL);

        }

    protected void onCreate(Bundle savedInstanceState) {

        getWindow().addPrivateFlags(PRIVATE_FLAG_HIDE_NON_SYSTEM_OVERLAY_WINDOWS);

        super.onCreate(savedInstanceState);

    }

}