OSDN Git Service

Protect usage data with OP_GET_USAGE_STATS.
authorJeff Sharkey <jsharkey@android.com>
Mon, 16 Apr 2018 15:50:22 +0000 (09:50 -0600)
committerJeff Sharkey <jsharkey@android.com>
Mon, 16 Apr 2018 18:44:32 +0000 (12:44 -0600)
commit6b649257377b4ba2dd8a2a02b8dd692a72a2cc1e
treef06149447b480ee548d00896ec5847adee3896a8
parent167032ab002714d26a14735bbcdc072c5fa693b7
Protect usage data with OP_GET_USAGE_STATS.

APIs that return package usage data (such as the new StatsManager)
must ensure that callers hold both the PACKAGE_USAGE_STATS permission
and the OP_GET_USAGE_STATS app-op.

Add noteOp() method that can be called from native code.

Also add missing security checks on command interface.

Bug: 7766290878121728
Test: builds, boots
Change-Id: Ie0d51e4baaacd9d7d36ba0c587ec91a870b9df17
cmds/statsd/src/StatsService.cpp
cmds/statsd/src/StatsService.h
cmds/statsd/tests/e2e/PartialBucket_e2e_test.cpp
core/java/android/app/StatsManager.java
core/java/android/app/SystemServiceRegistry.java
core/java/android/os/IPermissionController.aidl
core/java/android/os/IStatsManager.aidl
data/etc/platform.xml
services/core/java/com/android/server/am/ActivityManagerService.java
tests/permission/src/com/android/framework/permission/tests/ServiceManagerPermissionTests.java