OSDN Git Service

[DO NOT MERGE] Don't allow permission change to runtime
authorSvetoslav Ganov <svetoslavganov@google.com>
Thu, 29 Dec 2016 22:36:58 +0000 (14:36 -0800)
committerZach Jang <zachjang@google.com>
Thu, 9 Mar 2017 19:16:55 +0000 (19:16 +0000)
commitfe430be9f102893c95258cc81589df132b7d02b3
tree4924bf38b088ca6c3fc00d5d42684d41f80a60a4
parenta08c6a1cfbed86da5a9ab5a7838f0318be6c64d0
[DO NOT MERGE] Don't allow permission change to runtime

Prevent apps to change permission protection level to dangerous
from any other type as this would allow a privilege escalation
where an app adds a normal permission in other app's group and
then redefines it as dangerous leading to the group auto-grant.

Test: Added a CTS test which passes.

Bug: 33860747

Change-Id: I1ccf546f78ee79ff027cb98124be81c8e5265a82
services/core/java/com/android/server/pm/PackageManagerService.java