Skip to content
Commit 9674c1f1 authored by Bernardo Rufino's avatar Bernardo Rufino
Browse files

Log on unauthorized Intent.ACTION_CLOSE_SYSTEM_DIALOGS

Putting initial code to detect unauthorized use of Intent.ACSD. For now
we only allow permission holders and apps instrumented via permission
holders (eg. CTS tests via shell).

The plan is to drop the broadcast when unauthorized for targetSdk < S
(to fix the security issue) and throw a SecurityException when apps
target SDK level S+. Because of this I'm using two separate @ChangeIds
for now.

Since there are still legit use-cases where apps use Intent.ACSD, I'm
checking this in disabled mode for now, only logging. Once I implement
the exemptions for these cases I'll turn on the feature. Once that
happens I can remove one of the @ChangeIds.

It's good to get this code now rather than all at once after all the
exemptions so we can see how things fit (plus have some tests).

I'll also protect IAM.closeSystemDialogs() in a future CL.

Bug: 159105552
Test: atest CtsAppTestCases:android.app.cts.CloseSystemDialogsTest
Change-Id: I055f42a34fecebcded55a5eb6ccb3cefa2031812
parent fef77320
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment