| Commit message (Collapse) | Author | Age | Files | Lines |
|\
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* aosp/oreo-mr1-security-release:
[RESTRICT AUTOMERGE]: Merge commit '217f31fb5da6a08b2172d292fa5b8f440c02ae3a' into OP_REQUEST_INSTALL_PACKAGES-denied
Ask for PIN when granting permissions in front of lock screen
RESTRICT AUTOMERGE: Trust session id only if started with ACTION_CONFIRM_INSTALL
RESTRICT AUTOMERGE: Always use safe labels
Change-Id: I90dd2a6fcbc28d7de845dda32ec17600d5b6b993
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
'217f31fb5da6a08b2172d292fa5b8f440c02ae3a' into OP_REQUEST_INSTALL_PACKAGES-denied
* commit '217f31fb5da6a08b2172d292fa5b8f440c02ae3a':
[RESTRICT AUTOMERGE]: OP_REQUEST_INSTALL_PACKAGES denied by default
Some system apps may download unknown content and the user should
be explicitly asked whether they trust these files. System apps should
explicitly use the extra NOT_UNKNOWN_SOURCE to bypass this check.
Test: Builds, boots, existing tests pass:
atest CtsPackageInstallTestCases
Locally verified they pass if CtsPackageInstallTestCases.apk was signed by
the platform cert.
Bug: 123700348
Change-Id: I56cd3ad2f3e3b0b7487b91966eb9a0f0dbc432f5
(cherry picked from commit fec8435de6c4f614d3a09f66d313a259dce3cddb)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Test: - Revoked all permissions from camera
- Set lock screen PIN
- Opened camera app -> Camera app asks for permissions
- Locked screen
- Granted permission from in front of lock screen
Bug: 68777217, 65337954
Merged-In: I8358f1eba436786b25b2c2b0c12ac7dcfd334fec
Change-Id: I3f252e2c325bd638ea29d1ce63b12e391e13c8f0
(cherry picked from commit b5302e6789b7a0b8f5625e054fbb21d5916652be)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
InstallStart was reading sessionInfo whenever the starting intent had
the extra EXTRA_SESSION_ID. This could happen even if an external app
inserted a valid session id into its own REQUEST_INSTALL_PACKAGE intent.
This allows apps to potentially spoof the calling package.
Test: Existing tests pass:
atest GtsPackageInstallTestCases GtsNoPermissionTestCases \
GtsNoPermissionTestCases25
Bug: 112031362
Change-Id: Icdab1deeaf6b0afe7a61709cd87305336c467e33
(cherry picked from commit 10b0b0dcd03ac2ccd9d2a5ec8dfdf54058e31faa)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
For display purposes, we should always be using safe labels. This
prevents excessively long labels from preventing app uninstallation.
Bug: 62537081
Test: Manual. Install APK from bug and see that it can be uninstalled
Change-Id: Ic0e0d47f5ff76e4a73b30988d0a024fb3ee651ae
(cherry picked from commit eaa4e6ec82f32d66c053ccc4cb67df1e52d1711b)
|
| |
| |
| |
| | |
Change-Id: Iff2387a666c6b19c980c7016a027ad13151f1c6a
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Test: - Revoked all permissions from camera
- Set lock screen PIN
- Opened camera app -> Camera app asks for permissions
- Locked screen
- Granted permission from in front of lock screen
Bug: 68777217, 65337954
Merged-In: I8358f1eba436786b25b2c2b0c12ac7dcfd334fec
Change-Id: I3f252e2c325bd638ea29d1ce63b12e391e13c8f0
(cherry picked from commit b5302e6789b7a0b8f5625e054fbb21d5916652be)
|
| |
| |
| |
| | |
Change-Id: I3a5eb9f229573abdffd78fc1a50996b722c646b9
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
InstallStart was reading sessionInfo whenever the starting intent had
the extra EXTRA_SESSION_ID. This could happen even if an external app
inserted a valid session id into its own REQUEST_INSTALL_PACKAGE intent.
This allows apps to potentially spoof the calling package.
Test: Existing tests pass:
atest GtsPackageInstallTestCases GtsNoPermissionTestCases \
GtsNoPermissionTestCases25
Bug: 112031362
Change-Id: Icdab1deeaf6b0afe7a61709cd87305336c467e33
(cherry picked from commit 10b0b0dcd03ac2ccd9d2a5ec8dfdf54058e31faa)
|
| |
| |
| |
| | |
Change-Id: Idbf595c93ee8dccb4978acc86575be408ea33e0c
|
| |
| |
| |
| | |
Change-Id: I371e0340eebedc6bc259fd7ea699d838a4ea6136
|
| |
| |
| |
| | |
Change-Id: I15a6761a0be15fb11b9850f1e481bd0fe5eb4028
|
| |
| |
| |
| | |
Change-Id: Ie853860d25647d481e7fed9aef37c715a0d11605
|
| |
| |
| |
| | |
Change-Id: Idd9bd1ad353c5f9c29e46ea8f34fe65085653269
|
| |
| |
| |
| | |
Change-Id: I5fa4bd0898de076e94c050218e44687639821dfd
|
|\ \
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Android 8.1.0 release 43
* tag 'android-8.1.0_r43':
RESTRICT AUTOMERGE: Always use safe labels
Change-Id: I265d7d1c5e86e8b2a96e8d60856673a91e874bba
|
| |\ \
| | | |
| | | |
| | | |
| | | |
| | | | |
4584368, 4584369, 4584370, 4587544, 4584705, 4586296, 4587545, 4587546, 4586297, 4586298, 4586299, 4586300, 4584371, 4586301, 4584706, 4586302, 4586303, 4587584, 4587585, 4587586, 4587587, 4587588, 4587589, 4587590, 4587591, 4587644, 4587645, 4587646, 4587647, 4587648, 4587649, 4587650, 4587651, 4587652, 4587653, 4587654, 4587655, 4587656, 4587657, 4587658, 4587659, 4587660, 4587661, 4587662, 4584536, 4587547, 4587548, 4587549, 4584707, 4584708, 4587550, 4587551, 4587593, 4586516, 4584372, 4584373, 4584374, 4587595, 4584375, 4584376, 4587552, 4587596, 4587597, 4587598, 4587599, 4584414, 4584415, 4584416, 4584417, 4584418, 4584419, 4584420, 4584421, 4584422, 4584423, 4587804, 4587805, 4587806, 4587807, 4587808, 4587809, 4587810, 4587811, 4587812, 4587813, 4587814, 4587815, 4587816, 4587817, 4587818, 4587884, 4587885, 4587600, 4587601, 4587819, 4584709] into sparse-4749909-L91900000192339903
Change-Id: I15045ec3c1dd75219474205c03a53fddd6684f9c
|
| |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
For display purposes, we should always be using safe labels. This
prevents excessively long labels from preventing app uninstallation.
Bug: 62537081
Test: Manual. Install APK from bug and see that it can be uninstalled
Change-Id: Ic0e0d47f5ff76e4a73b30988d0a024fb3ee651ae
(cherry picked from commit eaa4e6ec82f32d66c053ccc4cb67df1e52d1711b)
|
| |\|
| | |
| | |
| | | |
Change-Id: I85f68a193d77e4aa825182207a16842e31221b7a
|
| |\ \
| | | |
| | | |
| | | | |
Change-Id: Ife567561f57f800681dd1db04c56bde6961201eb
|
| |\ \ \
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
367109 snap-temp-L18300000107415568
Change-Id: Iece11b0570d89f4a12923a956e33fd67bb0df093
|
| |\ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
352002 snap-temp-L88700000105039240
Change-Id: Ic9cee930f6dd8355b781b7d5f613dbd3fb4f156c
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Change-Id: I1384ad26403412d0802f454b2a6ee46728b008bb
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Change-Id: I60d2a2f7e36c431a44468a7aafe6e2f748edeeae
|
| |_|_|_|/
|/| | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* Workaround crowdin issues with aapt2 and missing translations
Change-Id: I3e42fc7fca6b2683653470f81b04e4085b0be00a
|
|\ \ \ \ \
| |_|_|_|/
|/| | | |
| | | | | |
Change-Id: Ic8408ab63ef941787d3d5594b610634aa5a9199d
|
| |\ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
am: a5bcd33be9 am: 43c33799f0 am: 1df430d3e7 am: 81215746a2 am: 41c646ac39 am: 1787d0faea am: 77272d283e am: e83e2fa1df am: 3c6e80907e am: c959d1a0d9
am: b741a8c41e
Change-Id: I81cd0d6d3c688395a5854b0bb963226ea75f2510
|
| | |\ \ \ \
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
am: a5bcd33be9 am: 43c33799f0 am: 1df430d3e7 am: 81215746a2 am: 41c646ac39 am: 1787d0faea am: 77272d283e am: e83e2fa1df am: 3c6e80907e
am: c959d1a0d9
Change-Id: Ifab5f221b448f1a288e9814b39c55a0b9018e037
|
| | | |\ \ \ \
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
am: a5bcd33be9 am: 43c33799f0 am: 1df430d3e7 am: 81215746a2 am: 41c646ac39 am: 1787d0faea am: 77272d283e am: e83e2fa1df
am: 3c6e80907e
Change-Id: I03548d0df309c756357412674530b7b642fe117e
|
| | | | |\ \ \ \
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
am: a5bcd33be9 am: 43c33799f0 am: 1df430d3e7 am: 81215746a2 am: 41c646ac39 am: 1787d0faea am: 77272d283e
am: e83e2fa1df
Change-Id: I48ea41369580329256a464e640fdefe9c8b8bcf5
|
| | | | | |\ \ \ \
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | | |
am: a5bcd33be9 am: 43c33799f0 am: 1df430d3e7 am: 81215746a2 am: 41c646ac39 am: 1787d0faea
am: 77272d283e
Change-Id: I97f1257674035ebf798e7cde6bed5f6e20ef0cc7
|
| | | | | | |\ \ \ \
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | | |
am: a5bcd33be9 am: 43c33799f0 am: 1df430d3e7 am: 81215746a2 am: 41c646ac39
am: 1787d0faea
Change-Id: I97c53442b5fd7ce692495f6dede104101fb1a851
|
| | | | | | | |\ \ \ \
| | | | | | | | | | | |
| | | | | | | | | | | |
| | | | | | | | | | | |
| | | | | | | | | | | |
| | | | | | | | | | | |
| | | | | | | | | | | |
| | | | | | | | | | | | |
am: a5bcd33be9 am: 43c33799f0 am: 1df430d3e7 am: 81215746a2
am: 41c646ac39
Change-Id: Id22af5b097e95f8e08f69e815462f6cb566d22df
|
| | | | | | | | |\ \ \ \
| | | | | | | | | | | | |
| | | | | | | | | | | | |
| | | | | | | | | | | | |
| | | | | | | | | | | | |
| | | | | | | | | | | | |
| | | | | | | | | | | | |
| | | | | | | | | | | | | |
am: a5bcd33be9 am: 43c33799f0 am: 1df430d3e7
am: 81215746a2
Change-Id: I12caaa2c38ae69a520d063dd3f70f7a086fd30ad
|
| | | | | | | | | |\ \ \ \
| | | | | | | | | | | | | |
| | | | | | | | | | | | | |
| | | | | | | | | | | | | |
| | | | | | | | | | | | | |
| | | | | | | | | | | | | |
| | | | | | | | | | | | | |
| | | | | | | | | | | | | | |
am: a5bcd33be9 am: 43c33799f0
am: 1df430d3e7
Change-Id: I5929a4696775e95cbf38606434d99d12ac1fe8e6
|
| | | | | | | | | | |\ \ \ \
| | | | | | | | | | | | | | |
| | | | | | | | | | | | | | |
| | | | | | | | | | | | | | |
| | | | | | | | | | | | | | |
| | | | | | | | | | | | | | |
| | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | |
am: a5bcd33be9
am: 43c33799f0
Change-Id: Ic207e50db3547065809b0a5beb03b0375028cc7c
|
| | | | | | | | | | | |\ \ \ \
| | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | |
am: a5bcd33be9
Change-Id: I6e4c30d7f04f4aac481418020f32a897fc918528
|
| | | | | | | | | | | | |\ \ \ \
| | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
am: 3c8fe2dd0a
Change-Id: I7ed35eaf4d8a2aab8727de2c3c5b12cf0ec3ac87
|
| | | | | | | | | | | | | |\ \ \ \
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
am: 5abad3f597
Change-Id: I2f256de13b6e3cb7bd4f971311418eec3a0c1f50
|
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
In cases where an app had a long list of permissions the Install button
was not being enabled.
Test: Manually clicked on an apk that required a long list of
permissions. Checked that the install button is enabled. Switch out and
back to the activity to force a pause/resume. The button gets disabled
and enabled as expected.
Bug: 35056974
Change-Id: I2ef7d5ce4e137969c70d2929271620c2bcb723f2
|
|\| | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
Change-Id: I234ebc0e47b7cd67a73f62c7ad6857d9a74841ac
|
| |\| | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
nyc-dev am: 597e855a88 am: 0ae52c1e25 am: e25a39fa88 am: 420298e55c -s ours am: 55ebfee33d -s ours am: d2067934de
am: 87b7230a91
Change-Id: I619158170b987972980a73e8f3734bbc71a90f49
|
| | |\| | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
nyc-dev am: 597e855a88 am: 0ae52c1e25 am: e25a39fa88 am: 420298e55c -s ours am: 55ebfee33d -s ours
am: d2067934de
Change-Id: I656b2cac095dd93428775c930d923ce956f0ff9a
|
| | | |\| | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
nyc-dev am: 597e855a88 am: 0ae52c1e25 am: e25a39fa88 am: 420298e55c -s ours
am: 55ebfee33d -s ours
Change-Id: Ibf66d2e98b6f8bcab7aa14add31c8256975cafec
|
| | | | |\| | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
nyc-dev am: 597e855a88 am: 0ae52c1e25 am: e25a39fa88
am: 420298e55c -s ours
Change-Id: I20e9484a0ae2174acb21bdae872fe77fc1b2d26f
|
| | | | | |\| | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
nyc-dev am: 597e855a88 am: 0ae52c1e25
am: e25a39fa88
Change-Id: I8f5b61605c22d0958693a584ae7c70b635c8c242
|
| | | | | | |\| | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
nyc-dev am: 597e855a88
am: 0ae52c1e25
Change-Id: I068eef0b4ac0aee112a4bab25872e6788183fb71
|
| | | | | | | |\| | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
am: 597e855a88
Change-Id: I28524fb366646b2de1325398de9f454b802ac1fa
|
| | | | | | | | |\ \ \ \ \ \ \ \ \ \ |
|
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | | |
In cases where an app had a long list of permissions the Install button
was not being enabled.
Test: Manually clicked on an apk that required a long list of
permissions. Checked that the install button is enabled. Switch out and
back to the activity to force a pause/resume. The button gets disabled
and enabled as expected. Also the existing test passes as before:
gts-tradefed run gts-dev -m PackageInstallerTapjacking
Bug: 35056974
Change-Id: I2ef7d5ce4e137969c70d2929271620c2bcb723f2
|