diff options
| author | 2022-04-27 22:55:11 +0000 | |
|---|---|---|
| committer | 2022-05-13 21:56:34 +0000 | |
| commit | 548edbb850227e076735615f83f8e23352b0b82d (patch) | |
| tree | f97157eebac702029a0c9d873a8c7e723d6257c9 /libs/androidfw/StringPool.cpp | |
| parent | b21a0dae0b850746c8f0a192d1396530e54a960e (diff) | |
Fix duplicate permission privilege escalation
Duplicate permissions definition with different group allows
privilege permission escalation to a different permission group.
Android studio and gradle plugin does not allow duplicate permissions
with different attributes, these tools only allow if duplicate
permissions are exact copies.
Also platform stores permissions in map at multiple places with permission
name as key. This suggests that we can disallow duplicate permissions
during package install/update
Bug: 213323615
Test: AppSecurityTests
Change-Id: I34120fff2ec2a158dfa55779d2afd4bbd49487ff
Merged-In: I9bc839836786a0876e67fd73c05f8944bb532249
Diffstat (limited to 'libs/androidfw/StringPool.cpp')
0 files changed, 0 insertions, 0 deletions