diff options
| author | 2022-01-05 12:59:39 -0800 | |
|---|---|---|
| committer | 2022-01-12 16:18:00 -0800 | |
| commit | a482921588bcd06c8a7473dd8648e31d2caca508 (patch) | |
| tree | 9fba65341b9f115108058f7293ebfad66adadddf /libs/androidfw/StringPool.cpp | |
| parent | 040d933827667f0d0f19ba3cf91a9e95bf9a7622 (diff) | |
Allow bindServiceAsUser without _FULL if same app
Previously we allowed bindServiceAsUser in the following situations:
* caller has INTERACT_ACROSS_USERS_FULL
* caller has INTERACT_ACROSS_USERS and is in same profile group
* caller has INTERACT_ACROSS_PROFILES and is in same profile group and is the same app as the service
We now additionally allow:
* caller has INTERACT_ACROSS_USERS and is the same app as the service
(regardless of whether it is in the same profile group)
Bug: 209989958
Test: tested locally that granting the permission allows access to bindServiceAsUser
Test: atest UserControllerTest
Change-Id: I47d6f86fd159aa993971366ee9d7d334644d391e
Diffstat (limited to 'libs/androidfw/StringPool.cpp')
0 files changed, 0 insertions, 0 deletions