commit 1fb2ed3de38ae13a5ed58ae009b1a8945b8f4c1c
author Treehugger Robot <treehugger-gerrit@google.com> Fri May 25 08:26:34 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Fri May 25 08:26:34 2018 +0000
tree 601b42a0c95c1493f41413b552f4d746a027711e
parent b19a838f473d5313b7ae02984d60745de391e745
parent 2ea6c55590d18aeaf8647d464f15b35675e518f5

Merge "Add permission check to setAllowOnlyVpnForUids"

services/core/java/com/android/server/NetworkManagementService.java

diff --git a/services/core/java/com/android/server/NetworkManagementService.java b/services/core/java/com/android/server/NetworkManagementService.java
index 5d719ad..6d6fd84 100644
--- a/services/core/java/com/android/server/NetworkManagementService.java
+++ b/services/core/java/com/android/server/NetworkManagementService.java
@@ -1789,6 +1789,8 @@
     @Override
     public void setAllowOnlyVpnForUids(boolean add, UidRange[] uidRanges)
             throws ServiceSpecificException {
+        mContext.enforceCallingOrSelfPermission(NETWORK_STACK, TAG);
+
         try {
             mNetdService.networkRejectNonSecureVpn(add, uidRanges);
         } catch (ServiceSpecificException e) {