commit 6ae9525c7fd6d72834be28298d836d8f30c0120c
author Jeff Chang <chengjeff@google.com> Thu May 20 09:52:27 2021 +0800
committer Android Build Coastguard Worker <android-build-coastguard-worker@google.com> Sat Jun 11 16:36:46 2022 +0000
tree 45be790a809eb2e16255b2ed05e427d2c3fa839a
parent 240998da47ccb479b33a9bbcebc2e400d9e3ed45

[RESTRICT AUTOMERGE]Only allow system and same app to apply relinquishTaskIdentity

Any malicious application could hijack tasks by
android:relinquishTaskIdentity. This vulnerability can perform UI
spoofing or spy on user’s activities.

This CL limit the usage which only allow system and same app to apply
relinquishTaskIdentity.

Bug: 185810717
Test: atest IntentTests
      atest ActivityStarterTests
      atest com.android.server.wm.TaskTests
Change-Id: I55fe8938cd9a0dd7c0268e1cfec89d4e95eee049
(cherry picked from commit 339f4ca753b3ecf3bac520e8d70541a7223fb7c2)
Merged-In: I55fe8938cd9a0dd7c0268e1cfec89d4e95eee049