| commit | 7fa1b4d0657c1fcf88a1588863e16e4e468201a1 | [log] [tgz] |
|---|---|---|
| author | Hui Yu <huiyu@google.com> | Sat May 07 21:43:23 2022 -0700 |
| committer | Hui Yu <huiyu@google.com> | Mon May 09 16:22:25 2022 -0700 |
| tree | dd4640f7a91a9eed8a672ea620abc01f7a346f88 | |
| parent | f372925a2940d4d25b17bc9de5dbde91a584fc84 [diff] |
Make sure callingPackage belongs to callingUid when checking BG-FGS restrictions. This is to stop spoofed packageName to pretend to be allowListed packageName so it can bypass the BG-FGS restriction. This applies to both BG-FGS while-in-use restriction and BG-FGS-start restriction since these two restrictions are related. Bug: 216695100 Bug: 215003903 Test: atest cts/tests/app/src/android/app/cts/ActivityManagerSpoofTest.java Change-Id: Ic14fc331a9b5fbdbcfe6e54a31c8b765513bfd89