commit | bfdb7121ef7ae85520abbdcb4b9d05923d91999c | [log] [tgz] |
---|---|---|
author | John Reck <jreck@google.com> | Mon Jul 06 16:10:49 2020 -0700 |
committer | John Reck <jreck@google.com> | Sat Jul 18 00:31:57 2020 +0000 |
tree | e8602d48d4a8d006a18700167b81b8663c0391fb | |
parent | f1a6972937d72d716d5b75d73daae7e3959fb5e9 [diff] |
Add missing isShellUser check Bug: 160390416 Test: verified command still works from shell Change-Id: I23bb06e00f1623e4f27c02d7eb2c0d273b40771b Merged-In: I23bb06e00f1623e4f27c02d7eb2c0d273b40771b
diff --git a/services/core/java/com/android/server/am/ActivityManagerService.java b/services/core/java/com/android/server/am/ActivityManagerService.java index a2f76e9..7f05126 100644 --- a/services/core/java/com/android/server/am/ActivityManagerService.java +++ b/services/core/java/com/android/server/am/ActivityManagerService.java
@@ -3296,6 +3296,10 @@ @Override public boolean setProcessMemoryTrimLevel(String process, int userId, int level) throws RemoteException { + if (!isCallerShell()) { + EventLog.writeEvent(0x534e4554, 160390416, Binder.getCallingUid(), ""); + throw new SecurityException("Only shell can call it"); + } synchronized (this) { final ProcessRecord app = findProcessLocked(process, userId, "setProcessMemoryTrimLevel"); if (app == null) {