tag c9dfe40699d3d40b58a4443008cdb29d7b589c90
tagger The Android Open Source Project <initial-contribution@android.com> Wed Sep 08 13:27:25 2021 -0700
object 18554fd8adc8995ad84b231455eb65d0f3ada6d2

Android security 9.0.0 release 72

commit 18554fd8adc8995ad84b231455eb65d0f3ada6d2
author Eran Messeri <eranm@google.com> Fri Oct 18 14:15:10 2019 +0100
committer Manjae Park <manjaepark@google.com> Mon Dec 16 13:10:14 2019 -0800
tree 00880e6adfae27258476aaf454f29423bd0628ab
parent 675b0f784b3556af37f485c42fc8c7093f6f9c0d

KeyChain: Do not allow hiding Cert Install dialog

Do not allow apps to float a window on top of the certificate
installation / naming dialog.

This obscures the CA certificate installation dialog and could be used
to trick a user into installing a CA certificate.

This is fixed by adding the HIDE_NON_SYSTEM_OVERLAY_WINDOWS system
flag when the activity is created (onCreate), so that another activity
starting in the foreground would not be able to obscure the dialog.

Bug: 139017101
Test: Manual, with an app that floats a window.
Change-Id: I637974d2179d6cd266d3762a1464184d2be35bf4
Merged-In: Iff8e678743c3883cf1f7f64390097a768ca00856
(cherry picked from commit 6afaf1846cc28af1ea048ebd55770cb38f77fb19)