PawletOS/app_Settings
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Guard FallbackHome activity behind permission

Browse Source 
An attacker can launch FallbackHome of the Settings app
to reset unlock time. This would prevent the device from
sleeping because it runs the following code:
PowerManager#userActivity().

However, running PowerManager.userActivity() requires
android.permission.DEVICE_POWER or android.permission.USER_ACTIVITY.

So, let's add a permission to guard this activity.

Test: Rebuilt a rom and see no side effect.
Bug: 246543238
Change-Id: I23a1e352f76cbec3e8c07a1b58b94615f2779121
(cherry picked from commit f5062c2df8)
This commit is contained in:
Tsung-Mao Fang
2022-09-30 15:27:06 +08:00
parent db09b990a0
commit 8b8d3b45f9
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
AndroidManifest.xml
View File

@@ -2943,6 +2943,7 @@
android:taskAffinity="com.android.settings.FallbackHome" android:taskAffinity="com.android.settings.FallbackHome"
android:exported="true" android:exported="true"
android:theme="@style/FallbackHome" android:theme="@style/FallbackHome"
android:permission="android.permission.DEVICE_POWER"
android:configChanges="keyboardHidden"> android:configChanges="keyboardHidden">
<intent-filter android:priority="-1000"> <intent-filter android:priority="-1000">
<action android:name="android.intent.action.MAIN" /> <action android:name="android.intent.action.MAIN" />