PawletOS/app_Settings
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Guard FallbackHome activity behind permission

Browse Source 
An attacker can launch FallbackHome of the Settings app
to reset unlock time. This would prevent the device from
sleeping because it runs the following code:
PowerManager#userActivity().

However, running PowerManager.userActivity() requires
android.permission.DEVICE_POWER or android.permission.USER_ACTIVITY.

So, let's add a permission to guard this activity.

Test: Rebuilt a rom and see no side effect.
Bug: 246543238
Change-Id: I23a1e352f76cbec3e8c07a1b58b94615f2779121
This commit is contained in:
Tsung-Mao Fang
2022-09-30 15:27:06 +08:00
parent 0039fb35cd
commit f5062c2df8
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
AndroidManifest.xml
View File

@@ -3013,6 +3013,7 @@
android:taskAffinity="com.android.settings.FallbackHome" android:taskAffinity="com.android.settings.FallbackHome"
android:exported="true" android:exported="true"
android:theme="@style/FallbackHome" android:theme="@style/FallbackHome"
android:permission="android.permission.DEVICE_POWER"
android:configChanges="keyboardHidden"> android:configChanges="keyboardHidden">
<intent-filter android:priority="-1000"> <intent-filter android:priority="-1000">
<action android:name="android.intent.action.MAIN" /> <action android:name="android.intent.action.MAIN" />