diff options
| author | Nate Myren <ntmyren@google.com> | 2025-06-26 14:33:51 -0700 |
|---|---|---|
| committer | aoleary <seanm187@gmail.com> | 2025-10-07 18:59:28 +0000 |
| commit | 1454b0d6aa09dcc107f54b61067ef5b13c137954 (patch) | |
| tree | dd434871ec1368f6717ae0d2316304067775797c /tests/DynamicCodeLoggerIntegrationTests/src/cpp/test_executable.cpp | |
| parent | 72e358868103fd59b887749e24980820753d62d2 (diff) | |
RESTRICT AUTOMERGE Prevent root from getting unverified attributions from non system apps
Similar to shell, system server, and other packages, the root UID
bypasses attribution tag registration requirements. This can be
exploited by a malicious proxy app.
Also fixes a bug which caused an unverified proxy app's attribution tag
to be erroneously called "valid" if "finishProxyOp" was called for a
non-system proxy app, and one of the special proxied apps
Bug: 416491779
Test: atest AppOpsMemoryUsageTest
Flag: EXEMPT see bug
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:ab99cde450cf900767a641ddcf71f4a42e771334)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:889d0cb5cc8d7a4cf06c7c5ff0620353378749f7)
Merged-In: I9b44465554e10b803bc9b4ab76130aaf9933f605
Change-Id: I9b44465554e10b803bc9b4ab76130aaf9933f605
Diffstat (limited to 'tests/DynamicCodeLoggerIntegrationTests/src/cpp/test_executable.cpp')
0 files changed, 0 insertions, 0 deletions