summaryrefslogtreecommitdiff
path: root/services/java/com/android/server/pm
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | | am 558a3c1b: Merge "Kill processes when permissions are revoked." into ↵Dianne Hackborn2013-04-091-13/+38
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | jb-mr2-dev * commit '558a3c1b7b40eb9356f8c4446ca63af8cf16bd91': Kill processes when permissions are revoked.
| | * | | | Merge "Kill processes when permissions are revoked." into jb-mr2-devDianne Hackborn2013-04-091-13/+38
| | |\ \ \ \ | | | |/ / / | | |/| | |
| | | * | | Kill processes when permissions are revoked.Dianne Hackborn2013-04-081-13/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some permissions are associated with gids, so we need to kill any running processes if their permission is revoked. We will do this for any permission being revoked, since the association between gids and permissions can change over time. Change-Id: Ieb7408e032539c4f21eb089d65a7a7e6c289f010
* | | | | | am b3be67ce: am 0eee410e: Merge "Check outInfo is not null" into jb-mr2-devKenny Root2013-04-081-8/+10
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | * commit 'b3be67ce34966dfccfccf4918ee5c93c4971a6d0': Check outInfo is not null
| * | | | | am 0eee410e: Merge "Check outInfo is not null" into jb-mr2-devKenny Root2013-04-081-8/+10
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | * commit '0eee410e473c1546af80c63ec866655a28833f33': Check outInfo is not null
| | * | | | Check outInfo is not nullKenny Root2013-04-081-8/+10
| | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Only call keystore if outInfo is not null Bug: 8568820 Change-Id: I24ab625ad02b8510da489911064453de642b6748
* | | | | am 51ad68b9: am 212af6db: Merge "Add /data/security path for ↵Geremy Condra2013-04-051-0/+1
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | mac_permissions.xml." * commit '51ad68b9a5d5a8eb705eafd40833efca24731079': Add /data/security path for mac_permissions.xml.
| * | | | am 212af6db: Merge "Add /data/security path for mac_permissions.xml."Geremy Condra2013-04-051-0/+1
| |\ \ \ \ | | |/ / / | |/| / / | | |/ / | | | | * commit '212af6dbd7b002bdfcc869fc0ee06d5d3d711fd6': Add /data/security path for mac_permissions.xml.
| | * | Add /data/security path for mac_permissions.xml.Stephen Smalley2013-04-051-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | /data/security is now the preferred location for updated policy files. Add it for mac_permissions.xml. Separate change will remove the old /data/system location. Change-Id: I2774661e84c858c9b698ec60e224bbbcdac732f3 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
| | * | Remove keystore entries when package removedKenny Root2013-04-021-0/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a hook into PackageManagerService so that when app IDs are completely removed, we erase all entries from keystore for those UIDs that have gone away. Bug: 3020069 Change-Id: Id4b1d51a5fa4c418865055635a84bebcf5b65ec8
* | | | resolved conflicts for merge of 2ab72e1f to masterBen Gruver2013-04-032-6/+8
|\| | | | | | | | | | | | | | | Change-Id: I752332dfb1a2f15bac22d3f1a457ae1ef20cf240
| * | | Merge "Initial implementation of IntentFirewall functionality" into jb-mr2-devBen Gruver2013-04-032-6/+8
| |\ \ \
| | * | | Initial implementation of IntentFirewall functionalityBen Gruver2013-04-022-6/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This has the full filter functionality, but is currently only able to block Activity intents. Logging intents, or blocking service/broadcast intents is not yet implemented. Change-Id: Ied3d8dedf982e17bcbdff3e328eeb87477954df7
* | | | | am 26bb9c95: am 0d17aaa5: Merge "Grant optional permissions by default for ↵Nick Kralevich2013-04-031-7/+16
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | system apps." into jb-mr2-dev * commit '26bb9c955158893f946bed727124d3dbd3cfd0a7': Grant optional permissions by default for system apps.
| * | | | Merge "Grant optional permissions by default for system apps." into jb-mr2-devNick Kralevich2013-04-031-7/+16
| |\ \ \ \
| | * | | | Grant optional permissions by default for system apps.Nick Kralevich2013-04-031-7/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For pre-installed system apps, automatically grant all optional permissions. Change-Id: I99bb320a0bbaa9873baeb63655556fe0fae6f011
* | | | | | am 6812059b: am d72317ab: Remove keystore entries when package removedKenny Root2013-04-031-1/+14
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | * commit '6812059b2d4aecb732ce3c94c58f2494ddc4ff6a': Remove keystore entries when package removed
| * | | | | Remove keystore entries when package removedKenny Root2013-04-031-1/+14
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a hook into PackageManagerService so that when app IDs are completely removed, we erase all entries from keystore for those UIDs that have gone away. (cherry picked from commit 95e3ee3971915b323e5c13dcfe3b12a4180850cd) Bug: 3020069 Change-Id: I374258ccc103f8cb3e238f2bf0d1afda0659db94
* | | | | am d2cc888c: am 55cfcd75: Merge "doSignaturePermission -> ↵Nick Kralevich2013-04-021-2/+2
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | grantSignaturePermission" into jb-mr2-dev * commit 'd2cc888cb9d5dbf87146ccd8fe02ea05121c02d8': doSignaturePermission -> grantSignaturePermission
| * | | | Merge "doSignaturePermission -> grantSignaturePermission" into jb-mr2-devNick Kralevich2013-04-021-2/+2
| |\ \ \ \
| | * | | | doSignaturePermission -> grantSignaturePermissionNick Kralevich2013-04-021-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | Change-Id: Iee3c24c8ce5ebbd0b0e8cf7b0e308f998fc6eaf9
* | | | | | am c77d3b16: am f667c8d3: Merge "grantPermissionsLPw: introduce ↵Nick Kralevich2013-04-021-13/+18
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | isNewPlatformPermissionForPackage" into jb-mr2-dev * commit 'c77d3b16d7f1fe6cb3262eeabbc56fc3275a4f4f': grantPermissionsLPw: introduce isNewPlatformPermissionForPackage
| * | | | | Merge "grantPermissionsLPw: introduce isNewPlatformPermissionForPackage" ↵Nick Kralevich2013-04-021-13/+18
| |\| | | | | | | | | | | | | | | | | | | | | | into jb-mr2-dev
| | * | | | grantPermissionsLPw: introduce isNewPlatformPermissionForPackageNick Kralevich2013-04-021-13/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make grantPermissionsLPw by refactoring some code into a new function, isNewPlatformPermissionForPackage. No functional changes. Change-Id: I467dacfe1fcf7e77cef4cb6df54536eeaafd9064
* | | | | | am 0f67b255: am 5b7d1481: Merge "grantPermissionsLPw: get rid of a level of ↵Nick Kralevich2013-04-021-74/+76
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | curly braces" into jb-mr2-dev * commit '0f67b2550c020d9d12b13018712b3165b2c47029': grantPermissionsLPw: get rid of a level of curly braces
| * | | | | Merge "grantPermissionsLPw: get rid of a level of curly braces" into jb-mr2-devNick Kralevich2013-04-021-74/+76
| |\| | | |
| | * | | | grantPermissionsLPw: get rid of a level of curly bracesNick Kralevich2013-04-021-74/+76
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We can get rid of an indention level by modifying an if/else block slightly. No functional changes. Change-Id: I0404093ea9ebe7729417d825afb6e97e158ad23e
* | | | | | am b590b80e: am bb7ba4ae: Merge "grantPermissionsLPw: introduce ↵Nick Kralevich2013-04-021-48/+55
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | doSignaturePermission" into jb-mr2-dev * commit 'b590b80e36fd8e54c4d48f0c17af8709cbcf174d': grantPermissionsLPw: introduce doSignaturePermission
| * | | | | Merge "grantPermissionsLPw: introduce doSignaturePermission" into jb-mr2-devNick Kralevich2013-04-021-48/+55
| |\| | | |
| | * | | | grantPermissionsLPw: introduce doSignaturePermissionNick Kralevich2013-04-021-48/+55
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make grantPermissionsLPw smaller by introducing a new doSignaturePermission function. Just a refactoring. No functional code changes. Change-Id: Ia967fd93e3f7cf3e48fcd13be0b04994b76d36f3
* | | | | | am 69fe4069: am 006c6338: Merge "Fix bug in initializing preferred ↵Dianne Hackborn2013-04-022-3/+6
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | activities." into jb-mr2-dev * commit '69fe40692973bf480019d71dea85d01d24eb7a68': Fix bug in initializing preferred activities.
| * | | | | Fix bug in initializing preferred activities.Dianne Hackborn2013-04-012-3/+6
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now that we are smarter about the initialization, we need to do this after all packages are scanned. Change-Id: I598f5ef84dcc83779bbff29e4c92136c63fb32de
* | | | | am 5c98b904: am 9e8ba8f2: Merge "Improve RestrictionEntry API" into jb-mr2-devAmith Yamasani2013-03-291-4/+4
|\| | | | | | | | | | | | | | | | | | | | | | | | * commit '5c98b9046506cc69b261dd6ac2ae39b2de0afacb': Improve RestrictionEntry API
| * | | | Merge "Improve RestrictionEntry API" into jb-mr2-devAmith Yamasani2013-03-301-4/+4
| |\ \ \ \
| | * | | | Improve RestrictionEntry APIAmith Yamasani2013-03-291-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | More getters and setters, better naming. New extra defined for returning a custom intent that handles showing the restrictions UI. Change-Id: I2ee0cdb4edd99e71a9004ff5e929dbe243b45557
* | | | | | am a54e0643: am 9d034deb: am 24948d3c: am 946a5c91: Merge "Save off the ↵Geremy Condra2013-03-281-0/+3
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | seinfo value with packages.list." * commit 'a54e064365706d40c55c2984cca1f15a6bf3e8fb': Save off the seinfo value with packages.list.
| * | | | | am 24948d3c: am 946a5c91: Merge "Save off the seinfo value with packages.list."Geremy Condra2013-03-281-0/+3
| |\ \ \ \ \ | | |/ / / / | |/| | / / | | | |/ / | | |/| | * commit '24948d3ca7ff7fa70ee85e9aa7530239d7b482b2': Save off the seinfo value with packages.list.
| | * | | Merge "Save off the seinfo value with packages.list."Geremy Condra2013-03-281-0/+3
| | |\ \ \
| | | * | | Save off the seinfo value with packages.list.Robert Craig2013-03-261-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Patch adds the seinfo label per package to the file. This is of particular interest to the run-as program which uses the seinfo tag to correctly label the app security context before running the shell. Change-Id: I9d7ea47c920b1bc09a19008345ed7fd0aa426e87 Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
* | | | | | am 0314b976: am 5c3bd37a: am f21a34bf: am 2ff853da: Merge "Add data ↵Geremy Condra2013-03-281-2/+24
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | validation on seinfo labels." * commit '0314b976654ac9f64f8bb60962b81feadcc13d20': Add data validation on seinfo labels.
| * | | | | am f21a34bf: am 2ff853da: Merge "Add data validation on seinfo labels."Geremy Condra2013-03-281-2/+24
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | * commit 'f21a34bf1b188cd662f6a08f5c709f4f641b1494': Add data validation on seinfo labels.
| | * | | | Add data validation on seinfo labels.Robert Craig2013-03-281-2/+24
| | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ensure that policy contains a clean seinfo string. Where clean means no whitespace characters. Change-Id: I814411cbc8d16eaed99a1389f5487529e36e617b Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
| | * | | Proper security labeling of multi-user data directories.rpcraig2013-03-253-3/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch covers 2 cases. When an app is installed and the resulting data directory is created for all existing users. And when a new user is created and all existing app data directories are created for the new user. Change-Id: Iacaba6d9d18d5337e65713960d14efe32006b330 Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
| | * | | Add seinfo parsing to PackageManagerService.Robert Craig2013-03-253-5/+290
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch set allows the PMS to parse the mac_permissions.xml file which contains the seinfo values. Each package that is installed on the device will be assigned an seinfo value based on policy. This seinfo value will help label the app process and data directory. Modifications include adjustments to ApplicationInfo.java to store the seinfo tag per package as well as adjustments to installd to communicate the seinfo tag to libselinux. Change-Id: I61ad1ea12fb6a9a6d0b108ec163bc4bf4c954b58 Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
* | | | | Merge "Remove keysets from PackageKeySetData when KeySetManager removes them."Geremy Condra2013-03-282-9/+58
|\ \ \ \ \
| * | | | | Remove keysets from PackageKeySetData when KeySetManager removes them.Geremy Condra2013-03-262-9/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes a bug where the KeySets in PackageKeySetData would get out of sync with those in KeySetManager when repeatedly installed and uninstalled. Change-Id: I16cfe6d11f37d908ee5635ebcb6e784cebc252c0
* | | | | | am b3c060a1: am c92342bb: Merge "Add user restrictions for bluetooth, ↵Maggie Benthall2013-03-281-1/+8
|\ \ \ \ \ \ | | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | sideloading, usb file transfer" into jb-mr2-dev * commit 'b3c060a166e9d5a141a6500e4c443a20d4e002b6': Add user restrictions for bluetooth, sideloading, usb file transfer
| * | | | | Merge "Add user restrictions for bluetooth, sideloading, usb file transfer" ↵Maggie Benthall2013-03-281-1/+8
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | into jb-mr2-dev
| | * | | | | Add user restrictions for bluetooth, sideloading, usb file transferMaggie Benthall2013-03-271-1/+8
| | | |_|/ / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Created constants for these in UserManager and current.txt. Also created an accessor for individual user restrictions that takes the restriction key (removing individual methods for particular restrictions). Change-Id: Ibb5517cbcdffadd3925f52cbe67d7d525813faa9
* | | | | | am 6b8e7b35: am bf20aa76: Merge "Keep track of who has disabled ↵Dianne Hackborn2013-03-273-18/+45
|\| | | | | | |_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | applications." into jb-mr2-dev * commit '6b8e7b35ef763d29a30c87a5a95ef941d39a8ee9': Keep track of who has disabled applications.