summaryrefslogtreecommitdiff
path: root/services/java/com/android/server/pm
Commit message (Collapse)AuthorAgeFilesLines
* Move some system services to separate directoriesAmith Yamasani2013-12-1919-19223/+0
| | | | | | | | Refactored the directory structure so that services can be optionally excluded. This is step 1. Will be followed by another change that makes it possible to remove services from the build. Change-Id: Ideacedfd34b5e213217ad3ff4ebb21c4a8e73f85
* Introduce a Lifecycle for system servicesAdam Lesinski2013-12-121-21/+34
| | | | | | | | | | | | | | | | | Provide an abstract class for system services to extend from, similar to the android.app.Service. This will allow services to receive events in a uniform way, and will allow services to be created and started in the correct order regardless of whether or not a particular service exists. Similar to android.app.Service, services are meant to implement Binder interfaces as inner classes. This prevents services from having incestuous access to each other and makes them use the public API. Change-Id: Iaacfee8d5f080a28d7cc606761f4624673ed390f
* DO NOT MERGE : Move some system services to their own sub package.Amith Yamasani2013-12-092-1/+234
| | | | | | | | | | | | | (Cherry pick from master) As a next step they can be moved into separate directories to be built as separate modules that may or may not be included in a particular configuration. Moves AppWidgetService, BackupManagerService, ClipboardService, DevicePolicyMS, and WallpaperMS. Change-Id: Idd92871c1828bdde81d85fe99a9c87a22d53169d
* am f7422885: Merge "Augment SELinuxMMAC functionality."Nick Kralevich2013-12-061-74/+174
|\ | | | | | | | | * commit 'f7422885a99c5d240f70c2f8227ae44abeea3e5c': Augment SELinuxMMAC functionality.
| * Augment SELinuxMMAC functionality.Robert Craig2013-12-061-74/+174
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * No longer support a package name stanza outside of a signature tag. Package names, by themselves, have no security associated with them in Android and thus we should not be allowing or encouraging this type of policy. * Allow for nested package name stanzas inside signature stanzas. There are cases where a finer distinction needs to be made among apps signed with the same cert. New code allows a different seinfo tag to be assigned to the listed package names signed by the parent cert. When a determination needs to be made concerning seinfo assignments, the inner seinfo tag takes precedence over the outer seinfo labels which are assigned to just the signature. * Temp structures are now used to parse new policy files until the entire xml file is parsed and deemed correct, at which time the temp structures are copied over to the permanent class structures. This ensures that any structural errors with the policy will not result in partial loads. * Valid stanzas look like the following with the inner package piece being optional. <signer signature=""> <seinfo value=""/> <package name=""> <seinfo value=""/> </package> <signer> <default> <seinfo value=""/> </default> Change-Id: Ia204d71211776dcf9b2dcc86ad6d77c4ad39dc25
* | am 64397749: am 22010817: Merge "Handle backup transport registration ↵Christopher Tate2013-11-141-1/+2
|\ \ | | | | | | | | | | | | | | | | | | dynamically" into klp-dev * commit '64397749effa088dcea3799fc8440845c5a1c193': Handle backup transport registration dynamically
| * \ Merge "Handle backup transport registration dynamically" into klp-devChristopher Tate2013-11-151-1/+2
| |\ \
| | * | Handle backup transport registration dynamicallyChristopher Tate2013-11-141-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | Bug 11369873 Change-Id: I9bbdcc21ce25159c6645690123b5d03c553b0ddc
* | | | am 6e5cf573: am 99437f25: Merge "Ensure recipient can be launched before ↵Christopher Tate2013-11-141-0/+18
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | attempting broadcast delivery" into klp-dev * commit '6e5cf573f2f2e17825af2973daeba893c6aa5855': Ensure recipient can be launched before attempting broadcast delivery
| * | | Ensure recipient can be launched before attempting broadcast deliveryChristopher Tate2013-11-141-0/+18
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | User removal or eviction inherently races with broadcast delivery. This patch introduces a latest-possible recheck of the availbility of the target application before attempting to send it a broadcast. Once the process has actually been spun up the system is essentially committed to presenting it as a running application, and there is no later check of the availability of the app: the failure mode for continuing to attempt delivery is a crash *in the app process*, and is user-visible. We now check the app+userid existence of the intended recipient just prior to committing to launch its process for receipt, and if it is no longer available we simply skip that receiver and continue normally. Bug 11652784 Bug 11272019 Bug 8263020 Change-Id: Ib19ba2af493250890db7371c1a9f853772db1af0
* | | am e995ad15: am 0b2c2b10: Merge "Support preferred activities with zero or ↵Christopher Tate2013-11-131-26/+20
|\| | | | | | | | | | | | | | | | | | | | one scheme in the filter" into klp-dev * commit 'e995ad1559ac12a0ac5e2e56ce378b0b29f10f24': Support preferred activities with zero or one scheme in the filter
| * | Support preferred activities with zero or one scheme in the filterChristopher Tate2013-11-121-26/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also use the existing full PreferredActivity match machinery instead of the existing direct comparison now that the intent filters can be more flexible. Bug 11482259 Change-Id: Icb649ca60ecfbdb9ee3c256ee512d3f3f989e05f
* | | am aa719e92: am c157cac9: Merge "System package permission decls take ↵Christopher Tate2013-11-061-0/+12
|\| | | | | | | | | | | | | | | | | | | | precedence over 3rd party apps\'" into klp-dev * commit 'aa719e92ffc2193db68c86b97fce291c27d5d4dd': System package permission decls take precedence over 3rd party apps'
| * | System package permission decls take precedence over 3rd party apps'Christopher Tate2013-11-051-0/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In particular, if a 3rd party app tries to define a permission that turns out to be defined by system packages following an upgrade, the system package gets ownership and grants are re-evaluated on that basis. Bug 11242510 Change-Id: Id3a2b53d52750c629414cd8226e33e5e03dd0c54
* | | am 0505ebbc: am 8869d6f3: Merge "Extend preferred-app preload support for ↵Christopher Tate2013-11-051-4/+22
|\| | | | | | | | | | | | | | | | | | | | complex resolutions" into klp-dev * commit '0505ebbcbe539820d434b924a76e8b9932f8862e': Extend preferred-app preload support for complex resolutions
| * | Extend preferred-app preload support for complex resolutionsChristopher Tate2013-11-041-4/+22
| | | | | | | | | | | | | | | | | | | | | | | | Support factory defaults that involve specific type+scheme matching. Bug 11372979 Change-Id: I0d68937797d6b4bc996a8707a7cd21491a3aae3b
* | | am 9dcfcc84: am 19427156: Merge "Don\'t crash when preferred activity ↵Christopher Tate2013-10-301-1/+7
|\| | | | | | | | | | | | | | | | | | | | settings are malformed" into klp-dev * commit '9dcfcc845d5fdbedbbb41e0d22dd3e16a6a53fe5': Don't crash when preferred activity settings are malformed
| * | Don't crash when preferred activity settings are malformedChristopher Tate2013-10-291-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | We also now ignore attempts to set preferred resolutions with intent filters for which no actions are defined. Bug 11392870 Change-Id: If0d0b37bf01b59463985441edfc2bddd070bfc2a
* | | am 204b1e28: am fe470c37: Merge "Have the package manager write mimetype of ↵Erin Dahlgren2013-10-241-2/+11
|\| | | | | | | | | | | | | | | | | | | | preferred activities to xml." into klp-dev * commit '204b1e2817f3abb7946d9254cca666d2da1e4f7c': Have the package manager write mimetype of preferred activities to xml.
| * | Merge "Have the package manager write mimetype of preferred activities to ↵Erin Dahlgren2013-10-241-2/+11
| |\ \ | | | | | | | | | | | | xml." into klp-dev
| | * | Have the package manager write mimetype of preferred activities to xml.Erin Dahlgren2013-10-241-2/+11
| | | | | | | | | | | | | | | | | | | | Issue: 11372979 Change-Id: I5ea4e94c978845426e2650946d0bba076d161c19
* | | | am 525322ec: am f9f740da: Merge "Support different watchdog timeouts for ↵Christopher Tate2013-10-241-1/+10
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | different entities" into klp-dev * commit '525322ecbab1502586d378e7065edc402abc63bf': Support different watchdog timeouts for different entities
| * | | Support different watchdog timeouts for different entitiesChristopher Tate2013-10-241-1/+10
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We need to be able to perform very lengthy operations on some threads (e.g. the I/O thread responsible for installing multi-gigabyte APKs) but still have long-run deadlock/hang detection applied to those threads. Previously the watchdog mechanism applied the same policy to all monitored threads: unresponsive after 60 seconds => restart the system. Now, each monitored entity can have its own independent timeout after which the watchdog declares deadlock and restarts the runtime. The halfway-finished intermediate thread stacks are dumped based on the specific entity's declared timeout, not the global 30 second checking interval. With that new mechanism in place, the Package Manager's lengthy-I/O thread watchdog timeout is raised to 10 minutes. Bug 11278188 Change-Id: I512599260009c31416b2385f778681e5b9597f05
* | | am d34e1155: am 5f474fcb: Merge "Edge case: overriden system package moved & ↵Christopher Tate2013-10-222-7/+13
|\| | | | | | | | | | | | | | | | | | | | became privileged in OTA" into klp-dev * commit 'd34e1155226e8885d51c05209c7c87503528a2db': Edge case: overriden system package moved & became privileged in OTA
| * | Edge case: overriden system package moved & became privileged in OTAChristopher Tate2013-10-222-7/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Because properly continuing permission grants post-OTA has changed policy to include privilege considerations based on install location, make sure that we re-evaluate when we determine that the apk has moved from its pre-OTA location. Bug 11271490 Change-Id: I6c09986e2851a67504268b289932588457c05dfc
* | | am 595c48e4: am d570dae5: Merge "Fix priv-app edge case across OTAs" into ↵Christopher Tate2013-10-213-5/+15
|\| | | |/ |/| | | | | | | | | klp-dev * commit '595c48e43d8f40baaa8e281959300e582d765f56': Fix priv-app edge case across OTAs
| * Fix priv-app edge case across OTAsChristopher Tate2013-10-183-5/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In this case: 1. Privileged system app FOO is overlain by an installed update, 2. FOO was replaced during an OTA, 3. The new in-system FOO introduced new privileged permission requests that had not been requested by the original FOO, 4. the update version of FOO still had a higher version code than the new FOO on the system disk, and 5. the update version of FOO had been requesting these same (newly- added-to-system-apk) permissions all along; then the newly-added privileged permission requests were incorrectly being refused. FOO should be able to use any privileged permission used by the APK sited on the system disk; but instead, it was only being granted the permissions used by the *original* version of FOO, even though the system FOO now attempted to use them. Still with me? The fix is to (a) properly track privileged-install state when processing known-to-be-hidden system packages, and (b) to tie the semantics of the permission grant more explicitly to that evaluated state, rather than using the prior (rather fragile) fixed-up privilege calculation applied to the overlain apk's parse records. Bug 11271490 Change-Id: Id8a45d667e52f3b5d18109e3620d5865f85bb9c9
* | am 827c5af0: am e49a107a: Merge "Fix issue #11223335: APR: Lots of failures ↵Dianne Hackborn2013-10-141-1/+2
|\| | | | | | | | | | | | | in procstats due to..." into klp-dev * commit '827c5af02de29424ea80f1ccfe525e681d0b74f0': Fix issue #11223335: APR: Lots of failures in procstats due to...
| * Fix issue #11223335: APR: Lots of failures in procstats due to...Dianne Hackborn2013-10-141-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | ...bad cleanup of crashing processes We now have a special path for crashing processes, to silently clean up their state. Also some tweaks to Log/Slog.wtf to get better stack crawl summaries in APR. Change-Id: Ieced26989907a6e7615b6fa033813fced78d7474
* | am 5e02e0a9: am bcc77b50: Merge "Add <intent-filter> support to <provider>." ↵Jeff Sharkey2013-10-071-22/+251
|\| | | | | | | | | | | | | into klp-dev * commit '5e02e0a9e1e075e3d451d929b0a67bf280c432ed': Add <intent-filter> support to <provider>.
| * Merge "Add <intent-filter> support to <provider>." into klp-devJeff Sharkey2013-10-071-22/+251
| |\
| | * Add <intent-filter> support to <provider>.Jeff Sharkey2013-10-071-22/+251
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For the new documents work, we're only interested in the subset of ContentProviders that actually implement DocumentsContract. Instead of returning all providers, add <intent-filter> support to make it easier to limit the set of returned ProviderInfo. Define a well-known action for DocumentsProviders, and start using it when querying for roots. Continue supporting the old <meta-data> approach until all apps have been updated. Bug: 8599233 Change-Id: I05f049bba21311f5421738002f99ee214447c909
* | | am a5c43674: am eb09f990: Merge "Make sure to maintain privilege when ↵Christopher Tate2013-10-061-2/+16
|\| | | | | | | | | | | | | | | | | | | | downgrading bundled apps" into klp-dev * commit 'a5c436743c2d0343550d13f16ae557d4ea6101e1': Make sure to maintain privilege when downgrading bundled apps
| * | Merge "Make sure to maintain privilege when downgrading bundled apps" into ↵Christopher Tate2013-10-061-2/+16
| |\ \ | | | | | | | | | | | | klp-dev
| | * | Make sure to maintain privilege when downgrading bundled appsChristopher Tate2013-10-061-2/+16
| | |/ | | | | | | | | | | | | | | | | | | | | | | | | When reparsing because the data-volume update has been removed, be sure to apply privilege when the bundled fallback APK should be allowed it. Bug 10958159 Change-Id: Ibad52a5644606b27f4ebc5d5d7c1a671283b0752
* | | am e67ebcbc: am 4b4ad011: Merge "Notify that ASEC containers are being ↵Christopher Tate2013-10-061-6/+37
|\| | | | | | | | | | | | | | | | | | | | unmounted during upgrades" into klp-dev * commit 'e67ebcbc0c5f03434aa756449f0cea6ecb1fde5b': Notify that ASEC containers are being unmounted during upgrades
| * | Notify that ASEC containers are being unmounted during upgradesChristopher Tate2013-10-041-6/+37
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | When an apk is installed on ordinary unmountable media, a broadcast is sent when the OS wants to unmount it so that interested parties can cleanly close any files they have open to read that apk's resources or similar. We now send that broadcast when we are about to unmount the ASEC fs container that holds a forward-locked apk as well, so that e.g. Home knows to release the resources that it was using for widget hosting or similar. Bug 7703848 Change-Id: I71aefdb4086c7b73a128f89c15d192a2b92d09a8
* | am 239dc099: am 164371fb: Fix issue #11005453: [SUW] G+ profile creation for ↵Dianne Hackborn2013-10-021-1/+1
|\| | | | | | | | | | | | | new user broken * commit '239dc099a0d56eba3c7a537df23ef3c5046b2667': Fix issue #11005453: [SUW] G+ profile creation for new user broken
| * Fix issue #11005453: [SUW] G+ profile creation for new user brokenDianne Hackborn2013-10-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The main problem here was a mistake when turning a single process structure to a multi-package-process structure with a common process. When we cloned the original process state, if there were any services already created for the process for that package, they would be left with their process pointer still referencing the original now common process instead of the package-specific process, allowing the active counts to get bad. Now we switch any of those processes over to the new package-specific process. There was also another smaller issue with how ServiceRecord is associated with a ServiceState -- we could be waiting for an old ServiceRecord to be destroyed while at the same time creating a new ServiceRecord for that same service class. These would share the same ServiceState, so when the old record finally finished destroying itself it would trample over whatever the new service is doing. This is fixed by changing the model to instead of using an "active" reference count, we have an object identifying the current owner of the ServiceState. Then when the old ServiceRecord is cleaning up, we know if it is still the owner at that point. Also some other small things along the way -- new Log.wtfStack() method that is convenient, new suite of Slog.wtf methods, fixed some services to use Slog.wtf when catching exceptions being returned to the caller so that we actually know about them. Change-Id: I75674ce38050b6423fd3c6f43d1be172b470741f
* | am d2534f8c: Merge "Don\'t remove restrictions files that are valid" into ↵Amith Yamasani2013-09-261-7/+17
|\| | | | | | | | | | | | | klp-dev * commit 'd2534f8c05ccdf692f1e265ae719b67290d15050': Don't remove restrictions files that are valid
| * Merge "Don't remove restrictions files that are valid" into klp-devAmith Yamasani2013-09-261-7/+17
| |\
| | * Don't remove restrictions files that are validAmith Yamasani2013-09-261-7/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes a bug in parsing the package name from a file name. The suffix was not taken into account, resulting in all restrictions files being removed on switching to a user. Bug: 10947554 Change-Id: I62725bbbdc0e15609872de3896130d4acbc35386
* | | am 5f86b90b: Merge "Fix issue #10848916: "Always" button is not working." ↵Dianne Hackborn2013-09-241-4/+4
|\| | | | | | | | | | | | | | | | | | | | into klp-dev * commit '5f86b90b8a224e21db89bacf78d4bd4d3f44342d': Fix issue #10848916: "Always" button is not working.
| * | Fix issue #10848916: "Always" button is not working.Dianne Hackborn2013-09-241-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The problem was that the ResolverActivity filters some activities out of the list it shows, but it uses that display list as the list of components the preference is set against when ultimately setting it on the package manager... but that filtered list is *not* the right component set, since it is not the same as the package manager's view on it. The fix here is to retain the original set of matching components and use that when setting the preferred activity. Note that this does mean that in very unusual cases where filtering is happeing (such as one of the activities not being exported but being seen as a possible completion from another app), then you will be setting the preference for the complete set. Ultimately we probably need to have the package manager apply these filtering rules up-front so this is all consistent, but this is a very rare case so not that important. And then most of the change here is just improving the debug output for intent resolution. Change-Id: Ie35ac2c05a45946439951bbf41433c8b7de79c05
* | | am 4bf0fcef: Merge "Work on issue #10759595: preferred tag doesn\'t ↵Dianne Hackborn2013-09-232-33/+35
|\| | | | | | | | | | | | | | | | | | | | prevent..." into klp-dev * commit '4bf0fcef9296b53114e86490d79956986f8b93a6': Work on issue #10759595: preferred tag doesn't prevent...
| * | Work on issue #10759595: preferred tag doesn't prevent...Dianne Hackborn2013-09-232-33/+35
| | | | | | | | | | | | | | | | | | | | | | | | ...activity chooser from being shown Add more useful output when intent filter debugging is enabled. Change-Id: I3722b03ed625046398e81233cf7fb6aa5ded5eca
* | | am bb6fd7ff: Merge "Shut. Up." into klp-devDianne Hackborn2013-09-201-2/+2
|\| | | | | | | | | | | | | | * commit 'bb6fd7ff8cec893999b26e39dc62f1b4b4b9a8ea': Shut. Up.
| * | Shut. Up.Dianne Hackborn2013-09-201-2/+2
| |/ | | | | | | Change-Id: Id047ab2308903a527bebf80bdacdb01ec51de051
* | am 662b3bbe: am effefbc4: Merge "Proper security labeling of multi-user data ↵Nick Kralevich2013-09-203-3/+6
|\ \ | |/ |/| | | | | | | | | directories." * commit '662b3bbe08c03de77c0676b4fdc1587723863f1b': Proper security labeling of multi-user data directories.
| * Proper security labeling of multi-user data directories.Robert Craig2013-09-183-3/+6
| | | | | | | | | | | | | | | | | | | | | | This patch covers 2 cases. When an app is installed and the resulting data directory is created for all existing users. And when a new user is created and all existing app data directories are created for the new user. Change-Id: Iaba7c40645bc7b6cc823d613da0c3782acf6ddd5 Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
generated by cgit v1.2.3 (git 2.25.1) at 2025-12-27 13:25:51 +0000