commit | f786095109dba1fbeebd44fbed9f2f95c73cb79b | [log] [tgz] |
---|---|---|
author | Taran Singh <tarandeep@google.com> | Fri May 19 23:17:47 2023 +0000 |
committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Fri Sep 01 12:06:15 2023 +0000 |
tree | 464e5318c5a8055a55c63f197875e7e21c02013e | |
parent | 25d23b7d3256065ccad1090ace0eba982f7e8be8 [diff] |
DO NOT MERGE: Prevent non-system IME from becoming device admin Currently selected IME can inject KeyEvent on DeviceAdminAdd screen to activate itself as device admin and cause various DoS attacks. This CL ensures KeyEvent on "Activate" button can only come from system apps. Bug: 280793427 Test: atest DeviceAdminActivationTest (cherry picked from commit 70a501d02e0a6aefd874767a15378ba998759373) (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:f753a3c8df9e0fd15a445681532492ef5385d8f4) Merged-In: I6470d1684d707f4b1e86f8b456be0b4e0af5f188 Change-Id: I6470d1684d707f4b1e86f8b456be0b4e0af5f188