ef0cac74dbf342989ff0bed508cfe4821868b196 - platform_frameworks_base

commit	ef0cac74dbf342989ff0bed508cfe4821868b196	[log] [tgz]
author	Winson <chiuwinson@google.com>	Wed Dec 16 18:20:00 2020 -0800
committer	Winson <chiuwinson@google.com>	Thu Feb 04 10:26:59 2021 -0800
tree	5cdebf62e9b8bd65f7894f7d1f962aebd5fd8604
parent	5429dfc35efa75c80dc958a1f179378faed26066 [diff]

Add DomainVerificationEnforcer

Abstracts the permission/caller enforcement code from
DomainVerificationService.

There's 3 types of callers the service cares about:
1. Able to change internal state, which for now is only system and shell
    - Not currently used, but will be for debug/shell commands
2. Approved verifier, which is system, shell, or the verification agent
3. Approved user state selector, which requires the permission

Exempt-From-Owner-Approval: Already approved by owners on main branch

Bug: 163565712

Test: atest DomainVerificationEnforcerTest

Change-Id: I7c00e4ebd843537e0b20e60c82a1c4abf2904596

services/core/java/com/android/server/pm/PackageManagerService.java[diff]
services/core/java/com/android/server/pm/domain/verify/DomainVerificationEnforcer.java[Added - diff]
services/core/java/com/android/server/pm/domain/verify/DomainVerificationService.java[diff]
services/tests/PackageManagerServiceTests/unit/Android.bp[diff]
services/tests/PackageManagerServiceTests/unit/src/com/android/server/pm/test/domain/verify/DomainVerificationEnforcerTest.kt[Added - diff]

5 files changed