1dbe6d02849cb4af87bbd26b7537e11badead3b1 - platform_frameworks_base

commit	1dbe6d02849cb4af87bbd26b7537e11badead3b1	[log] [tgz]
author	Dan Cashman <dcashman@google.com>	Tue Jan 23 11:18:28 2018 -0800
committer	Dan Cashman <dcashman@google.com>	Tue Jan 30 16:59:31 2018 -0800
tree	9e0f2ec09d4f7f35a564874515759fac8f894a25
parent	a656b8bf9fddf18c506a4f59989d55b9eb6abaa8 [diff]

Add key rotation.

Change certificate checks to also consider the possibility of
signing certificate rotation by checking the
SigningDetails#pastSigningCertificates field.  In particular, add a
SigningDetails#checkCapability method which reports whether or not
the older SigningDetails is an ancestor of the current one, and
queries whether or not the old one has been granted capabilities,
such as being a sharedUser.

Bug: 64686581
Test: Builds, boots, browser and camera work, all with v3 signing.

Change-Id: I4199ff3f2d9ae959325b117b28e666ae31889800

core/java/android/content/pm/PackageParser.java[diff]
core/java/android/content/pm/Signature.java[diff]
services/core/java/com/android/server/pm/InstantAppRegistry.java[diff]
services/core/java/com/android/server/pm/PackageManagerService.java[diff]
services/core/java/com/android/server/pm/PackageManagerServiceUtils.java[diff]
services/core/java/com/android/server/pm/PackageSettingBase.java[diff]
services/core/java/com/android/server/pm/SELinuxMMAC.java[diff]
services/core/java/com/android/server/pm/permission/DefaultPermissionGrantPolicy.java[diff]
services/core/java/com/android/server/pm/permission/PermissionManagerService.java[diff]

9 files changed

tree: 9e0f2ec09d4f7f35a564874515759fac8f894a25