summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRubin Xu <rubinxu@google.com>2018-01-11 10:59:19 +0000
committerandroid-build-team Robot <android-build-team-robot@google.com>2018-03-21 19:24:38 +0000
commit96e0a1ff3c60f388608f95f25ad7f85d2cdc8903 (patch)
tree2730df68d32e124441719cde5f0b77b50cf47204
parent3b607539bf9d7765f95cf19e8f2187d2c0e1cf40 (diff)
downloadbase-96e0a1ff3c60f388608f95f25ad7f85d2cdc8903.tar.gz
[DO NOT MERGE] Add permission check to setAllowOnlyVpnForUids
Bug: 63000005 Test: runtest frameworks-net -c com.android.server.connectivity.VpnTest Test: cts-tradefed run cts-dev -m CtsDevicePolicyManagerTestCases -t com.android.cts.devicepolicy.MixedDeviceOwnerTest#testAlwaysOnVpnLockDown Merged-In: Ia1a82ee73d8617f3124032986fe6c09c14bf7752 Change-Id: Ia1a82ee73d8617f3124032986fe6c09c14bf7752 (cherry picked from commit f915e04d5010c4dfffad263fa70c1e412e856314)
-rw-r--r--services/core/java/com/android/server/NetworkManagementService.java2
1 files changed, 2 insertions, 0 deletions
diff --git a/services/core/java/com/android/server/NetworkManagementService.java b/services/core/java/com/android/server/NetworkManagementService.java
index 1854e2b740f4..66d01c7885c9 100644
--- a/services/core/java/com/android/server/NetworkManagementService.java
+++ b/services/core/java/com/android/server/NetworkManagementService.java
@@ -1777,6 +1777,8 @@ public class NetworkManagementService extends INetworkManagementService.Stub
@Override
public void setAllowOnlyVpnForUids(boolean add, UidRange[] uidRanges)
throws ServiceSpecificException {
+ mContext.enforceCallingOrSelfPermission(NETWORK_STACK, TAG);
+
try {
mNetdService.networkRejectNonSecureVpn(add, uidRanges);
} catch (ServiceSpecificException e) {