Merge "Limit bypass staged installer API to system and shell only" into rvc-dev am: e91800d290

Change-Id: Ia2df2ffa4e5a71d1354912fc8c6df38878ddfb62
2020-04-23 02:11:06 +00:00
parent 45460c603b e91800d290
commit 5de91c6ec8
1 changed files with 3 additions and 0 deletions
--- a/services/core/java/com/android/server/pm/PackageInstallerService.java
+++ b/services/core/java/com/android/server/pm/PackageInstallerService.java
@@ -979,6 +979,9 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements

    @Override
    public void bypassNextStagedInstallerCheck(boolean value) {
+        if (!isCalledBySystemOrShell(Binder.getCallingUid())) {
+            throw new SecurityException("Caller not allowed to bypass staged installer check");
+        }
        mBypassNextStagedInstallerCheck = value;
    }