Merge "Prevent system reset staged installer bypass flag unexpactly" into rvc-dev am: 809bf93563
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/12106109 Change-Id: I092e2b160d4b152915c04f699d930d5b36be184f
This commit is contained in:
@@ -589,12 +589,12 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements
|
||||
}
|
||||
}
|
||||
|
||||
if (mBypassNextStagedInstallerCheck) {
|
||||
mBypassNextStagedInstallerCheck = false;
|
||||
} else if (params.isStaged
|
||||
&& !isCalledBySystemOrShell(callingUid)
|
||||
&& !isWhitelistedStagedInstaller(requestedInstallerPackageName)) {
|
||||
throw new SecurityException("Installer not allowed to commit staged install");
|
||||
if (params.isStaged && !isCalledBySystemOrShell(callingUid)) {
|
||||
if (mBypassNextStagedInstallerCheck) {
|
||||
mBypassNextStagedInstallerCheck = false;
|
||||
} else if (!isStagedInstallerAllowed(requestedInstallerPackageName)) {
|
||||
throw new SecurityException("Installer not allowed to commit staged install");
|
||||
}
|
||||
}
|
||||
|
||||
if (!params.isMultiPackage) {
|
||||
@@ -725,7 +725,7 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements
|
||||
|| callingUid == Process.SHELL_UID;
|
||||
}
|
||||
|
||||
private boolean isWhitelistedStagedInstaller(String installerName) {
|
||||
private boolean isStagedInstallerAllowed(String installerName) {
|
||||
return SystemConfig.getInstance().getWhitelistedStagedInstallers().contains(installerName);
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user