Merge "Enfore cross-user permission to getPackagesForUid" into sc-dev

2021-02-26 01:11:47 +00:00
parent fd7bff7f70 fb43352f1c
commit ca139c0fe3
1 changed files with 5 additions and 0 deletions
--- a/services/core/java/com/android/server/pm/PackageManagerService.java
+++ b/services/core/java/com/android/server/pm/PackageManagerService.java
@@ -9167,6 +9167,11 @@ public class PackageManagerService extends IPackageManager.Stub
     */
    @Override
    public String[] getPackagesForUid(int uid) {
+        final int callingUid = Binder.getCallingUid();
+        final int userId = UserHandle.getUserId(uid);
+        enforceCrossUserOrProfilePermission(callingUid, userId,
+                /* requireFullPermission */ false,
+                /* checkShell */ false, "getPackagesForUid");
        return snapshotComputer().getPackagesForUid(uid);
    }