Merge "Limit bypass staged installer API to system and shell only" into rvc-dev

This commit is contained in:
TreeHugger Robot
2020-04-23 01:56:22 +00:00
committed by Android (Google) Code Review

View File

@@ -979,6 +979,9 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements
@Override @Override
public void bypassNextStagedInstallerCheck(boolean value) { public void bypassNextStagedInstallerCheck(boolean value) {
if (!isCalledBySystemOrShell(Binder.getCallingUid())) {
throw new SecurityException("Caller not allowed to bypass staged installer check");
}
mBypassNextStagedInstallerCheck = value; mBypassNextStagedInstallerCheck = value;
} }