OSDN Git Service

(root) / android-x86 / frameworks-base.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b1ae5fd) | patch
DO NOT MERGE: Verify INSTALL_PACKAGES permissions when adding installer package
authorWinson <chiuwinson@google.com>
Thu, 23 Apr 2020 17:45:55 +0000 (10:45 -0700)
committerWinson Chiu <chiuwinson@google.com>
Thu, 21 May 2020 17:17:53 +0000 (17:17 +0000)
commit40ca8b51fa90457cc49b91eac00636d1626b3a1b
treec1bb1f1c8dd6e60ee051adeb8f14fbeea0b176aftree | snapshot
parentb1ae5fd44388f4e3c74a8caa690d4a66e9f99f4dcommit | diff
DO NOT MERGE: Verify INSTALL_PACKAGES permissions when adding installer package

Without this check, any package can set the installer package of
another package whose installer has been removed or was never set.
This provides access to other privileged actions and is undesired.

Bug: 150857253

Test: manual verify with proof of concept in linked bug
Test: atest android.appsecurity.cts.PackageSetInstallerTest

Change-Id: I2159c357911ff39ffd819054b42f96ae86bc98bc
services/core/java/com/android/server/pm/PackageManagerService.java diff | blob | history
frameworks/base
About OSDN
Find Software
Develop Software
Help