Only allow INSTALL_ALLOW_TEST from shell or root am: 702d394762

am: 8ff59f6a14

Change-Id: I13fc086058cf0f40614bdb5d19cb53211772e628

diff --cc services/core/java/com/android/server/pm/PackageInstallerService.java
index 1fa37b9,8fc1356..49bf8cc
--- 1/services/core/java/com/android/server/pm/PackageInstallerService.java
--- 2/services/core/java/com/android/server/pm/PackageInstallerService.java
+++ b/services/core/java/com/android/server/pm/PackageInstallerService.java
@@@ -440,11 -614,8 +440,12 @@@ public class PackageInstallerService ex
  
              params.installFlags &= ~PackageManager.INSTALL_FROM_ADB;
              params.installFlags &= ~PackageManager.INSTALL_ALL_USERS;
+             params.installFlags &= ~PackageManager.INSTALL_ALLOW_TEST;
              params.installFlags |= PackageManager.INSTALL_REPLACE_EXISTING;
 +            if ((params.installFlags & PackageManager.INSTALL_VIRTUAL_PRELOAD) != 0
 +                    && !mPm.isCallerVerifier(callingUid)) {
 +                params.installFlags &= ~PackageManager.INSTALL_VIRTUAL_PRELOAD;
 +            }
          }
  
          // Only system components can circumvent runtime permissions when installing.