tree c1bb1f1c8dd6e60ee051adeb8f14fbeea0b176af
parent b1ae5fd44388f4e3c74a8caa690d4a66e9f99f4d
author Winson <chiuwinson@google.com> 1587663955 -0700
committer Winson Chiu <chiuwinson@google.com> 1590081473 +0000

DO NOT MERGE: Verify INSTALL_PACKAGES permissions when adding installer package

Without this check, any package can set the installer package of
another package whose installer has been removed or was never set.
This provides access to other privileged actions and is undesired.

Bug: 150857253

Test: manual verify with proof of concept in linked bug
Test: atest android.appsecurity.cts.PackageSetInstallerTest

Change-Id: I2159c357911ff39ffd819054b42f96ae86bc98bc