| commit | 8f2ce504259193d67d8382f94186e00864143ab3 | [log] [tgz] |
|---|---|---|
| author | Winson <chiuwinson@google.com> | Thu Apr 23 10:45:55 2020 -0700 |
| committer | Winson <chiuwinson@google.com> | Wed May 13 07:48:12 2020 -0700 |
| tree | a11f5482d9ead5aa9d927ecb3fe475f6bad4302b | |
| parent | 0d85a392afcb57a5111a8620ce68944850235626 [diff] |
Verify INSTALL_PACKAGES permissions when adding installer package Without this check, any package can set the installer package of another package whose installer has been removed or was never set. This provides access to other privileged actions and is undesired. Bug: 150857253 Test: manual verify with proof of concept in linked bug Test: atest android.appsecurity.cts.PackageSetInstallerTest Change-Id: I2159c357911ff39ffd819054b42f96ae86bc98bc