| commit | 435c8fe2f8a92dd086a16c19eaafc2fcf7df4b29 | [log] [tgz] |
|---|---|---|
| author | Songchun Fan <schfan@google.com> | Fri Jan 27 16:23:23 2023 -0800 |
| committer | Songchun Fan <schfan@google.com> | Fri Jan 27 16:31:37 2023 -0800 |
| tree | a65fc44092c29cf27d361291e68d447a7871acd2 | |
| parent | 729d0a62be46bd71e46254e539ee68229f0fa840 [diff] |
[pm] prevent non-debuggable app downgrades via shell Downgrade can only be performed if the following conditions are met: 1. Downgrade is requested in the installFlags 2a. App is debuggable Or 2b: If app is not debuggable, the build is debuggable or the calling uid is system or root. This means shell can't downgrade a non-debuggable app on a non-debuggable build. BUG: 256202273 Test: manual Change-Id: I841878502eaa9574e98a38a77e73352fd9735677