commit 62fef3500ac7fd2e3322e43d624f3d4e9884cfd3
author Wenhao Wang <wenhaowang@google.com> Fri May 19 05:18:17 2023 +0000
committer Android (Google) Code Review <android-gerrit@google.com> Fri May 19 05:18:17 2023 +0000
tree d958771462820a675c0769614b5856d623c754be
parent d699207d52f3c97bc731823d5c7a3d3674285b6c
parent e8170d76b21ebcbfe3b21991d66802dd97935452

Merge "[BIC] Filter out REQUEST_INSTALL_PACKAGES perm" into udc-dev

services/core/java/com/android/server/pm/BackgroundInstallControlService.java

diff --git a/services/core/java/com/android/server/pm/BackgroundInstallControlService.java b/services/core/java/com/android/server/pm/BackgroundInstallControlService.java
index 0bb05aa..1b34c70 100644
--- a/services/core/java/com/android/server/pm/BackgroundInstallControlService.java
+++ b/services/core/java/com/android/server/pm/BackgroundInstallControlService.java
@@ -231,6 +231,14 @@
             return;
         }
 
+        // the installers without INSTALL_PACKAGES perm can't perform
+        // the installation in background. So we can just filter out them.
+        if (mPermissionManager.checkPermission(installerPackageName,
+                android.Manifest.permission.INSTALL_PACKAGES,
+                userId) != PackageManager.PERMISSION_GRANTED) {
+            return;
+        }
+
         // convert up-time to current time.
         final long installTimestamp = System.currentTimeMillis()
                 - (SystemClock.uptimeMillis() - appInfo.createTimestamp);