| commit | fa0db3328b32e037107eee3012fb8461910c23c0 | [log] [tgz] |
|---|---|---|
| author | Wenhao Wang <wenhaowang@google.com> | Fri May 19 05:27:25 2023 +0000 |
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Fri May 19 05:27:25 2023 +0000 |
| tree | b864fff9c655cdf7ed490d0edb11d3faf364b67e | |
| parent | f8a729e2f8225287dd726ff4f105fb12e0e91af9 [diff] | |
| parent | 62fef3500ac7fd2e3322e43d624f3d4e9884cfd3 [diff] |
Merge "[BIC] Filter out REQUEST_INSTALL_PACKAGES perm" into udc-dev am: 62fef3500a Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/23303159 Change-Id: I4129e1865feb01a7cd16251a7e8cb880037dfc64 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/services/core/java/com/android/server/pm/BackgroundInstallControlService.java b/services/core/java/com/android/server/pm/BackgroundInstallControlService.java index 0bb05aa..1b34c70 100644 --- a/services/core/java/com/android/server/pm/BackgroundInstallControlService.java +++ b/services/core/java/com/android/server/pm/BackgroundInstallControlService.java
@@ -231,6 +231,14 @@ return; } + // the installers without INSTALL_PACKAGES perm can't perform + // the installation in background. So we can just filter out them. + if (mPermissionManager.checkPermission(installerPackageName, + android.Manifest.permission.INSTALL_PACKAGES, + userId) != PackageManager.PERMISSION_GRANTED) { + return; + } + // convert up-time to current time. final long installTimestamp = System.currentTimeMillis() - (SystemClock.uptimeMillis() - appInfo.createTimestamp);