diff options
| author | 2021-02-08 22:38:28 +0000 | |
|---|---|---|
| committer | 2021-03-01 17:04:52 +0000 | |
| commit | 83cc106ca0907f977d12fbf1a75f4090038fdccc (patch) | |
| tree | c3e88ad007c07ae5e0f5f5fce60f26ff0af3b9d4 | |
| parent | a0f134bd117a98ed27293af711c6b6d367bad6c3 (diff) | |
Adds caller check to getAllPackages()
This change enforces that only system, root or shell may call
getAllPackages(), a hidden API that shares all package names regardless
of user, instant app or package visibility rules.
Bug: 174661955
Change-Id: I77460ae19a4d41151577646441f11e2eddbb741a
Merged-In: I77460ae19a4d41151577646441f11e2eddbb741a
(cherry picked from commit 8124efd57b50056d22e1b63c32c366ebdf049598)
| -rw-r--r-- | services/core/java/com/android/server/pm/PackageManagerService.java | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/services/core/java/com/android/server/pm/PackageManagerService.java b/services/core/java/com/android/server/pm/PackageManagerService.java index 84213092081d..d93c2f1118ca 100644 --- a/services/core/java/com/android/server/pm/PackageManagerService.java +++ b/services/core/java/com/android/server/pm/PackageManagerService.java @@ -6334,6 +6334,7 @@ public class PackageManagerService extends IPackageManager.Stub @Override public List<String> getAllPackages() { + enforceSystemOrRootOrShell("getAllPackages is limited to privileged callers"); final int callingUid = Binder.getCallingUid(); final int callingUserId = UserHandle.getUserId(callingUid); synchronized (mPackages) { |