summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
author yawanng <yawanng@google.com> 2021-02-08 22:38:28 +0000
committer Patrick Baumann <patb@google.com> 2021-03-01 17:04:52 +0000
commit83cc106ca0907f977d12fbf1a75f4090038fdccc (patch)
treec3e88ad007c07ae5e0f5f5fce60f26ff0af3b9d4
parenta0f134bd117a98ed27293af711c6b6d367bad6c3 (diff)
Adds caller check to getAllPackages()
This change enforces that only system, root or shell may call getAllPackages(), a hidden API that shares all package names regardless of user, instant app or package visibility rules. Bug: 174661955 Change-Id: I77460ae19a4d41151577646441f11e2eddbb741a Merged-In: I77460ae19a4d41151577646441f11e2eddbb741a (cherry picked from commit 8124efd57b50056d22e1b63c32c366ebdf049598)
-rw-r--r--services/core/java/com/android/server/pm/PackageManagerService.java1
1 files changed, 1 insertions, 0 deletions
diff --git a/services/core/java/com/android/server/pm/PackageManagerService.java b/services/core/java/com/android/server/pm/PackageManagerService.java
index 84213092081d..d93c2f1118ca 100644
--- a/services/core/java/com/android/server/pm/PackageManagerService.java
+++ b/services/core/java/com/android/server/pm/PackageManagerService.java
@@ -6334,6 +6334,7 @@ public class PackageManagerService extends IPackageManager.Stub
@Override
public List<String> getAllPackages() {
+ enforceSystemOrRootOrShell("getAllPackages is limited to privileged callers");
final int callingUid = Binder.getCallingUid();
final int callingUserId = UserHandle.getUserId(callingUid);
synchronized (mPackages) {