From dedeee88f4c5f2f8c646a73f0dd09e277bdb1dcd Mon Sep 17 00:00:00 2001 From: Todd Kennedy Date: Fri, 20 Sep 2019 13:45:15 -0700 Subject: Only allow INSTALL_ALLOW_TEST from shell or root Bug: 141169173 Test: Manual. App can't be installed as test-only Change-Id: Ib6dcca7901aa549d620448c0165c22270a3042be (cherry picked from commit b5afc874838857bac783555bd665ac3bdd7966f9) --- services/core/java/com/android/server/pm/PackageInstallerService.java | 1 + 1 file changed, 1 insertion(+) diff --git a/services/core/java/com/android/server/pm/PackageInstallerService.java b/services/core/java/com/android/server/pm/PackageInstallerService.java index e75f545eafaa..0329e2c5ed45 100644 --- a/services/core/java/com/android/server/pm/PackageInstallerService.java +++ b/services/core/java/com/android/server/pm/PackageInstallerService.java @@ -491,6 +491,7 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements params.installFlags &= ~PackageManager.INSTALL_FROM_ADB; params.installFlags &= ~PackageManager.INSTALL_ALL_USERS; + params.installFlags &= ~PackageManager.INSTALL_ALLOW_TEST; params.installFlags |= PackageManager.INSTALL_REPLACE_EXISTING; if ((params.installFlags & PackageManager.INSTALL_VIRTUAL_PRELOAD) != 0 && !mPm.isCallerVerifier(callingUid)) { -- cgit v1.2.3-59-g8ed1b