Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3b1c3e65 authored by Nikita Ioffe's avatar Nikita Ioffe Committed by Android (Google) Code Review
Browse files

Merge "Unset INSTALL_DISABLE_VERIFICATION flag if install is not from system"

parents cba3662c a9543490

services/core/java/com/android/server/pm/PackageInstallerService.java

+5 −0
Original line number Original line Diff line number Diff line
@@ -505,6 +505,11 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements 
            params.installFlags &= ~PackageManager.INSTALL_REQUEST_DOWNGRADE;

            params.installFlags &= ~PackageManager.INSTALL_REQUEST_DOWNGRADE;

        }

        }





        if (callingUid != Process.SYSTEM_UID) {

            // Only system_server can use INSTALL_DISABLE_VERIFICATION.

            params.installFlags &= ~PackageManager.INSTALL_DISABLE_VERIFICATION;

        }



        boolean isApex = (params.installFlags & PackageManager.INSTALL_APEX) != 0;

        boolean isApex = (params.installFlags & PackageManager.INSTALL_APEX) != 0;

        if (params.isStaged || isApex) {

        if (params.isStaged || isApex) {

            mContext.enforceCallingOrSelfPermission(Manifest.permission.INSTALL_PACKAGES, TAG);

            mContext.enforceCallingOrSelfPermission(Manifest.permission.INSTALL_PACKAGES, TAG);