Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4173c5a5 authored by Nikita Ioffe's avatar Nikita Ioffe Committed by Android (Google) Code Review
Browse files

Merge "Allow holders of INSTALL_PACKAGE_UPDATES permission to update APEXes" into sc-dev

parents 5bb0024e 71ddb009

services/core/java/com/android/server/pm/PackageInstallerService.java

+8 −1
Original line number Diff line number Diff line
@@ -626,7 +626,14 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements 
        }



        boolean isApex = (params.installFlags & PackageManager.INSTALL_APEX) != 0;

        if (params.isStaged || isApex) {

        if (isApex) {

            if (mContext.checkCallingOrSelfPermission(Manifest.permission.INSTALL_PACKAGE_UPDATES)

                    == PackageManager.PERMISSION_DENIED

                    && mContext.checkCallingOrSelfPermission(Manifest.permission.INSTALL_PACKAGES)

                    == PackageManager.PERMISSION_DENIED) {

                throw new SecurityException("Not allowed to perform APEX updates");

            }

        } else if (params.isStaged) {

            mContext.enforceCallingOrSelfPermission(Manifest.permission.INSTALL_PACKAGES, TAG);

        }