Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit fb43352f authored by Jackal Guo's avatar Jackal Guo
Browse files

Enfore cross-user permission to getPackagesForUid 

Apps could use getPackagesForUid with given UID to query if there
is a installed and get its package name across user. Expect for
package visibility filtering, we also need to ensure across-user
calls come with appropriate permission.

Bug: 167654926
Test: atest ApplicationVisibilityTest
Change-Id: I435e0160128591b50ddd5998e7c558b78aaca9b1
parent f5e313dc

services/core/java/com/android/server/pm/PackageManagerService.java

+5 −0
Original line number Diff line number Diff line
@@ -9167,6 +9167,11 @@ public class PackageManagerService extends IPackageManager.Stub 
     */

    @Override

    public String[] getPackagesForUid(int uid) {

        final int callingUid = Binder.getCallingUid();

        final int userId = UserHandle.getUserId(uid);

        enforceCrossUserOrProfilePermission(callingUid, userId,

                /* requireFullPermission */ false,

                /* checkShell */ false, "getPackagesForUid");

        return snapshotComputer().getPackagesForUid(uid);

    }