| /* |
| * Copyright (C) 2021 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| package android.devicepolicy.cts; |
| |
| import static com.google.common.truth.Truth.assertThat; |
| import static com.google.common.truth.Truth.assertWithMessage; |
| |
| import static org.testng.Assert.assertThrows; |
| |
| import android.Manifest.permission; |
| import android.app.ActivityManager; |
| import android.content.pm.ApplicationInfo; |
| import android.content.pm.PackageInfo; |
| import android.content.pm.PackageManager; |
| import android.util.Log; |
| |
| import com.android.bedstead.harrier.BedsteadJUnit4; |
| import com.android.bedstead.harrier.DeviceState; |
| import com.android.bedstead.harrier.annotations.EnsureHasPermission; |
| import com.android.bedstead.harrier.annotations.Postsubmit; |
| import com.android.bedstead.harrier.annotations.enterprise.CannotSetPolicyTest; |
| import com.android.bedstead.harrier.annotations.enterprise.PositivePolicyTest; |
| import com.android.bedstead.harrier.policies.UserControlDisabledPackages; |
| import com.android.bedstead.nene.TestApis; |
| import com.android.bedstead.nene.users.UserReference; |
| import com.android.bedstead.testapp.TestApp; |
| import com.android.bedstead.testapp.TestAppActivityReference; |
| import com.android.bedstead.testapp.TestAppInstanceReference; |
| import com.android.bedstead.testapp.TestAppProvider; |
| |
| import org.junit.ClassRule; |
| import org.junit.Ignore; |
| import org.junit.Rule; |
| import org.junit.Test; |
| import org.junit.runner.RunWith; |
| |
| import java.util.Arrays; |
| import java.util.Collections; |
| import java.util.List; |
| |
| @RunWith(BedsteadJUnit4.class) |
| public class UserControlDisabledPackagesTest { |
| private static final String TAG = "UserControlDisabledPackagesTest"; |
| |
| private static final TestApis sTestApis = new TestApis(); |
| private static final TestAppProvider sTestAppProvider = new TestAppProvider(); |
| private static final TestApp sTestApp = sTestAppProvider.any(); |
| |
| private static final ActivityManager sActivityManager = |
| sTestApis.context().instrumentedContext().getSystemService(ActivityManager.class); |
| private static final PackageManager sPackageManager = |
| sTestApis.context().instrumentedContext().getPackageManager(); |
| |
| private static final String PACKAGE_NAME = "com.android.foo.bar.baz"; |
| |
| @ClassRule |
| @Rule |
| public static final DeviceState sDeviceState = new DeviceState(); |
| |
| @Test |
| @Postsubmit(reason = "New test") |
| @PositivePolicyTest(policy = UserControlDisabledPackages.class) |
| public void setUserControlDisabledPackages_toOneProtectedPackage() { |
| List<String> originalDisabledPackages = |
| sDeviceState.dpc().devicePolicyManager().getUserControlDisabledPackages(); |
| |
| sDeviceState.dpc().devicePolicyManager().setUserControlDisabledPackages( |
| Arrays.asList(PACKAGE_NAME)); |
| try { |
| assertThat(sDeviceState.dpc().devicePolicyManager().getUserControlDisabledPackages()) |
| .containsExactly(PACKAGE_NAME); |
| } finally { |
| sDeviceState.dpc().devicePolicyManager().setUserControlDisabledPackages( |
| originalDisabledPackages); |
| } |
| } |
| |
| @Test |
| @Postsubmit(reason = "New test") |
| @PositivePolicyTest(policy = UserControlDisabledPackages.class) |
| public void setUserControlDisabledPackages_toEmptyProtectedPackages() { |
| List<String> originalDisabledPackages = |
| sDeviceState.dpc().devicePolicyManager().getUserControlDisabledPackages(); |
| |
| sDeviceState.dpc().devicePolicyManager().setUserControlDisabledPackages( |
| Collections.emptyList()); |
| try { |
| assertThat( |
| sDeviceState.dpc().devicePolicyManager().getUserControlDisabledPackages()).isEmpty(); |
| } finally { |
| sDeviceState.dpc().devicePolicyManager().setUserControlDisabledPackages( |
| originalDisabledPackages); |
| } |
| } |
| |
| @Test |
| @Postsubmit(reason = "New test") |
| @CannotSetPolicyTest(policy = UserControlDisabledPackages.class) |
| public void setUserControlDisabledPackages_notAllowedToSetProtectedPackages_throwsException() { |
| assertThrows(SecurityException.class, |
| () -> sDeviceState.dpc().devicePolicyManager().setUserControlDisabledPackages( |
| Collections.emptyList())); |
| } |
| |
| @Test |
| @Postsubmit(reason = "New test") |
| @PositivePolicyTest(policy = UserControlDisabledPackages.class) |
| public void |
| getUserControlDisabledPackages_noProtectedPackagesSet_returnsEmptyProtectedPackages() { |
| // This is testing the default state of the device so the disabled packages returned should |
| // be empty. |
| assertThat(sDeviceState.dpc().devicePolicyManager().getUserControlDisabledPackages()) |
| .isEmpty(); |
| } |
| |
| @Test |
| @Postsubmit(reason = "New test") |
| @CannotSetPolicyTest(policy = UserControlDisabledPackages.class) |
| public void |
| getUserControlDisabledPackages_notAllowedToRetrieveProtectedPackages_throwsException() { |
| assertThrows(SecurityException.class, |
| () -> sDeviceState.dpc().devicePolicyManager().getUserControlDisabledPackages()); |
| } |
| |
| @Test |
| @Postsubmit(reason = "New test") |
| @EnsureHasPermission(value = permission.FORCE_STOP_PACKAGES) |
| @PositivePolicyTest(policy = UserControlDisabledPackages.class) |
| @Ignore // TODO(b/189325405): Re-enable once secondary users can start activities |
| public void setUserControlDisabledPackages_launchActivity_verifyPackageNotStopped() |
| throws Exception { |
| List<String> originalDisabledPackages = |
| sDeviceState.dpc().devicePolicyManager().getUserControlDisabledPackages(); |
| UserReference currentRunningUserOnTest = sTestApis.users().instrumented(); |
| int currentRunningUserId = currentRunningUserOnTest.id(); |
| String testAppPackageName = sTestApp.packageName(); |
| |
| sDeviceState.dpc().devicePolicyManager().setUserControlDisabledPackages( |
| Arrays.asList(testAppPackageName)); |
| try (TestAppInstanceReference instance = sTestApp.install(currentRunningUserOnTest)) { |
| instance.activities().any().start(); |
| |
| sActivityManager.forceStopPackageAsUser(testAppPackageName, currentRunningUserId); |
| |
| try { |
| assertPackageStopped( |
| testAppPackageName, currentRunningUserId, /* stopped= */ false); |
| } finally { |
| stopPackage(testAppPackageName, currentRunningUserId); |
| } |
| } finally { |
| sDeviceState.dpc().devicePolicyManager().setUserControlDisabledPackages( |
| originalDisabledPackages); |
| } |
| } |
| |
| private void stopPackage(String packageName, int userId) throws Exception { |
| sDeviceState.dpc().devicePolicyManager().setUserControlDisabledPackages( |
| Collections.emptyList()); |
| sActivityManager.forceStopPackageAsUser(packageName, userId); |
| assertPackageStopped(packageName, userId, /* stopped= */ true); |
| } |
| |
| private void assertPackageStopped(String packageName, int userId, boolean stopped) |
| throws Exception { |
| assertWithMessage("Package %s stopped for user %s", packageName, userId) |
| .that(isPackageStopped(packageName, userId)).isEqualTo(stopped); |
| } |
| |
| private boolean isPackageStopped(String packageName, int userId) throws Exception { |
| PackageInfo packageInfo = sPackageManager.getPackageInfoAsUser( |
| packageName, PackageManager.GET_META_DATA, userId); |
| boolean stopped = (packageInfo.applicationInfo.flags & ApplicationInfo.FLAG_STOPPED) |
| == ApplicationInfo.FLAG_STOPPED; |
| Log.i(TAG, "Application flags for " + packageName + " on user " + userId + " = " |
| + Integer.toHexString(packageInfo.applicationInfo.flags) + ". Stopped: " + stopped); |
| return stopped; |
| } |
| } |