commit 425afdeaa1ccd6ae88073f45d4a60d3161cbc372
author Todd Kennedy <toddke@google.com> Fri Sep 20 13:45:15 2019 -0700
committer android-build-team Robot <android-build-team-robot@google.com> Fri Oct 11 18:50:43 2019 +0000
tree cb3ba4055f652a58d9777f1cf7dd2c29cb113541
parent 462511bc9c2720a7774485802ef1fb0730fddf37

Only allow INSTALL_ALLOW_TEST from shell or root

Bug: 141169173
Test: Manual. App can't be installed as test-only
Change-Id: Ib6dcca7901aa549d620448c0165c22270a3042be
(cherry picked from commit b5afc874838857bac783555bd665ac3bdd7966f9)

services/core/java/com/android/server/pm/PackageInstallerService.java

diff --git a/services/core/java/com/android/server/pm/PackageInstallerService.java b/services/core/java/com/android/server/pm/PackageInstallerService.java
index e75f545..0329e2c 100644
--- a/services/core/java/com/android/server/pm/PackageInstallerService.java
+++ b/services/core/java/com/android/server/pm/PackageInstallerService.java
@@ -491,6 +491,7 @@
 
             params.installFlags &= ~PackageManager.INSTALL_FROM_ADB;
             params.installFlags &= ~PackageManager.INSTALL_ALL_USERS;
+            params.installFlags &= ~PackageManager.INSTALL_ALLOW_TEST;
             params.installFlags |= PackageManager.INSTALL_REPLACE_EXISTING;
             if ((params.installFlags & PackageManager.INSTALL_VIRTUAL_PRELOAD) != 0
                     && !mPm.isCallerVerifier(callingUid)) {