tree 9b7afaa54e84fbbd727d2030b5ac094c2a318012
parent 074d630f9e7a4dfd8acf3fa4fa1dfcb500184156
author Alex Klyubin <klyubin@google.com> 1456348901 -0800
committer Alex Klyubin <klyubin@google.com> 1456353722 -0800

Disallow downgrading of non-debuggable packages.

An attacker could downgrade a package to an older version with known
security vulnerabilities and then use some of the vulnerabilities to
access the application's data. This would constitute a bypass of
Android Application Sandbox. Thus, downgrading while keeping
application data is no longer permitted.

To help developers debug their apps, packages marked as debuggable can
still be downgraded while keeping their data. This does not put the
installed base at risk because, as a security measure, most
application stores reject packages marked as debuggable.

To downgrade a non-debuggable (i.e., release) package, uninstall the
package (thus wiping its data), then install the older version of the
package.

Bug: 27327503
Change-Id: Iac75ed3c3831b5d925dfd8b660527cfa95813da8