All of PackageInstaller's declared receivers receive system broadcasts, so they do not need to be exported. Leaving them exported opens up vulnerabilities for apps to launch them and execute functionality that PackageInstaller includes. Bug: 191283525 Test: manual, verify receivers still work Test: atest com.android.packageinstaller.test.ExportedComponentTest Merged-In: I782fc21c848831a2a4aeab736cd47ad45781b290 Change-Id: I782fc21c848831a2a4aeab736cd47ad45781b290 (cherry picked from commit 0806568d4133e1dc736ebcc45f62655165366a9e)
28 lines
499 B
Plaintext
28 lines
499 B
Plaintext
{
|
|
"postsubmit": [
|
|
{
|
|
"name": "CtsPackageInstallTestCases",
|
|
"options": [
|
|
{
|
|
"exclude-annotation": "android.platform.test.annotations.AppModeInstant"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "CtsNoPermissionTestCases"
|
|
},
|
|
{
|
|
"name": "CtsNoPermissionTestCases25"
|
|
},
|
|
{
|
|
"name": "CtsPackageInstallerTapjackingTestCases"
|
|
},
|
|
{
|
|
"name": "CtsPackageUninstallTestCases"
|
|
},
|
|
{
|
|
"name": "PackageInstallerTests"
|
|
}
|
|
]
|
|
}
|