Assert knownSigner permission revoked when app no longer trusts cert
Android 12 introduced a new knownSigner permission protection flag
that allows an app to declare trusted signing certificates; if an
app requesting this permission is signed by one of the trusted
signing certs the permission will be granted to the app. However
if the declaring app is updated and the set of trusted certificates
is changed, or if the app no longer uses the knownSigner flag, then
the permission should be revoked from any requesting app that no
longer meets the signing identity requirements.
Bug: 172970984
Bug: 179727740
Test: atest PkgInstallSignatureVerificationTest
Change-Id: I7b7626c045458ededad0bde81aa51b5933457fd7
2 files changed