tree 88965c52e964c34056ba99735d7f2a66577c45fc
parent e3348a25935099838a917cf4556c4dccc714e0ef
author Todd Kennedy <toddke@google.com> 1527632286 -0700
committer Todd Kennedy <toddke@google.com> 1527713777 -0700

Ensure permission held for MATCH_KNOWN_PACKAGES

There's an escape clause that passes the cross user permissions
if the caller UID is identical to the target user ID [eg. we're not
operating across users]. However, the method getInstalledPackagesList()
uses android.permission.INTERACT_ACROSS_USERS to filter the results and
a calling UID check is not sufficient. Ensuure the permission is
actually held, regardless of the calling UID or target user.

Change-Id: Iebf88668766d387a15246d6eea6420610665105a
Fixes: 80435086
Test: atest CtsAppSecurityHostTestCases:ApplicationVisibilityTest