使用Device Policy Controller在后台升级应用程序

使用Device Policy Controller在后台升级应用程序

问题描述:

我有一个有效的DPC应用程序,它是设备所有者.我已经在两个不同的Android 6.0.1设备上进行了尝试,以排除任何设备/制造商问题.

I have a working DPC app which is the Device Owner. I have tried this on two different Android 6.0.1 devices to rule out any device/manufacturer issues.

我使用adb shell dpm set-device-owner com.example.dpc/.DpcDeviceAdminReceiver将我的DPC应用程序设置为所有者.成为所有者后,它可以正确地将COSU权限授予另一个应用程序,这使我确信这已经奏效.该命令返回了响应:

I used adb shell dpm set-device-owner com.example.dpc/.DpcDeviceAdminReceiver to make my DPC-app the owner. After making it the owner it can correctly grant COSU permissions to another app, which convinces me that this has worked. The command returned the response:

Success: Device owner set to package com.example.dpc
Active admin set to component {com.examplem.dpc/com.example.dpc.DpcDeviceAdminReceiver}

我想使用此应用来安装和升级另一个应用,而无需用户干预(就像Google Play一样).

I want to use this app to install and upgrade another app, without user intervention (like Google Play does).

我正在使用以下概念验证代码:

I am using the following proof-of-concept code:

void upgrade() {
    String apkFileName = "app_debug_2_0_0";

    PackageManager packageManger = getPackageManager();
    PackageInstaller packageInstaller = packageManger.getPackageInstaller();
    PackageInstaller.SessionParams params = new PackageInstaller.SessionParams(
            PackageInstaller.SessionParams.MODE_FULL_INSTALL);
    params.setAppPackageName("com.example.dummy");
    try {
        Log.e(TAG, "apkFileName " + apkFileName);

        InputStream ins = getResources().openRawResource(
                getResources().getIdentifier(apkFileName,
                        "raw", getPackageName()));

        int sessionId = packageInstaller.createSession(params);
        PackageInstaller.Session session = packageInstaller.openSession(sessionId);
        OutputStream out = session.openWrite(apkFileName, 0, -1);

        final int bufsize = 4096;
        byte[] bytes = new byte[bufsize];

        int len = 1; // any value > 0
        int tot = 0;
        while (len > 0) {
            len = ins.read(bytes, 0, bufsize);
            Log.d(TAG, "len: " + len);
            if (len < 1) break;
            out.write(bytes, 0, len);
            tot += len;
            Log.d(TAG, "copied: " + tot);
        }
        ins.close();

        session.fsync(out);
        out.close();

        Log.e(TAG, "about to commit ");
        session.commit(PendingIntent.getBroadcast(this, sessionId,
                new Intent("com.example.dpc.intent.UPDATE"), 0).getIntentSender());
        Log.e(TAG, "committed ");
    } catch (IOException e) {
        Log.e(TAG, "Error installing package " + apkFileName, e);
    }
}

使用上面的代码和变体,我收到一个包含错误的com.example.dpc.intent.UPDATE意图:

With the code above, and variants, I receive an com.example.dpc.intent.UPDATE intent containing an error:

Intent { 
    act=com.example.dpc.intent.UPDATE 
    flg=0x10 
    cmp=com.example.dpc/.DpcUpdateReceiver 
    bqHint=4 
    (has extras) 
}
Bundle[
    android.content.pm.extra.STATUS=4, 
    android.content.pm.extra.PACKAGE_NAME=com.example.dummy,
    android.content.pm.extra.SESSION_ID=1055214117, 
    android.content.pm.extra.LEGACY_STATUS=-15, 
    android.content.pm.extra.STATUS_MESSAGE=INSTALL_FAILED_TEST_ONLY: installPackageLI
]

Logcat正确报告了正在流传输到session.openWrite流中的apk的大小.

Logcat correctly reports the size of the apk which is being streamed into the session.openWrite stream.

我已经看过了:

  • gradle version - I am using Android Studio and Gradle v3.0.0 and not an unstable version.
  • the number of bytes copied from the res/raw apk file: 1418604 which is correct.
  • the manifest - there is no testOnly attribute. https://developer.android.com/guide/topics/manifest/application-element.html#testOnly

我在做什么错了?

该错误来自frameworks/base/services/core/java/com/android/server/pm/PackageManagerService.java中的以下Android 6.0.1代码.

The error was coming from the following Android 6.0.1 code in frameworks/base/services/core/java/com/android/server/pm/PackageManagerService.java.

if ((pkg.applicationInfo.flags&ApplicationInfo.FLAG_TEST_ONLY) != 0) {
    if ((installFlags & PackageManager.INSTALL_ALLOW_TEST) == 0) {
        res.setError(INSTALL_FAILED_TEST_ONLY, "installPackageLI");
        return;
    }
}

我检查了要安装的应用程序,发现已设置FLAG_TEST_ONLY位. 为什么是Android Studio 3.0. 0是否在APK上设置FLAG_TEST_ONLY?

I checked the app which I was trying to install, and found that the FLAG_TEST_ONLY bit was set. Why is Android Studio 3.0.0 setting FLAG_TEST_ONLY on APKs?