1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
|
/*
* Copyright (C) 2020 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package android.permission.cts
import android.Manifest.permission.ACCESS_MEDIA_LOCATION
import android.Manifest.permission.READ_EXTERNAL_STORAGE
import android.Manifest.permission.WRITE_EXTERNAL_STORAGE
import android.app.Instrumentation
import android.app.UiAutomation
import android.content.Context
import android.content.pm.PackageManager
import androidx.test.platform.app.InstrumentationRegistry
import com.android.compatibility.common.util.SystemUtil
import org.junit.After
import org.junit.Assert
import org.junit.Before
import org.junit.Test
class StorageEscalationTest {
companion object {
private const val APK_DIRECTORY = "/data/local/tmp/cts/permissions"
const val APP_APK_PATH_28 = "$APK_DIRECTORY/CtsStorageEscalationApp28.apk"
const val APP_APK_PATH_29_SCOPED = "$APK_DIRECTORY/CtsStorageEscalationApp29Scoped.apk"
const val APP_APK_PATH_29_FULL = "$APK_DIRECTORY/CtsStorageEscalationApp29Full.apk"
const val APP_PACKAGE_NAME = "android.permission3.cts.storageescalation"
const val DELAY_TIME_MS: Long = 200
val permissions = listOf<String>(READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE,
ACCESS_MEDIA_LOCATION)
}
private val instrumentation: Instrumentation = InstrumentationRegistry.getInstrumentation()
private val context: Context = instrumentation.context
private val uiAutomation: UiAutomation = instrumentation.uiAutomation
@Before
@After
fun uninstallApp() {
SystemUtil.runShellCommand("pm uninstall $APP_PACKAGE_NAME")
}
private fun installPackage(apk: String) {
SystemUtil.runShellCommand("pm install -r $apk")
}
private fun grantStoragePermissions() {
for (permName in permissions) {
uiAutomation.grantRuntimePermission(APP_PACKAGE_NAME, permName)
}
}
private fun assertStoragePermissionState(granted: Boolean) {
for (permName in permissions) {
Assert.assertEquals(granted, context.packageManager.checkPermission(permName,
APP_PACKAGE_NAME) == PackageManager.PERMISSION_GRANTED)
}
}
@Test
fun testCannotEscalateWithSdkDowngrade() {
runStorageEscalationTest(APP_APK_PATH_29_SCOPED, APP_APK_PATH_28)
}
@Test
fun testCannotEscalateWithNewManifestLegacyRequest() {
runStorageEscalationTest(APP_APK_PATH_29_SCOPED, APP_APK_PATH_29_FULL)
}
private fun runStorageEscalationTest(startPackageApk: String, finishPackageApk: String) {
installPackage(startPackageApk)
grantStoragePermissions()
assertStoragePermissionState(granted = true)
installPackage(finishPackageApk)
// permission revoke is async, so wait a short period
Thread.sleep(DELAY_TIME_MS)
assertStoragePermissionState(granted = false)
}
}
|
