Android7.0的静默安装失败问题研究

Android7.0的静默安装失败问题研究

最近遇到了在Android7.0上静默安装失败的问题。应用程序放到系统分区(/system/priv-app/)执行pm命令实现静默安装的方式在其他版本上都可以实现静默安装，在7.0上就安装失败，报这个异常：

java.lang.SecurityException: 
    Permission Denial: runInstallCreate from pm command asks to run as user -1 but is calling from user 0; 
    this requires android.permission.INTERACT_ACROSS_USERS_FULL

至于安装失败肯定是pm instll的执行逻辑做了修改，我们直接从Pm的源码开始研究。
网上关于7.0静默安装的资料确实很少，没办法了只能先去查看源码看为啥报这个异常了。手头上也没有7.0的源码，只能去下载了，20个G的源码下载了三个小时左右。7.0源码下载，清华大学Android源码镜像站，在解压的aosp目录下面执行repo sync即可得到完整目录。
看frameworks的，源码查看工具我用的是understand，全局搜索runInstallCreate from pm command asks to run as user没搜到，说明这句话是组装成的，所以拆开搜索，全局搜索asks to run as user，这次搜到了。该方法在UserController类中

int handleIncomingUser(int callingPid, int callingUid, int userId, boolean allowAll,
            int allowMode, String name, String callerPackage) {
        //测试发现这个getUserId的返回值应该为0
        final int callingUserId = UserHandle.getUserId(callingUid);
        if (callingUserId == userId) {
            return userId;
        }

        // Note that we may be accessing mCurrentUserId outside of a lock...
        // shouldn't be a big deal, if this is being called outside
        // of a locked context there is intrinsically a race with
        // the value the caller will receive and someone else changing it.
        // We assume that USER_CURRENT_OR_SELF will use the current user; later