实现思路
1、提供 ContentProvider 存储 app 包名
2、找到系统安装、卸载 apk 核心代码，查询 app 包名列表，实施拦截
安装卸载的核心代码都在 PackageManagerService.java 中
其中手动点击 apk 调用安装代码在 PackageInstaller 中
文件清单
frameworks\base\packages\PackageInstaller\AndroidManifest.xml
frameworks\base\packages\PackageInstaller\src\com\android\packageinstaller\wear\AppPkgListProvider.java
frameworks\base\packages\PackageInstaller\src\com\android\packageinstaller\wear\DBHelper.java
frameworks\base\packages\PackageInstaller\src\com\android\packageinstaller\PackageInstallerActivity.java
frameworks\base\services\core\java\com\android\server\pm\PackageManagerService.java
修改方案
1、在 PackageInstaller 中增加 ContentProvider
为啥要选在 PackageInstaller 中，因为这个里面包含手动点击 apk 安装对应界面，其实你要放在其它系统
app 也行
frameworks\base\packages\PackageInstaller\AndroidManifest.xml
<provider android:name=".wear.AppPkgListProvider"
android:authorities="com.android.packageinstaller.app.provider"
android:exported="true" />
frameworks\base\packages\PackageInstaller\src\com\android\packageinstaller\wear\AppPkgListProvider.java
package com.android.packageinstaller.wear;
import android.content.ContentProvider;
import android.content.ContentValues;
import android.content.UriMatcher;
import android.database.Cursor;
import android.database.sqlite.SQLiteDatabase;
import android.net.Uri;
public class AppPkgListProvider extends ContentProvider {
static UriMatcher matcher = new UriMatcher(UriMatcher.NO_MATCH);
static String authorities = "com.android.packageinstaller.app.provider";
static{
matcher.addURI(authorities, "install_app_whitelist", 0);
matcher.addURI(authorities, "uninstall_app_blacklist", 1);
}
DBHelper mDBHelper;
SQLiteDatabase db;
@Override
public boolean onCreate() {
mDBHelper = new DBHelper(getContext());
return true;
}
@Override
public Cursor query( Uri uri, String[] projection, String selection, String[] selectionArgs, String sortOrder) {
String tableName=getTableName(uri);
db = mDBHelper.getReadableDatabase();
return db.query(tableName,
projection,
selection,
selectionArgs,
null,
null,
sortOrder);
}
@Override
public String getType( Uri uri) {
return null;
}
@Override
public Uri insert( Uri uri, ContentValues values) {
String tableName=getTableName(uri);
db = mDBHelper.getWritableDatabase();
db.insertWithOnConflict(tableName, null, values,SQLiteDatabase.CONFLICT_REPLACE);
db.close();
return null;
}
@Override
public int delete( Uri uri, String selection, String[] selectionArgs) {
String tableName=getTableName(uri);
db = mDBHelper.getWritableDatabase();
int row = db.delete(tableName, selection, selectionArgs);
db.close();
return row;
}
@Override
public int update( Uri uri, ContentValues values, String selection, String[] selectionArgs) {
return 0;
}
private String getTableName(Uri uri){
String tableName="installapp_whitelist";
int match = matcher.match(uri);
switch(match){
case 0:
tableName="installapp_whitelist";
break;
case 1:
tableName="uninstallapp_blacklist";
break;
default:
break;
}
return tableName;
}
}
frameworks\base\packages\PackageInstaller\src\com\android\packageinstaller\wear\DBHelper.java
package com.android.packageinstaller.wear;
import android.content.Context;
import android.database.sqlite.SQLiteDatabase;
import android.database.sqlite.SQLiteOpenHelper;
public class DBHelper extends SQLiteOpenHelper {
public DBHelper(Context context){
super(context, "apppkglist.db", null, 1);
}
@Override
public void onCreate(SQLiteDatabase db) {
db.execSQL("CREATE TABLE IF NOT EXISTS installapp_whitelist ( pkg_name TEXT primary key not null,app_name TEXT )"
);
db.execSQL("CREATE TABLE IF NOT EXISTS uninstallapp_blacklist ( pkg_name TEXT primary key not null,app_name TEXT )"
);
}
@Override
public void onUpgrade(SQLiteDatabase db, int oldVersion, int newVersion) {
}
}
2、在 PackageInstallerActivity 中查询包名列表进行拦截
在包名清单中查询不到，则提示安装失败，不显示安装界面
frameworks\base\packages\PackageInstaller\src\com\android\packageinstaller\PackageInstallerActivity.java
/**
* Check if it is allowed to install the package and initiate install if allowed. If not allowed
* show the appropriate dialog.
*/
private void checkIfAllowedAndInitiateInstall() {//
// Check for install apps user restriction first.
final int installAppsRestrictionSource = mUserManager.getUserRestrictionSource(
UserManager.DISALLOW_INSTALL_APPS, Process.myUserHandle());
if ((installAppsRestrictionSource & UserManager.RESTRICTION_SOURCE_SYSTEM) != 0) {
showDialogInner(DLG_INSTALL_APPS_RESTRICTED_FOR_USER);
return;
} else if (installAppsRestrictionSource != UserManager.RESTRICTION_NOT_SET) {
startActivity(new Intent(Settings.ACTION_SHOW_ADMIN_SUPPORT_DETAILS));
finish();
return;
}
//add for installer white list start
boolean caninstall =true;
if(mPkgInfo.applicationInfo.packageName != null
&& !isInstallerEnable(mPkgInfo.applicationInfo.packageName)){
caninstall = false;
}
if(!caninstall){
Log.w(TAG, "caninstall "+caninstall);
setPmResult(PackageManager.INSTALL_FAILED_INVALID_APK);
Toast.makeText(this, R.string.install_failed_invalid_apk, Toast.LENGTH_LONG).show();
finish();
return;
}
//add for installer white list end
if (mAllowUnknownSources || !isInstallRequestFromUnknownSource(getIntent())) {
initiateInstall();
} else {
// Check for unknown sources restrictions.
final int unknownSourcesRestrictionSource = mUserManager.getUserRestrictionSource(
UserManager.DISALLOW_INSTALL_UNKNOWN_SOURCES, Process.myUserHandle());
final int unknownSourcesGlobalRestrictionSource = mUserManager.getUserRestrictionSource(
UserManager.DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY, Process.myUserHandle());
final int systemRestriction = UserManager.RESTRICTION_SOURCE_SYSTEM
& (unknownSourcesRestrictionSource | unknownSourcesGlobalRestrictionSource);
if (systemRestriction != 0) {
showDialogInner(DLG_UNKNOWN_SOURCES_RESTRICTED_FOR_USER);
} else if (unknownSourcesRestrictionSource != UserManager.RESTRICTION_NOT_SET) {
startAdminSupportDetailsActivity(UserManager.DISALLOW_INSTALL_UNKNOWN_SOURCES);
} else if (unknownSourcesGlobalRestrictionSource != UserManager.RESTRICTION_NOT_SET) {
startAdminSupportDetailsActivity(
UserManager.DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY);
} else {
handleUnknownSources();
}
}
}
//add for installer white list start
private boolean isInstallerEnable(String packagename){
Log.i(TAG, "isInstallerEnable packagename "+packagename);
boolean flag=true;
if(TextUtils.isEmpty(packagename)){
return flag;
}
try{
Uri mUri = Uri.parse("content://com.android.packageinstaller.app.provider/install_app_whitelist");
Cursor c = getContentResolver().query(mUri, null, null, null, null);
if(c == null){
Log.w(TAG, "isInstallerEnable "+mUri+" no exists ");
return flag;
}
if(c.getCount()!=0){
flag=false;
while(c.moveToNext()){
String pkgname=c.getString(c.getColumnIndex("pkg_name"));
Log.i(TAG, "isInstallerEnable c.moveToNext() "+pkgname);
if(packagename.equals(pkgname)){
flag=true;
break;
}
}
}else{
Log.i(TAG, "isInstallerEnable no whiltelist ");
}
c.close();
}catch(Exception e){
Log.e(TAG, "isInstallerEnable query Exception",e);
flag=true;
}
return flag;
}
//20180503 add for installer white list end
3、在 PackageManagerService 中拦截安装
adb 安装最终会走到 preparePackageLI()
frameworks\base\services\core\java\com\android\server\pm\PackageManagerService.java
// add for installer white list start
private boolean isInstallerEnable(String packagename){
Log.i(TAG, "isInstallerEnable packagename "+packagename);
boolean flag=true;
if(TextUtils.isEmpty(packagename)){
return flag;
}
try{
Uri mUri = Uri.parse("content://com.android.packageinstaller.app.provider/install_app_whitelist");
Cursor c = mContext.getContentResolver().query(mUri, null, null, null, null);
if(c == null){
Log.w(TAG, "isInstallerEnable "+mUri+" no exists ");
return flag;
}
if(c.getCount()!=0){
flag=false;
while(c.moveToNext()){
String pkgname=c.getString(c.getColumnIndex("pkg_name"));
Log.i(TAG, "isInstallerEnable c.moveToNext() "+pkgname);
if(packagename.equals(pkgname)){
flag=true;
break;
}
}
}else{
Log.i(TAG, "isInstallerEnable no whiltelist ");
}
c.close();
}catch(Exception e){
Log.e(TAG, "isInstallerEnable query Exception",e);
flag=true;
}
return flag;
}
// add for installer white list end
@GuardedBy("mInstallLock")
private PrepareResult preparePackageLI(InstallArgs args, PackageInstalledInfo res)
throws PrepareFailure {
final int installFlags = args.installFlags;
final String installerPackageName = args.installerPackageName;
final String volumeUuid = args.volumeUuid;
final File tmpPackageFile = new File(args.getCodePath());
final boolean onExternal = args.volumeUuid != null;
......
//add for installer white list start
boolean caninstall =true;
Log.i(TAG, "installPackageLI pkg.packageName "+pkg.packageName);
if(pkg.packageName != null && !isInstallerEnable(pkg.packageName)){
caninstall = false;
}
if(!caninstall){
// Toast.makeText(mContext, R.string.install_error, Toast.LENGTH_LONG).show();
//res.returnCode = PackageManager.INSTALL_FAILED_INVALID_APK;
throw new PrepareFailure(PackageManager.INSTALL_FAILED_INVALID_APK,
"Package " + pkg.packageName + " is a forbidden app. "
+ "Forbidden apps are not installs.");
}
//add for installer white list end
// If package doesn't declare API override, mark that we have an install
// time CPU ABI override.
if (TextUtils.isEmpty(pkg.cpuAbiOverride)) {
pkg.cpuAbiOverride = args.abiOverride;
}
String pkgName = res.name = pkg.packageName;
if ((pkg.applicationInfo.flags & ApplicationInfo.FLAG_TEST_ONLY) != 0) {
if ((installFlags & PackageManager.INSTALL_ALLOW_TEST) == 0) {
throw new PrepareFailure(INSTALL_FAILED_TEST_ONLY, "installPackageLI");
}
}
......
}
4、在 PackageManagerService 中拦截卸载
不论是 adb 卸载还是通过系统设置拖拽卸载最终都会走 deletePackageX()
// add for uninstaller black list start
private boolean isUnInstallerEnable(String packagename){
Log.i(TAG, "isUnInstallerEnable packagename "+packagename);
boolean flag=true;
if(TextUtils.isEmpty(packagename)){
return flag;
}
try{
Uri mUri = Uri.parse("content://com.android.packageinstaller.app.provider/uninstall_app_blacklist");
Cursor c = mContext.getContentResolver().query(mUri, null,"pkg_name = ? ", new String[]{packagename}, null);
if(c == null){
Log.w(TAG, "isUnInstallerEnable "+mUri+" no exists ");
return flag;
}
if(c.moveToFirst()){
String pkgname=c.getString(c.getColumnIndex("pkg_name"));
Log.i(TAG, "isUnInstallerEnable c.moveToFirst() "+pkgname);
flag=false;
}else{
Log.i(TAG, "isUnInstallerEnable "+ packagename +" doesn't exists in the blacklist ");
}
c.close();
}catch(Exception e){
Log.e(TAG, "isUnInstallerEnable query Exception",e);
flag=true;
}
return flag;
}
// add for uninstaller black list end
/**
* This method is an internal method that could be get invoked either
* to delete an installed package or to clean up a failed installation.
* After deleting an installed package, a broadcast is sent to notify any
* listeners that the package has been removed. For cleaning up a failed
* installation, the broadcast is not necessary since the package's
* installation wouldn't have sent the initial broadcast either
* The key steps in deleting a package are
* deleting the package information in internal structures like mPackages,
* deleting the packages base directories through installd
* updating mSettings to reflect current status
* persisting settings for later use
* sending a broadcast if necessary
*/
public int deletePackageX(String packageName, long versionCode, int userId, int deleteFlags) {
final PackageRemovedInfo info = new PackageRemovedInfo(this);
final boolean res;
final int removeUser = (deleteFlags & PackageManager.DELETE_ALL_USERS) != 0
? UserHandle.USER_ALL : userId;
if (isPackageDeviceAdmin(packageName, removeUser)) {
Slog.w(TAG, "Not removing package " + packageName + ": has active device admin");
return PackageManager.DELETE_FAILED_DEVICE_POLICY_MANAGER;
}
// add for uninstaller black list start
if(!isUnInstallerEnable(packageName)){
return PackageManager.DELETE_FAILED_INTERNAL_ERROR;
}
// add for uninstaller black list end
final PackageSetting uninstalledPs;
final PackageSetting disabledSystemPs;
final PackageParser.Package pkg;
// for the uninstall-updates case and restricted profiles, remember the per-
// user handle installed state
int[] allUsers;
......
}
最后附带一个增、删包名的工具类 AppListHelper.java
package cn.test.app.util;
import android.content.ContentResolver;
import android.content.ContentValues;
import android.content.Context;
import android.database.Cursor;
import android.net.Uri;
import android.text.TextUtils;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.List;
public class AppListHelper {
private static AppListHelper appListHelper;
private static final Uri INSTALL_APP_WHITELIST_URI=Uri.parse("content://com.android.packageinstaller.app.provider/install_app_whitelist");
private static final Uri UNINSTALL_APP_BLACKLIST_URI=Uri.parse("content://com.android.packageinstaller.app.provider/uninstall_app_blacklist");
public static AppListHelper getInstance(){
if (appListHelper == null){
appListHelper = new AppListHelper();
}
return appListHelper;
}
public void addInstallPackage(Context context, String number){
ContentResolver contentResolver = context.getContentResolver();
ContentValues newValues = new ContentValues();
newValues.put("pkg_name", number);
contentResolver.insert(INSTALL_APP_WHITELIST_URI, newValues);
}
public void removeInstallPackages(Context context, String number) {
ContentResolver contentResolver = context.getContentResolver();
contentResolver.delete(INSTALL_APP_WHITELIST_URI,
"pkg_name = ?",
new String[] {number});
}
public void addUnInstallPackage(Context context, String number){
ContentResolver contentResolver = context.getContentResolver();
ContentValues newValues = new ContentValues();
newValues.put("pkg_name", number);
contentResolver.insert(UNINSTALL_APP_BLACKLIST_URI, newValues);
}
public void removeUnInstallPackages(Context context, String number) {
ContentResolver contentResolver = context.getContentResolver();
contentResolver.delete(UNINSTALL_APP_BLACKLIST_URI,
"pkg_name = ?",
new String[] {number});
}
}
