在Android中从shell命令安装/取消安装

Question

我想在Android中实现一个无声的安装程序 - 来自apk文件和unistaller-package.主题已在SO和其他地方进行了大量讨论,但我不能因为某些原因而无法申请.范围显然很难实现,因为如果成功,它将成为Android中严重的安全漏洞.但是,我需要为特殊项目实施它,而不是针对消费者市场.有两种方法:

1. 通过调整PackageManager安装程序(实际上只是为了删除用户接受对话框)从源代码(例如AOSP或Cyanogen mod)生成自定义ROM.
2. 通过以超级用户身份创建进程并执行'adb shell pm install'来以编程方式执行此操作.我之前在/ system/xbin中安装了"su",我在运行时测试了RootTools.rootIsAvailable().

对于第一种情况,我深入研究了Froyo源代码,但是使用@hide标记方法进入死胡同.第二天我首先尝试了终端的命令

adb shell pm install /mnt/sdcard/HelloAndroid.apk

和

adb shell pm uninstall com.example.helloandroid

两者都工作正常.然后,我使用以下代码,在rooted仿真器(2.2 - Froyo)上测试开发:

@Override
    public void onClick(View v) {
        switch (v.getId())
           {
              case R.id.btnInstall:
                  try {  
                      install = Runtime.getRuntime().exec("su\n");   
                      DataOutputStream os = new DataOutputStream(install.getOutputStream());
                      os.writeBytes("pm install /mnt/sdcard/HelloAndroid.apk\n"); 
                      os.writeBytes("exit\n"); 
                      os.flush();
                      install.waitFor();

                              if (install.exitValue() == 0) {  
                                  Toast.makeText(MainActivity.this, "Success!", Toast.LENGTH_LONG).show();
                              }  
                              else {  
                                  Toast.makeText(MainActivity.this, "Failure. Exit code: "+String.valueOf(install.exitValue()), Toast.LENGTH_LONG).show();
                              }
                  }
                  catch (InterruptedException e) {  
                      logError(e);
                  }
                  catch (IOException e) {  
                  logError(e);
                  } 
                  break;

              case R.id.btnUninstall:
                  try {
                      install = Runtime.getRuntime().exec("su\n"); 
                      install=Runtime.getRuntime().exec("pm uninstall "+txtPackageName.getText().toString()+"\n");

                } catch (Exception e) {
                    logError(e);
                }
                  break;
           }

    }

为了避免拼写错误和其他修剪,我硬编码了安装命令的apk文件参数; 在"case R.id.btnInstall"上,命令未执行,退出处于"Failure",退出值为1,表示"无法找到该类"; 不知道这意味着什么...我感谢你的帮助!

编辑:我有干净的解决方案,一旦我有时间和代码以正确的形式,我将从AZ发布答案!

Answer 1

正如我在此承诺的那样是这个问题的解决方案,除了必须在/ system/app目录中安装整个应用程序之外,不对系统强制执行任何操作.我跟着,然后对这里的优秀文章做了一些修改:http://paulononaka.wordpress.com/2011/07/02/how-to-install-a-application-in-background-on-android/.我已经下载了文章中引用的zip文件,(我尽可能保留相同的类名):

1. 创建了一个新项目和一个主要活动作为切入点

package com.example.silentinstuninst;

import java.io.File;
import java.lang.reflect.InvocationTargetException;

import com.example.instuninsthelper.ApplicationManager;
import com.example.instuninsthelper.OnDeletedPackage;
import com.example.instuninsthelper.OnInstalledPackage;

import android.os.Bundle;
import android.os.Environment;
import android.app.Activity;
import android.util.Log;
import android.view.View;
import android.view.View.OnClickListener;
import android.widget.Button;
import android.widget.EditText;
import android.widget.Toast;

public class MainActivity extends Activity implements OnClickListener {

    Process install;
    Button btnInstall, btnUninstall;
    EditText txtApkFileName, txtPackageName; 

    public static final String TAG = "SilentInstall/Uninstall";

    private static ApplicationManager am;

    @Override
    public void onCreate(Bundle savedInstanceState) {
        super.onCreate(savedInstanceState);
        setContentView(R.layout.activity_main);

        initializeValues();

    }

    private void initializeValues() {

        btnInstall = (Button) findViewById(R.id.btnInstall);
        btnUninstall = (Button) findViewById(R.id.btnUninstall);
        txtApkFileName = (EditText) findViewById(R.id.txtApkFilePath);
        txtPackageName = (EditText) findViewById(R.id.txtPackageName);

        btnInstall.setOnClickListener(this);
        btnUninstall.setOnClickListener(this);

        try {
            am = new ApplicationManager(this);
            am.setOnInstalledPackage(new OnInstalledPackage() {

                public void packageInstalled(String packageName, int returnCode) {
                    if (returnCode == ApplicationManager.INSTALL_SUCCEEDED) {
                        Log.d(TAG, "Install succeeded");
                    } else {
                        Log.d(TAG, "Install failed: " + returnCode);
                    }
                }
            });

            am.setOnDeletedPackage(new OnDeletedPackage() {
                public void packageDeleted(boolean succeeded) {
                    Log.d(TAG, "Uninstall succeeded");  
                }
            });

        } catch (Exception e) {
            logError(e);
        }
    }

    private void logError(Exception e) {
        e.printStackTrace();
        Toast.makeText(this, R.string.error+e.getMessage(), Toast.LENGTH_LONG).show();
    }

    @Override
    public void onClick(View v) {
        switch (v.getId())
           {
              case R.id.btnInstall:
                  // InstallUninstall.Install(txtApkFileName.getText().toString());
            try {
                am.installPackage(Environment.getExternalStorageDirectory() +
                        File.separator + txtApkFileName.getText().toString());
            } catch (IllegalArgumentException e1) {
                // TODO Auto-generated catch block
                e1.printStackTrace();
            } catch (IllegalAccessException e1) {
                // TODO Auto-generated catch block
                e1.printStackTrace();
            } catch (InvocationTargetException e1) {
                // TODO Auto-generated catch block
                e1.printStackTrace();
            } // install package
                  break;

              case R.id.btnUninstall:
                  // InstallUninstall.Uninstall(txtPackageName.getText().toString());
            try {
                am.uninstallPackage(txtPackageName.getText().toString());
            } catch (IllegalArgumentException e) {
                // TODO Auto-generated catch block
                e.printStackTrace();
                logError(e);
            } catch (IllegalAccessException e) {
                // TODO Auto-generated catch block
                e.printStackTrace();
                logError(e);
            } catch (InvocationTargetException e) {
                // TODO Auto-generated catch block
                e.printStackTrace();
                logError(e);
            }
                  break;
           }    
    }
}

2. 在/ src中创建包com.example.instuninsthelper.我在那里添加了ApplicationManager.java和OnInstalledPackage.java文件
3. 在ApplicationManager类中插入以下代码:

private OnDeletedPackage onDeletedPackage;
class PackageDeleteObserver extends IPackageDeleteObserver.Stub { 

        public void packageDeleted(boolean succeeded) throws RemoteException {
            if (onDeletedPackage != null) {
                onDeletedPackage.packageDeleted(succeeded);
            }
        }

    }

4. 在同一个com.example.instuninsthelper包下创建文件OnDeletedPackage.java,代码如下:

package com.example.instuninsthelper;
public interface OnDeletedPackage {
    public void packageDeleted(boolean succeeded);
}

5. 在android.content.pm包中(命名空间应该不被更改)我修改了IPackageDeleteObserver.java,结果如下:

package android.content.pm;

public interface IPackageDeleteObserver extends android.os.IInterface {

    public abstract static class Stub extends android.os.Binder implements android.content.pm.IPackageDeleteObserver {
        public Stub() {
            throw new RuntimeException("Stub!");
        }

        public static android.content.pm.IPackageDeleteObserver asInterface(android.os.IBinder obj) {
            throw new RuntimeException("Stub!");
        }

        public android.os.IBinder asBinder() {
            throw new RuntimeException("Stub!");
        }

        public boolean onTransact(int code, android.os.Parcel data, android.os.Parcel reply, int flags)
                throws android.os.RemoteException {
            throw new RuntimeException("Stub!");
        }
    }

    public abstract void packageDeleted(boolean succeeded)
            throws android.os.RemoteException;
}

6. 在Eclipse中构建应用程序并将其部署到模拟器
7. 在模拟器中:主页按钮>设置>应用程序> ...卸载应用程序(因为它没有安装在/ system/app中,我们只需要生成apk文件)
8. 执行以下操作以使模拟器生根(以便我们可以在/ system/app中写入;我使用的其他解决方案是生成一个自定义ROM,并将此应用程序包含在/ system/app中):
   • 从这里下载su文件http://forum.xda-developers.com/showthread.php?t=682828http://forum.xda-developers.com/showthread.php?t=682828.将其重命名为su.zip
   • 然后从控制台:*adb shell mount -o rw,remount -t yaffs2/dev/block/mtdblock03/system*adb push su.zip/system/xbin/su*adb shell chmod 06755/system*adb shell chmod 06755 /系统/ XBIN /苏
9. 从控制台,转到项目的/ bin目录,然后输入:*adb push .apk/system/app
10. 最后,始终从控制台输入:*adb shell am start -n com.example.silentinstuninst/com.example.silentinstuninst.MainActivity
11. 请享用!