Running shell commands on Android using Runtime.getRuntime

Question

I am working on a device admin app (has been signed by the manufacturer). I am using it to install other apps using the below adb shell command for android 9 :-

cat /sdcard/Download/myfolder/newapp.apk | pm install -S 1528293

and I am just passing it like this:-

String command = "cat /sdcard/Download/myfolder/newapp.apk | pm install -S 1528293"
Runtime.getRuntime().exec(command);

But I get the error "cat unknown option S ".

The same command works perfectly fine when I run it from adb shell. Don't know what I am doing wrong and could use some help.

EDIT 1:- I tried running the command like below:-

String[] commandInstall = {
                "/system/bin/sh",
                "-c",
                "cat /sdcard/Download/myfolder/newapp.apk | pm install -S 1528293"
        };
Process process = Runtime.getRuntime().exec(commandInstall);

But now I get the error:-

ava.lang.SecurityException: Reverse mode only supported from shell
    at com.android.server.pm.PackageInstallerSession.doWriteInternal(PackageInstallerSession.java:679)
    at com.android.server.pm.PackageInstallerSession.write(PackageInstallerSession.java:612)
    at android.content.pm.PackageInstaller$Session.write(PackageInstaller.java:852)
    at com.android.server.pm.PackageManagerShellCommand.doWriteSplit(PackageManagerShellCommand.java:2447)
    at com.android.server.pm.PackageManagerShellCommand.runInstall(PackageManagerShellCommand.java:915)
    at com.android.server.pm.PackageManagerShellCommand.onCommand(PackageManagerShellCommand.java:158)
    at android.os.ShellCommand.exec(ShellCommand.java:103)
    at com.android.server.pm.PackageManagerService.onShellCommand(PackageManagerService.java:21330)
    at android.os.Binder.shellCommand(Binder.java:634)
    at android.os.Binder.onTransact(Binder.java:532)
    at android.content.pm.IPackageManager$Stub.onTransact(IPackageManager.java:2821)
    at com.android.server.pm.PackageManagerService.onTransact(PackageManagerService.java:3856)
    at android.os.Binder.execTransact(Binder.java:731)

Edit 2:- Prior to android 9, I could just do the below for installing apps:-

Runtime.getRuntime().exec("pm install -r app.apk");

score 5 · Accepted Answer · answered Dec 01 '19 at 17:12

Looking at the source code of PackageInstallerSession I found that it was changed to :-

switch (Binder.getCallingUid()) {
    case android.os.Process.SHELL_UID:
    case android.os.Process.ROOT_UID:
        break;
    default:
        throw new SecurityException("Reverse mode only supported from shell");
    }

Source So even if it is a system app, the shell command for install might not work. From the commit messages it seems, this was done to let PackageInstaller do this job.

However it seems this again got changed to at some point, but probably is not included in android 9:-

    switch (Binder.getCallingUid()) {
                case android.os.Process.SHELL_UID:
                case android.os.Process.ROOT_UID:
                case android.os.Process.SYSTEM_UID:
                    break;
                default:
                    throw new SecurityException(
                            "Reverse mode only supported from shell or system");
            }

Source

So if the app is a system app , then the best way would be to use PackageInstaller.

Exactly, check my slimier attempt to clear android browser data, through adb shell work fine, but when do it pragmatically even its system app or in rooted devices. these cmd are not allowed, https://stackoverflow.com/questions/10934304/clear-android-application-user-data — UdayaLakmal, Dec 02 '19 at 07:45

score 1 · Answer 2 · answered Dec 01 '19 at 06:31

from PackageInstallerSession.java:

switch (Binder.getCallingUid()) {
                    case android.os.Process.SHELL_UID:
                    case android.os.Process.ROOT_UID:
                    case android.os.Process.SYSTEM_UID:
                        break;
                    default:
                        throw new SecurityException(
                                "Reverse mode only supported from shell or system");
                }

If your app is under system/app maybe you have to put it in system/priv-app. Hope the origin of the exception helps you somehow.

I did see this and the calling uid and system uid should be the same . Moreover the error message says:- reverse mode only supported from shell. So maybe something changed in android p. — noname, Dec 01 '19 at 13:52

Running shell commands on Android using Runtime.getRuntime

2 Answers2

Linked