Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[RESTRICT AUTOMERGE] Marking WearOS specific Content Provider as non exported

Browse Source 
PIA has an old, unmaintained exported content provider. 3P apps could
use the activity system service to indirectly access this CP without the
required permissions.
To fix this, the content provider was marked non-exported.

Bug: 254845456
Test: Manual. Verified using the attached POC in the bug.
Merged-In: I37ee2977df36fad9a5edf6a58eb42cc4c78e1fc1
Change-Id: I37ee2977df36fad9a5edf6a58eb42cc4c78e1fc1
(cherry picked from commit 68623f9fda)
This commit is contained in:
Sumedh Sen
2023-02-15 11:03:52 -08:00
committed by Song Chun Fan
parent ab105c394b
commit 04c736b248
1 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
packages/PackageInstaller/AndroidManifest.xml
View File

@@ -142,10 +142,7 @@
<provider android:name=".wear.WearPackageIconProvider"
android:authorities="com.google.android.packageinstaller.wear.provider"
android:grantUriPermissions="true"
android:exported="true" />
<receiver android:name="androidx.profileinstaller.ProfileInstallReceiver"
tools:node="remove" />
android:exported="false" />
</application>
</manifest>