Merge "Add jar files from the runtime APEX in the whitelist."

This commit is contained in:
Nicolas Geoffray
2019-01-24 14:38:17 +00:00
committed by Gerrit Code Review

View File

@@ -71,6 +71,7 @@ bool FileDescriptorWhitelist::IsAllowed(const std::string& path) const {
return true;
}
// Framework jars are allowed.
static const char* kFrameworksPrefix = "/system/framework/";
static const char* kJarSuffix = ".jar";
if (android::base::StartsWith(path, kFrameworksPrefix)
@@ -78,6 +79,13 @@ bool FileDescriptorWhitelist::IsAllowed(const std::string& path) const {
return true;
}
// Jars from the runtime apex are allowed.
static const char* kRuntimeApexPrefix = "/apex/com.android.runtime/javalib/";
if (android::base::StartsWith(path, kRuntimeApexPrefix)
&& android::base::EndsWith(path, kJarSuffix)) {
return true;
}
// Whitelist files needed for Runtime Resource Overlay, like these:
// /system/vendor/overlay/framework-res.apk
// /system/vendor/overlay-subdir/pg/framework-res.apk