Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Marking WearOS specific Content Provider as non exported

Browse Source 
PIA has an old, unmaintained exported content provider. 3P apps could
use the activity system service to indirectly access this CP without the
required permissions.
To fix this, the content provider was marked non-exported.

Bug: 254845456
Test: Manual. Verified using the attached POC in the bug.
Change-Id: I37ee2977df36fad9a5edf6a58eb42cc4c78e1fc1
This commit is contained in:
Sumedh Sen
2023-02-15 11:03:52 -08:00
parent 1a74308189
commit 68623f9fda
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
packages/PackageInstaller/AndroidManifest.xml
View File

@@ -148,7 +148,7 @@
<provider android:name=".wear.WearPackageIconProvider"
android:authorities="com.google.android.packageinstaller.wear.provider"
android:grantUriPermissions="true"
android:exported="true" />
android:exported="false" />
</application>
</manifest>