From 68623f9fdae016b54dc33d63a9c989ee8f19effb Mon Sep 17 00:00:00 2001
From: Sumedh Sen <sumedhsen@google.com>
Date: Wed, 15 Feb 2023 11:03:52 -0800
Subject: [PATCH] Marking WearOS specific Content Provider as non exported

PIA has an old, unmaintained exported content provider. 3P apps could
use the activity system service to indirectly access this CP without the
required permissions.
To fix this, the content provider was marked non-exported.

Bug: 254845456
Test: Manual. Verified using the attached POC in the bug.
Change-Id: I37ee2977df36fad9a5edf6a58eb42cc4c78e1fc1
---
 packages/PackageInstaller/AndroidManifest.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/PackageInstaller/AndroidManifest.xml b/packages/PackageInstaller/AndroidManifest.xml
index 9e249c4c79744..45c4f88fa588d 100644
--- a/packages/PackageInstaller/AndroidManifest.xml
+++ b/packages/PackageInstaller/AndroidManifest.xml
@@ -148,7 +148,7 @@
         <provider android:name=".wear.WearPackageIconProvider"
                   android:authorities="com.google.android.packageinstaller.wear.provider"
                   android:grantUriPermissions="true"
-                  android:exported="true" />
+                  android:exported="false" />
     </application>
 
 </manifest>