From b2b8c3c1d912f7f326ab6b3f9e6493c94f2c72e9 Mon Sep 17 00:00:00 2001
From: Dimitry Ivanov <dimitry@google.com>
Date: Mon, 29 Feb 2016 15:40:40 -0800
Subject: [PATCH] Explicitly check for updated system apps

Unbundled apps should not be allowed to share
linker-namespaces with default namespace; it implies
that they will not have unlimited access to private
native libs once updated.

Bug: http://b/27189432
Change-Id: I60295b9b31d700016add93537418fdcce5a77719
---
 core/java/android/app/LoadedApk.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/java/android/app/LoadedApk.java b/core/java/android/app/LoadedApk.java
index 06fe515c22db0..b65faa98cdca6 100644
--- a/core/java/android/app/LoadedApk.java
+++ b/core/java/android/app/LoadedApk.java
@@ -382,7 +382,7 @@ public final class LoadedApk {
             String libraryPermittedPath = mDataDir;
             boolean isBundledApp = false;
 
-            if (mApplicationInfo.isSystemApp()) {
+            if (mApplicationInfo.isSystemApp() && !mApplicationInfo.isUpdatedSystemApp()) {
                 isBundledApp = true;
                 // Add path to system libraries to libPaths;
                 // Access to system libs should be limited