Don't export HeapDumpProvider.
Stop exporting HeapDumpProvider so apps can only access generated dumps
when the user explicitly shares them.
Bug: 184046948
Test: capture system heap dump in developer options and confirm test app
get SecurityException if it tries to access the dump directly, but gets
access when the dump is shared through the notification flow
Change-Id: Ibdca7cde4f563baa39163869289da5b79fc3a6db
(cherry picked from commit a60c62bcb7)
This commit is contained in:
@@ -346,7 +346,7 @@
|
||||
<provider android:name=".HeapDumpProvider"
|
||||
android:authorities="com.android.shell.heapdump"
|
||||
android:grantUriPermissions="true"
|
||||
android:exported="true" />
|
||||
android:exported="false" />
|
||||
|
||||
<activity
|
||||
android:name=".BugreportWarningActivity"
|
||||
|
||||
Reference in New Issue
Block a user