From 04c736b2482ee6cf6d9aff044ce7a20837518dd6 Mon Sep 17 00:00:00 2001
From: Sumedh Sen <sumedhsen@google.com>
Date: Wed, 15 Feb 2023 11:03:52 -0800
Subject: [PATCH] [RESTRICT AUTOMERGE] Marking WearOS specific Content Provider
 as non exported

PIA has an old, unmaintained exported content provider. 3P apps could
use the activity system service to indirectly access this CP without the
required permissions.
To fix this, the content provider was marked non-exported.

Bug: 254845456
Test: Manual. Verified using the attached POC in the bug.
Merged-In: I37ee2977df36fad9a5edf6a58eb42cc4c78e1fc1
Change-Id: I37ee2977df36fad9a5edf6a58eb42cc4c78e1fc1
(cherry picked from commit 68623f9fdae016b54dc33d63a9c989ee8f19effb)
---
 packages/PackageInstaller/AndroidManifest.xml | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/packages/PackageInstaller/AndroidManifest.xml b/packages/PackageInstaller/AndroidManifest.xml
index 868867de7b42b..9816284c077da 100644
--- a/packages/PackageInstaller/AndroidManifest.xml
+++ b/packages/PackageInstaller/AndroidManifest.xml
@@ -142,10 +142,7 @@
         <provider android:name=".wear.WearPackageIconProvider"
                   android:authorities="com.google.android.packageinstaller.wear.provider"
                   android:grantUriPermissions="true"
-                  android:exported="true" />
-
-        <receiver android:name="androidx.profileinstaller.ProfileInstallReceiver"
-            tools:node="remove" />
+                  android:exported="false" />
     </application>
 
 </manifest>