diff options
| author | Alan Stokes <alanstokes@google.com> | 2020-07-21 17:38:59 +0100 |
|---|---|---|
| committer | Alan Stokes <alanstokes@google.com> | 2020-07-28 14:31:34 +0000 |
| commit | f654371d53806f86d647c4fca97240992244986b (patch) | |
| tree | 21f4527f174b63c2801c97e2334a91236d706b55 /tools/aapt2/java/JavaClassGenerator.cpp | |
| parent | 5080b25002f20f4f97cb819d7020c0074fb2f8c5 (diff) | |
Don't include inaccessible data dirs in library paths.
When constructing a classloader for a different app, don't include
it's private data dir in libraryPermittedPath if we don't have access
to it. (Which we often won't, although it depends on target SDK,
whether it has a shared UID, etc.)
This avoids generating SELinux denials at boot and other times,
e.g. when initialising WebView.
Bug: 161356067
Test: Boots, denials not seen, WebView works.
Change-Id: Ib246af979783e80fde3313f8aed6c3b7a886e6b2
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions