diff options
| author | Zim <zezeozue@google.com> | 2020-01-21 18:16:58 +0000 |
|---|---|---|
| committer | Zimuzo Ezeozue <zezeozue@google.com> | 2020-01-22 19:29:29 +0000 |
| commit | 7da9f80d6a7d76d7cac5c6220678d8a46cd8e14d (patch) | |
| tree | a938c3b056dc2e72577a4df56ceb7476cd2c960f /tools/aapt2/java/JavaClassGenerator_test.cpp | |
| parent | c6cf3a4dc50d3b1d2354e1778cc5ec52ed7e6dd6 (diff) | |
Deprecate WRITE_MEDIA_STORAGE permission
Previously, this permission would give the holder the media_rw gid
thereby granting access to the following file paths on disk:
1. /data/media
2. /mnt/media_rw
3. /mnt/expand/<uuid>/data/media
With the introduction of a stacked FUSE filesystem on external
storage, modifying any files directly on the lower filesystem (the
paths listed above) could lead to VFS cache inconsistencies and file
corruption.
To mitigate this risk, this cl blocks unneeded access to the lower
filesystem. Apps relying on this permission should instead use
android.permission.MANAGE_EXTERNAL_STORAGE.
Test: cat /proc/<pid>/status of mediaprovider doesn't have media_rw
Bug: 144914977
Change-Id: I8335d18067231657ac9793f7b1dcf6adb617ecfc
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator_test.cpp')
0 files changed, 0 insertions, 0 deletions