commit a60c62bcb74e0146820f75f1da49581d1709b63c
author Kweku Adams <kwekua@google.com> Thu Jun 03 16:07:56 2021 -0700
committer Kweku Adams <kwekua@google.com> Thu Jun 03 16:07:56 2021 -0700
tree 984473d0d4be0971363335437d3c5d08fd4d4b33
parent f57262c38de1a41f06d16432a9c65f2c7599e51f

Don't export HeapDumpProvider.

Stop exporting HeapDumpProvider so apps can only access generated dumps
when the user explicitly shares them.

Bug: 184046948
Test: capture system heap dump in developer options and confirm test app
get SecurityException if it tries to access the dump directly, but gets
access when the dump is shared through the notification flow

Change-Id: Ibdca7cde4f563baa39163869289da5b79fc3a6db

packages/Shell/AndroidManifest.xml

diff --git a/packages/Shell/AndroidManifest.xml b/packages/Shell/AndroidManifest.xml
index d2947c6..bcb21d1 100644
--- a/packages/Shell/AndroidManifest.xml
+++ b/packages/Shell/AndroidManifest.xml
@@ -589,7 +589,7 @@
         <provider android:name=".HeapDumpProvider"
                   android:authorities="com.android.shell.heapdump"
                   android:grantUriPermissions="true"
-                  android:exported="true" />
+                  android:exported="false" />
 
         <activity
             android:name=".BugreportWarningActivity"