commit 24d90e792e04ab3929f44a4346b89bf392b1e6a9
author Alessandra Loro <aloro@google.com> Fri Nov 18 14:09:41 2022 +0000
committer Alessandra Loro <aloro@google.com> Fri Nov 18 14:13:36 2022 +0000
tree 3ecc436ae07a5994748439c1f65119328737ae86
parent dcef71f890925e3ff431f8520ee361315cfa4733

Hide ro.debuggable and ro.secure from ephemeral and isolated applications

Bug: 193912100
Test: N/A

Change-Id: I916c9795d96e4a4a453f9aed5e380f11981804e9

private/app_neverallows.te

diff --git a/private/app_neverallows.te b/private/app_neverallows.te
index c2e0b10..6231623 100644
--- a/private/app_neverallows.te
+++ b/private/app_neverallows.te
@@ -261,5 +261,7 @@
 #  due to the specific logging use cases.
 # Context: b/193912100
 neverallow {
-  untrusted_app_all
+  all_untrusted_apps
+  -mediaprovider
+  -mediaprovider_app
 } { userdebug_or_eng_prop }:file read;