| commit | 0b67bb88e5dcb4e97e85493cbaedcb7259a6a841 | [log] [tgz] |
|---|---|---|
| author | Jeff Vander Stoep <jeffv@google.com> | Sat Sep 22 22:28:20 2018 -0700 |
| committer | Jeff Vander Stoep <jeffv@google.com> | Sat Sep 22 22:38:42 2018 -0700 |
| tree | 35a7d439fb071ae1da522926a205dc33113d3462 | |
| parent | 7087bf125612187bf22d552339b16e0a1b8e749c [diff] |
Further lock down app data Assert that only apps and installd may open private app files. Remove "open" permission for mediaserver/vold and remove their neverallow exemption. Test: verify no related audit messages in the logs. Test: build Fixes: 80300620 Fixes: 80418809 Bug: 80190017 Change-Id: If0c1862a273af1fedd8898f334c9b0aa6b9be728