| commit | 489108598df061dff85fdcc9bcbbf52881318499 | [log] [tgz] |
|---|---|---|
| author | Jeff Vander Stoep <jeffv@google.com> | Tue Apr 03 12:52:29 2018 -0700 |
| committer | Sachiyo Sugimoto <sachiyo@google.com> | Fri May 18 18:36:47 2018 +0000 |
| tree | cdd11609c62e1e074aedce5ce429955634c57d2c | |
| parent | c09da1664185753051cbba543286e5599855f658 [diff] |
CDD: add per-app selinux requirements for P Apps that target Android P can no longer share data with other apps using world-accessible Unix permissions. This change improves the integrity of the Android Application Sandbox, particularly the requirement that an app's private data is accessible only by that app. [1] To share files with another another app, use a content provider or shared space in external storage. This feature enforces an existing requirement that files saved in internal storage are accessible by the owning app. [2] [1] https://developer.android.com/guide/topics/data/data-storage.html#filesInternal [2] https://developer.android.com/training/data-storage/files.html#PublicFiles Bug: 73728376 Test: n/a Change-Id: Ib2a93fde25f660782f315d5e02978637680f7594