commit 48945224bdc298630c76befdb50a31838bdafd8e
author Ryan Mitchell <rtmitchell@google.com> Wed Feb 27 16:17:26 2019 -0800
committer Ryan Mitchell <rtmitchell@google.com> Thu Mar 07 16:37:10 2019 +0000
tree 318559665b89d5028a6c8ca60bb19b274cf41174
parent e2060f2cd3ebf70e57d41d87fac94583de2098c8

Enforce a default policy on packages without <overlayable>

In order to lift the signature/preinstalled install restrictions on overlays,
we must protect packages that have not migrated to <overlayable> from
being overlaid. If a resources is not specified as overlayable and the
overlay does not define an <overlayable>, require the overlay to be
preinstalled or signed with the same signature as the target.

Bug: 121016681
Bug: 125933494
Test: idmap2_tests
Change-Id: I38f520929031b743e4bbe0366a9be55aac5795c5