Support cross-user lookups
Apps should typically not be able to lookup files from a FUSE daemon
running in another FUSE daemon user.
Unfortunately, some OEMs rely on this behavior for "app cloning"
feature. To maintain support in Android R, we allow app clone pair lookups.
If the system_server determines that two users are an app clone pair,
cross-user lookups will succeed in the respective FUSE daemons.
OEMs should ensure the following:
1. Work profiles should never be paired with any other user
2. Pairings should only involve user 0 and a special user number e.g 999
3. An associated user number MUST never be re-used for a work profile
user within the same boot context
Test: Manual
Bug: 162476851
Bug: 154057120
Change-Id: If0bdc467999c77a5b6268405bd36f333504b7d6a
4 files changed