tree b4af2c35db38771cf0a7ff8c352d40f7341407af
parent a0baf50e02fd094f1c611069c3e4f4b9e59c7b2e
author Torne (Richard Coles) <torne@google.com> 1585087070 -0400
committer Torne (Richard Coles) <torne@google.com> 1585087070 -0400

Don't include the data dir in zygote library paths.

When creating a LoadedApk in a zygote context (app zygote or WebView
zygote), don't add the app's data dir to the list of paths the dynamic
linker is allowed to load libraries from, because the linker's attempt
to canonicalize the path causes SELinux access denials. The process
can't access the data directory at all, so cannot load libraries from
there in any case.

Fixes: 149481620
Test: check for avc denials from webview_zygote
Change-Id: I9aceecaf6067e748cc2251782b0f41661cbb35d8