tree 21f4527f174b63c2801c97e2334a91236d706b55
parent 5080b25002f20f4f97cb819d7020c0074fb2f8c5
author Alan Stokes <alanstokes@google.com> 1595349539 +0100
committer Alan Stokes <alanstokes@google.com> 1595946694 +0000

Don't include inaccessible data dirs in library paths.

When constructing a classloader for a different app, don't include
it's private data dir in libraryPermittedPath if we don't have access
to it. (Which we often won't, although it depends on target SDK,
whether it has a shared UID, etc.)

This avoids generating SELinux denials at boot and other times,
e.g. when initialising WebView.

Bug: 161356067
Test: Boots, denials not seen, WebView works.
Change-Id: Ib246af979783e80fde3313f8aed6c3b7a886e6b2