commit fef9b3757c4a31f60592f25c4e056f9e2ae9444b
author Winson <chiuwinson@google.com> Thu Jul 08 12:07:08 2021 -0700
committer Winson Chiu <chiuwinson@google.com> Tue Aug 10 22:26:15 2021 +0000
tree 03b4125729684f6b4831ef672fabba790b56358e
parent 414288574a60aa0842b2d436049af2a84a6344cd

Unexport all PackageInstaller receivers

All of PackageInstaller's declared receivers receive system broadcasts,
so they do not need to be exported. Leaving them exported opens up
vulnerabilities for apps to launch them and execute functionality that
PackageInstaller includes.

Bug: 191283525

Test: manual, verify receivers still work
Test: atest com.android.packageinstaller.test.ExportedComponentTest

Merged-In: I782fc21c848831a2a4aeab736cd47ad45781b290
Change-Id: I782fc21c848831a2a4aeab736cd47ad45781b290
(cherry picked from commit 0806568d4133e1dc736ebcc45f62655165366a9e)