Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 19889429 authored by Ricky Wai's avatar Ricky Wai
Browse files

Enable app data isolation by default 

Bug: 143937733
Test: Device boots normally
Change-Id: Id936b70011e5aae64f701e571ac0b18f1ab6961e
parent 90c69777

core/jni/com_android_internal_os_Zygote.cpp

+1 −1
Original line number Original line Diff line number Diff line
@@ -1331,7 +1331,7 @@ static void SpecializeCommon(JNIEnv* env, uid_t uid, gid_t gid, jintArray gids, 
  // Isolated process / webview / app zygote should be gated by SELinux and file permission

  // Isolated process / webview / app zygote should be gated by SELinux and file permission

  // so they can't even traverse CE / DE directories.

  // so they can't even traverse CE / DE directories.

  if (pkg_data_info_list != nullptr

  if (pkg_data_info_list != nullptr

      && GetBoolProperty(ANDROID_APP_DATA_ISOLATION_ENABLED_PROPERTY, false)) {

      && GetBoolProperty(ANDROID_APP_DATA_ISOLATION_ENABLED_PROPERTY, true)) {

    isolateAppData(env, pkg_data_info_list, uid, process_name, managed_nice_name,

    isolateAppData(env, pkg_data_info_list, uid, process_name, managed_nice_name,

        fail_fn);

        fail_fn);

  }

  }

services/core/java/com/android/server/am/ProcessList.java

+1 −2
Original line number Original line Diff line number Diff line
@@ -647,11 +647,10 @@ public final class ProcessList { 
        // Get this after boot, and won't be changed until it's rebooted, as we don't

        // Get this after boot, and won't be changed until it's rebooted, as we don't

        // want some apps enabled while some apps disabled

        // want some apps enabled while some apps disabled

        mAppDataIsolationEnabled =

        mAppDataIsolationEnabled =

                SystemProperties.getBoolean(ANDROID_APP_DATA_ISOLATION_ENABLED_PROPERTY, false);

                SystemProperties.getBoolean(ANDROID_APP_DATA_ISOLATION_ENABLED_PROPERTY, true);

        mAppDataIsolationWhitelistedApps = new ArrayList<>(

        mAppDataIsolationWhitelistedApps = new ArrayList<>(

                SystemConfig.getInstance().getAppDataIsolationWhitelistedApps());

                SystemConfig.getInstance().getAppDataIsolationWhitelistedApps());







        if (sKillHandler == null) {

        if (sKillHandler == null) {

            sKillThread = new ServiceThread(TAG + ":kill",

            sKillThread = new ServiceThread(TAG + ":kill",

                    THREAD_PRIORITY_BACKGROUND, true /* allowIo */);

                    THREAD_PRIORITY_BACKGROUND, true /* allowIo */);