Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 7980327d authored by Treehugger Robot's avatar Treehugger Robot Committed by Ricky Wai
Browse files

Isolate app profile ref data

Due to aosp/1708274, ref data directory is now world accessible.
We need to fix ref data directory so that it does not leak app
visibility information.

Bug: 189787375
Test: AppDataIsolationTests
Merged-In: I716852478ce0734c7038934c88c36a567c06393f
Change-Id: I351fd9763c4bdb6d3c0c9a9047de9a4f9986bd03
parent 2efdeec6
Loading
Loading
Loading
Loading
+3 −0
Original line number Original line Diff line number Diff line
@@ -881,6 +881,8 @@ on post-fs-data
    # Create mirror directory for jit profiles
    # Create mirror directory for jit profiles
    mkdir /data_mirror/cur_profiles 0700 root root
    mkdir /data_mirror/cur_profiles 0700 root root
    mount none /data/misc/profiles/cur /data_mirror/cur_profiles bind rec
    mount none /data/misc/profiles/cur /data_mirror/cur_profiles bind rec
    mkdir /data_mirror/ref_profiles 0700 root root
    mount none /data/misc/profiles/ref /data_mirror/ref_profiles bind rec


    mkdir /data/cache 0770 system cache encryption=Require
    mkdir /data/cache 0770 system cache encryption=Require
    mkdir /data/cache/recovery 0770 system cache
    mkdir /data/cache/recovery 0770 system cache
@@ -1262,6 +1264,7 @@ on userspace-reboot-fs-remount
  umount /data_mirror/data_ce/null
  umount /data_mirror/data_ce/null
  umount /data_mirror/data_de/null
  umount /data_mirror/data_de/null
  umount /data_mirror/cur_profiles
  umount /data_mirror/cur_profiles
  umount /data_mirror/ref_profiles
  umount /data_mirror
  umount /data_mirror
  remount_userdata
  remount_userdata
  start bootanim
  start bootanim