tree 57840eaf8d0bd3ab7bf77b8478d3bacace6052b2
parent abafbe759a354dd6c6d81d4aba3f0aec9aca3d5b
author Jiyong Park <jiyong@google.com> 1578987692 +0900
committer Treehugger Robot <treehugger-gerrit@google.com> 1579657273 +0000

Add /system/lib to the permitted paths for ns of APEXes

With b/144533348, there will be symlinks from libs in APEXes to the libs
in the system partition. This is to reduce the size of APEXes when the
APEX is bundled with the platform.

Adding the /system/lib to the permitted paths so that the realpaths of
the symlinks are allowed for the namespaces.

Note that this however does not open all libs in the system partition to
the APEX namespaces, because searching of the libs are NOT done in
/system/lib, but in /apex/<module>/lib directory.

Bug: 144533348
Bug: 147640067
Test: m
Test: atest CtsJdwpTestCases
Change-Id: I845277e989b952cf8db03fcaaba2df2bf93d5e96