summaryrefslogtreecommitdiff
path: root/services/incremental/BinderIncrementalService.h
diff options
context:
space:
mode:
author William Loh <wloh@google.com> 2023-02-14 04:45:54 +0000
committer William Loh <wloh@google.com> 2023-02-14 23:55:46 +0000
commitb84e5aad59c2abe95442965603a5afcad17d6ea4 (patch)
treefab08b29f4360b445cfef3345fee9dc3f2a937ce /services/incremental/BinderIncrementalService.h
parent0085edf03b2dc12fbf783f1d90c63b931b238ccf (diff)
Set app.metadata file permission to 640
This should prevent apps from circumventing the GET_APP_METADATA permission by reading the file directly if they are aware of the file path. Bug: 267823160 Test: atest android.packageinstaller.install.cts.InstallAppMetadataTest Change-Id: I4aab10b48e62234bc252535ab2e2c8b9c77a7ac3
Diffstat (limited to 'services/incremental/BinderIncrementalService.h')
-rw-r--r--services/incremental/BinderIncrementalService.h2
1 files changed, 1 insertions, 1 deletions
diff --git a/services/incremental/BinderIncrementalService.h b/services/incremental/BinderIncrementalService.h
index 39f1bcb12459..89ed70fffbd9 100644
--- a/services/incremental/BinderIncrementalService.h
+++ b/services/incremental/BinderIncrementalService.h
@@ -63,7 +63,7 @@ public:
int32_t* _aidl_return) final;
binder::Status makeDirectories(int32_t storageId, const std::string& path,
int32_t* _aidl_return) final;
- binder::Status makeFile(int32_t storageId, const std::string& path,
+ binder::Status makeFile(int32_t storageId, const std::string& path, int32_t mode,
const IncrementalNewFileParams& params,
const ::std::optional<::std::vector<uint8_t>>& content,
int32_t* _aidl_return) final;