From cd0d8dab5d53beedd09d1129f88cb5d6478aee00 Mon Sep 17 00:00:00 2001
From: Patrick Baumann <patb@google.com>
Date: Fri, 28 Feb 2020 15:16:16 -0800
Subject: Blocks explicit activity starts when not visible

This change blocks explicit launches of packages the caller does not
have access to, while continuing to allow implicit launches.

Test: atest AppEnumerationTests android.appsecurity.cts.EphemeralTest
Fixes: 148657387
Change-Id: Ie7641619ab6e8d153cf4f923cbc1e7c5f2bb8e97
---
 services/core/java/com/android/server/pm/PackageManagerService.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/core/java/com/android/server/pm/PackageManagerService.java b/services/core/java/com/android/server/pm/PackageManagerService.java
index 16069386b575..0a544195c704 100644
--- a/services/core/java/com/android/server/pm/PackageManagerService.java
+++ b/services/core/java/com/android/server/pm/PackageManagerService.java
@@ -6839,7 +6839,7 @@ public class PackageManagerService extends IPackageManager.Stub
                                 || (matchVisibleToInstantAppOnly && isCallerInstantApp
                                         && isTargetHiddenFromInstantApp));
                 final boolean blockNormalResolution = !isTargetInstantApp && !isCallerInstantApp
-                        && !resolveForStart && shouldFilterApplicationLocked(
+                        && shouldFilterApplicationLocked(
                                 getPackageSettingInternal(ai.applicationInfo.packageName,
                                         Process.SYSTEM_UID), filterCallingUid, userId);
                 if (!blockInstantResolution && !blockNormalResolution) {
-- 
cgit v1.2.3-59-g8ed1b