Open all files with O_NOFOLLOW.

SD cards don't support symlinks, so we have no reason to try
following them if somehow an evil caller is able to sneak them into
the database.

Also fix deploy.sh to work after recent apexd changes.

Bug: 124329382
Test: atest --test-mapping packages/providers/MediaProvider
Change-Id: Idb1f3ee1db90913a97a50515003f211519037066

1 files changed, 1 insertions, 0 deletions

diff --git a/deploy.sh b/deploy.sh
index 22524c0ba..e6edccee8 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -8,6 +8,7 @@ adb shell stop
 adb remount
 adb sync
 adb shell umount /apex/com.android.mediaprovider*
+adb shell setprop apexd.status '""'
 adb shell setprop ctl.restart apexd
 adb shell rm -rf /system/priv-app/MediaProvider
 adb shell rm -rf /system/priv-app/MediaProviderGoogle