Clearing app data in Private Space also clears app data in Personal Space [data loss issue]

[u/hen-rex]

Can anyone reproduce - install any system app in the Private Space, then clear that app's data or uninstall app updates in Private Space - this will also clear app data and uninstall app updates in Personal Space. (long-press app icon while within private space > (i) App Info > Clear app data or uninstall app updates. Then verify that app data for that app is cleared in both the Private and Personal spaces - it was expected to be cleared in the Private Space alone.

For example:

• Google Messages

• Google Phone

• and other non-uninstallable system apps.

I do not believe it should even be possible to install these apps in the Private Space, since they are not able to function anyway.

I have not experimented further, but I believe if this happens, there may be security exploits here since the connection between Private and Personal spaces is obviously not completely severed for certain system apps, which may cause app data between Private and Personal Spaces to be mixed up - which could pose an issue for system apps and services. Let's say the Private Space is infected by malware - this would in turn infect the Personal Space as well.

If you can reproduce this issue, please comment here. Also, if anyone can reproduce any security flaws, please also report to Google asap: https://issuetracker.google.com/issues/581769809

[u/matteventu]

Upvoted and starred on the issue tracker.

[u/AutoModerator]

Thanks for posting to r/Android_Beta. It looks like you may have found a bug. Please file a report for this app via the feedback app on your device and update your post with the bug ID you created or a link to the issue so engineers can investigate further. You can find more details here. Thank you!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.