Rewrite "_data" paths for sandboxed apps.

MediaProvider has the full view of storage devices, meaning it needs
to translate raw filesystem paths to and from sandboxes depending on
the status of the calling app.

Modern apps don't get any raw path access; they need to go through
APIs like ContentResolver.openFileDescriptor().

Bug: 117627072
Test: atest cts/tests/tests/provider/src/android/provider/cts/MediaStore*
Change-Id: I3efa45833d25b33a3e7baf1847676522dfe44da4
2 files changed