drgreen/android_frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
android_frameworks_base/data/etc/privapp-permissions-platform.xml

364 lines
20 KiB
XML
Raw Normal View History

Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<?xml version="1.0" encoding="utf-8"?>
<!--
~ Copyright (C) 2016 The Android Open Source Project
~
~ Licensed under the Apache License, Version 2.0 (the "License");
~ you may not use this file except in compliance with the License.
~ You may obtain a copy of the License at
~
~ http://www.apache.org/licenses/LICENSE-2.0
~
~ Unless required by applicable law or agreed to in writing, software
~ distributed under the License is distributed on an "AS IS" BASIS,
~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
~ See the License for the specific language governing permissions and
~ limitations under the License
-->
<!--
This XML file declares which signature|privileged permissions should be granted to privileged
applications that come with the platform
-->
<permissions>
Update package name for ExtServices to whitelist permissions. Test: shared images in Camera to verify this. Change-Id: Iebbe7405afa7de5246e02d7dbdb84fb0f319db5f
2017-10-19 11:48:20 -07:00
<privapp-permissions package="android.ext.services">
<permission name="android.permission.PROVIDE_RESOLVER_RANKER_SERVICE" />
Make sure notifications from the default sms app do not get filtered to the non-interruptive section. Bug: 123365364 Test: Unit tests and manual testing. Change-Id: Ide41ff9656ee81aa4fc6f6bcdd00ae886a0e13ee
2019-01-28 11:26:46 -05:00
<permission name="android.permission.MONITOR_DEFAULT_SMS_PACKAGE" />
API changes for NAS - make NAS @SystemApi and guard with permission - Add missing Nullable/NonNull annotations Fixes: 126699678 Fixes: 127146476 Test: make, gts Change-Id: Ie024983f7c440d5b4d3065af031b27958395f2f1
2019-03-03 16:10:52 -05:00
<permission name="android.permission.REQUEST_NOTIFICATION_ASSISTANT_SERVICE" />
Update package name for ExtServices to whitelist permissions. Test: shared images in Camera to verify this. Change-Id: Iebbe7405afa7de5246e02d7dbdb84fb0f319db5f
2017-10-19 11:48:20 -07:00
</privapp-permissions>
Updated the whitelist to match the state of platform apps Some apps in frameworks/base are only included in AOSP targets and discrepancies weren't discovered by CI tests. Test: manual Bug: 67718369 Change-Id: If88aa90f4dcab51b6e11562cadbe003948b6c149
2017-10-19 12:26:32 -07:00
<privapp-permissions package="com.android.apps.tag">
<permission name="android.permission.WRITE_SECURE_SETTINGS"/>
</privapp-permissions>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<privapp-permissions package="com.android.backupconfirm">
<permission name="android.permission.BACKUP"/>
<permission name="android.permission.CRYPT_KEEPER"/>
</privapp-permissions>
Add privapp permissions to network modules. When built as part of the system, the network stack and the captive portal login app should have the BYPASS_PRIVATE_DNS and CONNECTIVITY_USE_RESTRICTED_NETWORKS permissions. These are necessary to validate restricted networks, bypass VPNs, bypass private DNS for captive portal login, etc. Add these permissions to privapp-permissions-platform.xml. When installed as mainline modules that cannot use signature permissions, the modules get this ability by virtue of having the MAINLINE_NETWORK_STACK permissions. Additionally, add the CONNECTIVITY_USE_RESTRICTED_NETWORKS permission to the captive portal login app manifest, which did not contain it. Bug: 129789428 Test: builds, boots Test: dumpsys package shows permissions Change-Id: I632359f7eff09fed71167733ac75824a5aa57894 Merged-In: I632359f7eff09fed71167733ac75824a5aa57894 (cherry picked from commit 109dbf9c05f325d6f8298ffa81b9e90668fddaf3)
2019-04-24 19:28:20 -07:00
<privapp-permissions package="com.android.captiveportallogin">
<permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
<permission name="android.permission.NETWORK_BYPASS_PRIVATE_DNS"/>
</privapp-permissions>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<privapp-permissions package="com.android.cellbroadcastreceiver">
<permission name="android.permission.INTERACT_ACROSS_USERS"/>
<permission name="android.permission.MANAGE_USERS"/>
<permission name="android.permission.MODIFY_PHONE_STATE"/>
<permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
<permission name="android.permission.RECEIVE_EMERGENCY_BROADCAST"/>
Fixed that emergency alert dialog not popped up Fixed by granting START_ACTIVITIES_FROM_BACKGROUND to the cell broadcast receiver. Test: Manual Bug: 130384940 Change-Id: Ie563a8f11ac991ab9568f65df6a4d14eebe47c5e
2019-04-21 17:21:43 -07:00
<permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
</privapp-permissions>
Move cell broadcast service module directory Update the permissions and resource to reflect this move. Bug: 135956699 Test: manual Change-Id: I8c798f48e3a342cc2ce29d1f7f199ae1337ff2d0 Merged-In: I8c798f48e3a342cc2ce29d1f7f199ae1337ff2d0
2019-10-14 12:45:23 -07:00
<privapp-permissions package="com.android.cellbroadcastservice">
<permission name="android.permission.MODIFY_PHONE_STATE"/>
<permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
<permission name="android.permission.RECEIVE_EMERGENCY_BROADCAST"/>
</privapp-permissions>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<privapp-permissions package="com.android.externalstorage">
<permission name="android.permission.MOUNT_UNMOUNT_FILESYSTEMS"/>
<permission name="android.permission.WRITE_MEDIA_STORAGE"/>
</privapp-permissions>
<privapp-permissions package="com.android.location.fused">
<permission name="android.permission.INSTALL_LOCATION_PROVIDER"/>
</privapp-permissions>
<privapp-permissions package="com.android.managedprovisioning">
<permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
<permission name="android.permission.CHANGE_CONFIGURATION"/>
<permission name="android.permission.CONNECTIVITY_INTERNAL"/>
<permission name="android.permission.CRYPT_KEEPER"/>
<permission name="android.permission.DELETE_PACKAGES"/>
<permission name="android.permission.INSTALL_PACKAGES"/>
<permission name="android.permission.INTERACT_ACROSS_USERS"/>
<permission name="android.permission.MANAGE_DEVICE_ADMINS"/>
<permission name="android.permission.MANAGE_USERS"/>
<permission name="android.permission.MASTER_CLEAR"/>
AndroidManifest.xml: Add new network permission for managed provisioning Adding a new permission for managed provisioning to access privileged network operations. Bug: 115980767 Test: Compiles Change-Id: I6375c119a7c5e13f1648803c7da5cebd6830d46c
2018-11-14 14:53:53 -08:00
<permission name="android.permission.NETWORK_MANAGED_PROVISIONING"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.PERFORM_CDMA_PROVISIONING"/>
Allow ManagedProvisioning to access imei and serial number. Bug: 122721358 Test: manual Change-Id: I0d8f191f4f1bc1d8a87842db717af329681b012a
2019-01-28 18:32:27 +00:00
<permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.SET_TIME"/>
<permission name="android.permission.SET_TIME_ZONE"/>
<permission name="android.permission.SHUTDOWN"/>
<permission name="android.permission.WRITE_SECURE_SETTINGS"/>
Add START_ACTIVITIES_FROM_BACKGROUND to ManagedProvisioning. Fixes: 131240642 Fixes: 130371743 Test: Manual Change-Id: I72a4ab31bc662af4e3580a2c1d50f550e6314f74
2019-04-30 12:46:36 +01:00
<permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
</privapp-permissions>
<privapp-permissions package="com.android.mms.service">
<permission name="android.permission.BIND_CARRIER_MESSAGING_SERVICE"/>
<permission name="android.permission.BIND_CARRIER_SERVICES"/>
<permission name="android.permission.INTERACT_ACROSS_USERS"/>
</privapp-permissions>
<privapp-permissions package="com.android.mtp">
<permission name="android.permission.MANAGE_USB"/>
</privapp-permissions>
<privapp-permissions package="com.android.musicfx">
<permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
</privapp-permissions>
Add networkrecommendation permissions to privapp perms list. Bug: 34235587 Test: Flashed and checked logcat for crash. Change-Id: Ib35070ea87e23a3be8804eb3796e02c76a5628d0
2017-01-11 20:54:03 -08:00
<privapp-permissions package="com.android.networkrecommendation">
<permission name="android.permission.SCORE_NETWORKS"/>
<permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
<permission name="android.permission.WRITE_SECURE_SETTINGS"/>
</privapp-permissions>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<privapp-permissions package="com.android.packageinstaller">
<permission name="android.permission.DELETE_PACKAGES"/>
<permission name="android.permission.INSTALL_PACKAGES"/>
Split PackageInstaller app into installation and permissions management The two components were mostly independant for a long time. Since I1e80a3f5e63d02b3859ecf74af21ca4c61f96874 the installation flow does not grant any permissions anymore and the last connection between these parts was broken. The new app "com.android.packageinstaller" in frameworks/base/packages/PackageInstaller will only handle (side load) package installtion and uninstallation. The exisiting app will be renamed to "com.android.permissioncontroller" and only handle permission granting and permission management. This change does only minimal cleanup cleanup. In particularly it does not move any files in the old permissions controller. This is to not disturb other features currently in development. This change set also updates the make files to install the two apps on the appropriate devices. Further the permisson policy xmls need to be updated to point to the right packages. Test: Installed + uninstalled packages Granted permissions + managed permissions GtsPackageInstallTestCases GtsNoPermissionTestCases GtsNoPermissionTestCases25 GtsPackageInstallerTapjackingTestCases GtsPackageUninstallTestCases Change-Id: I2d3796b837fc0049e712c82a990907f305c8febf
2018-07-25 12:12:30 -07:00
<permission name="android.permission.USE_RESERVED_DISK"/>
<permission name="android.permission.MANAGE_USERS"/>
<permission name="android.permission.UPDATE_APP_OPS_STATS"/>
Show app installed notification from PackageInstaller Bug: 111214100 Change-Id: If3f82bfac740f4f3cf8312f396943f2ebd447c12 Test: Notifications are showing correctly after new apps installed
2018-09-05 20:55:11 +01:00
<permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
fragileUserData-apps might keep data on uninstall If an app declares that is has flagile user data, all the user to choose to keep the app-data on uninstall. Test: Unistalled apps that set the new flag and app that did not. Verified that the KEEP_DATA flag was set when checkbox was clicked. Change-Id: I032fb21854352bbc175934ae5eb68a1430b1d403 Fixes: 117578306
2018-12-12 11:28:57 -08:00
<permission name="android.permission.PACKAGE_USAGE_STATS"/>
Split PackageInstaller app into installation and permissions management The two components were mostly independant for a long time. Since I1e80a3f5e63d02b3859ecf74af21ca4c61f96874 the installation flow does not grant any permissions anymore and the last connection between these parts was broken. The new app "com.android.packageinstaller" in frameworks/base/packages/PackageInstaller will only handle (side load) package installtion and uninstallation. The exisiting app will be renamed to "com.android.permissioncontroller" and only handle permission granting and permission management. This change does only minimal cleanup cleanup. In particularly it does not move any files in the old permissions controller. This is to not disturb other features currently in development. This change set also updates the make files to install the two apps on the appropriate devices. Further the permisson policy xmls need to be updated to point to the right packages. Test: Installed + uninstalled packages Granted permissions + managed permissions GtsPackageInstallTestCases GtsNoPermissionTestCases GtsNoPermissionTestCases25 GtsPackageInstallerTapjackingTestCases GtsPackageUninstallTestCases Change-Id: I2d3796b837fc0049e712c82a990907f305c8febf
2018-07-25 12:12:30 -07:00
</privapp-permissions>
<privapp-permissions package="com.android.permissioncontroller">
<permission name="android.permission.CLEAR_APP_CACHE"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.MANAGE_USERS"/>
Updated platform privileged permissions Change-Id: I84e27ec023b20205bacb026e0a7cc32c12f67a7b Test: manual Bug: 33499917 Bug: 34128772
2017-01-05 18:45:06 -08:00
<permission name="android.permission.OBSERVE_GRANT_REVOKE_PERMISSIONS"/>
Add a new Intent for seeing permission usages This intent is used by the Permissions Hub. We also give PermissionController the GET_APP_OPS_STATS permission. Bug: 63532550 Test: Used the Permissions Hub. Change-Id: If1254f67c12fc5052d6ad5ff8260778a7c59dccc
2018-09-27 11:18:44 -07:00
<permission name="android.permission.GET_APP_OPS_STATS"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.UPDATE_APP_OPS_STATS"/>
Add IncidentCompanionService It is a helper in the system process that helps dumpstate and incidentd get user confirmation to share reports Bug: 123543706 Test: bit GooglePermissionControllerTest:* Change-Id: Ia3fe4bd5257044ed89fe56ce683876fa03ba6c36
2018-12-18 15:00:25 -08:00
<permission name="android.permission.REQUEST_INCIDENT_REPORT_APPROVAL"/>
Added a new "incidentReportApprover" permission protection flag. This gives the ONE app installed on the system the permission to authorize the sharing of incident and bug reports with an app. Currently that app is PermissionController. Package Manager enforces that there is only one installed, and refused to boot if that isn't the case. Bug: 123543706 Test: bit GooglePermissionControllerTest:* Change-Id: I76a7fad0ea36359bbb0ff09669df46202d059dab
2018-12-18 10:40:04 -08:00
<permission name="android.permission.APPROVE_INCIDENT_REPORTS"/>
Add system API for whether emergency assistance is enabled. This is needed in the emergency role. Bug: 124452117 Test: build Change-Id: I277ad208dfa07d42f3e2daee658d30ef831d4b9b
2019-03-18 16:06:19 -07:00
<permission name="android.permission.READ_PRIVILEGED_PHONE_STATE" />
Grant PermissionController SUBSTITUTE_NOTIFICATION_APP_NAME This app will pretend to be the Settings app when sending location access notifications. Bug: 128608303 Test: boot Change-Id: I447510bbe323f3de40828a5cb4a37abe1c44c990
2019-03-22 16:04:27 +00:00
<permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME" />
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
</privapp-permissions>
<privapp-permissions package="com.android.phone">
<permission name="android.permission.ACCESS_IMS_CALL_SERVICE"/>
<permission name="android.permission.BIND_CARRIER_MESSAGING_SERVICE"/>
<permission name="android.permission.BIND_CARRIER_SERVICES"/>
[DO NOT MERGE] Add CellBroadcastService and related permissions CellBroadcastService is bound to by the platform to handle cell broadcasts. Bug: 135956699 Test: manual Change-Id: I865c09d6d246779b706c06371df685d415618699
2019-09-23 13:35:02 -07:00
<permission name="android.permission.BIND_CELL_BROADCAST_SERVICE"/>
Add BIND_IMS_SERVICE to permissions whitelist Adds android.permission.BIND_IMS_SERVICE to the permissions whitelist xml file. Bug: 34813244 Test: Manual Change-Id: I7a7ad1a361c9d2dcc51769bc74a436878ad4adc5
2017-02-03 10:42:25 -08:00
<permission name="android.permission.BIND_IMS_SERVICE"/>
Renamed BIND_DATA_SERVICE to BIND_TELEPHONY_DATA_SERVICE Also grated the permission to the phone process. Test: Manual Bug: 64132030 Change-Id: I1fc82a4e8038b1b05b56dcfa43c0c94955967700
2018-02-02 10:40:11 -08:00
<permission name="android.permission.BIND_TELEPHONY_DATA_SERVICE"/>
Updated platform privileged permissions Change-Id: I84e27ec023b20205bacb026e0a7cc32c12f67a7b Test: manual Bug: 33499917 Bug: 34128772
2017-01-05 18:45:06 -08:00
<permission name="android.permission.BIND_VISUAL_VOICEMAIL_SERVICE"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.CALL_PRIVILEGED"/>
<permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
<permission name="android.permission.CHANGE_CONFIGURATION"/>
<permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST"/>
<permission name="android.permission.CONNECTIVITY_INTERNAL"/>
Declare new com.android.phone permission in whitelist. Bug: 35948554 Test: Will verify T/H build Change-Id: I41773160aa6515983a15365905a2cbb6b13e10c6
2017-03-03 17:42:35 -08:00
<permission name="android.permission.CONTROL_INCALL_EXPERIENCE"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.DUMP"/>
<permission name="android.permission.INTERACT_ACROSS_USERS"/>
<permission name="android.permission.LOCAL_MAC_ADDRESS"/>
<permission name="android.permission.MANAGE_USERS"/>
<permission name="android.permission.MODIFY_PHONE_STATE"/>
Check for location access on TelephonyRegistry When sending outbound callbacks on CELL_INFO and CELL_LOCATION, check to make sure that the user has authorized us and the receiving app to get information on their location. Bug: 69637693 Test: manual: telephony testapp Change-Id: Iacfc894428b11a7ec973567d7a797eedb281355f
2017-11-22 17:38:15 -08:00
<permission name="android.permission.PACKAGE_USAGE_STATS"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.PERFORM_CDMA_PROVISIONING"/>
Adding "Mobile data" and "Data usage" button in mobile settings. Grant "READ_NETWORK_USAGE_HISTORY" permission to phone because "Datat usage" button summary needs it. Settings provides new intent to open mobile data usage page. Bug: 62201918 Test: Manual Change-Id: Ie317109c723f3946ace4d34c743081a7ae046462
2017-06-20 11:36:01 -07:00
<permission name="android.permission.READ_NETWORK_USAGE_HISTORY"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
<permission name="android.permission.READ_SEARCH_INDEXABLES"/>
<permission name="android.permission.REBOOT"/>
<permission name="android.permission.REGISTER_CALL_PROVIDER"/>
<permission name="android.permission.REGISTER_SIM_SUBSCRIPTION"/>
<permission name="android.permission.SEND_RESPOND_VIA_MESSAGE"/>
<permission name="android.permission.SET_TIME"/>
<permission name="android.permission.SET_TIME_ZONE"/>
<permission name="android.permission.SHUTDOWN"/>
Explicitly grant START_ACTIVITIES_FROM_BACKGROUND to com.android.phone. It's needed because when we broadcast ACTION_SIM_SLOT_STATUS_CHANGED we want to allow the receiving app to start an activity from the background. The app already has it implicitly, since it has the same shared UID as com.android.stk which has the permission for unrelated reasons. Making it explicit makes it less likely it will lose the permission accidentally re-introducing a subtly bug. Bug: 132691768 Test: Builds Change-Id: I85669423e628b4534a3f28efd17947ca2481454e Merged-In: I85669423e628b4534a3f28efd17947ca2481454e
2019-06-14 16:06:36 +01:00
<permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.STATUS_BAR"/>
<permission name="android.permission.STOP_APP_SWITCHES"/>
<permission name="android.permission.UPDATE_APP_OPS_STATS"/>
<permission name="android.permission.UPDATE_DEVICE_STATS"/>
<permission name="android.permission.UPDATE_LOCK"/>
<permission name="android.permission.WRITE_APN_SETTINGS"/>
<permission name="android.permission.WRITE_SECURE_SETTINGS"/>
Public EuiccManager APIs. Public EuiccManager and other related necessary files. Mark EuiccCardManager and other related necessary files as @SystemApi. Solve lint errors and warnings. Bug: 35851809 Test: test on phone Change-Id: I68853e134e1e31fa9b91a83af6c491a2a8cca971
2017-12-12 20:17:09 -08:00
<permission name="android.permission.WRITE_EMBEDDED_SUBSCRIPTIONS"/>
Adding READ_PRECISE_CALL_STATE permission in phone app. This is needed if internal component wants to listen to precise call state change. Bug: 117980553 Test: unittest Change-Id: Id5a60519cbf1d724f939fc10b1f03cccfe5c1b5c
2019-01-22 13:46:17 -08:00
<permission name="android.permission.READ_PRECISE_PHONE_STATE"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="com.android.voicemail.permission.READ_VOICEMAIL"/>
<permission name="com.android.voicemail.permission.WRITE_VOICEMAIL"/>
</privapp-permissions>
<privapp-permissions package="com.android.providers.calendar">
<permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
Add extra permissions to CalendarProvider. Per requirement of cross profile calendar feature, CalendarProvider will need MANAGE_USER to get work profile user, and INTERACT_WITH_USER to access its work profile equivalent. Personal CalendarProvider needs to get the corp user ID, so it needs to call userManager.getUsers() which requires {@link android.Manifest.permission#MANAGE_USERS} permission. We'll maintain a whitelist of packages set by DPC that are granted access to cross profile Uris in CalendarProvider, so random personal apps won't be able to access those Uris. Bug: 118456304 Test: manual Change-Id: I59e4a7f39f9abc69f0dcc7ff03d822b8d44b4dbc
2018-10-26 18:52:37 +01:00
<permission name="android.permission.INTERACT_ACROSS_USERS" />
<permission name="android.permission.MANAGE_USERS" />
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.UPDATE_APP_OPS_STATS"/>
Start using new reserved disk GID. We recently created a new GID that can be granted to critical system processes, so that the system is usable enough for the user to free up disk space used by abusive apps. Define a permission for the GID so we can grant it to system apps, and add the GID to core apps needed for system stability. (The list was mostly derived from filling a disk and seeing what caused the device to fall over.) Test: builds, boots Bug: 62024591 Change-Id: Icdf471ed3bed4eeb8c01f1d39f0b40c1ea098396
2018-01-05 17:09:52 -07:00
<permission name="android.permission.USE_RESERVED_DISK"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
</privapp-permissions>
<privapp-permissions package="com.android.providers.contacts">
<permission name="android.permission.BIND_DIRECTORY_SEARCH"/>
<permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
<permission name="android.permission.INTERACT_ACROSS_USERS"/>
<permission name="android.permission.MANAGE_USERS"/>
<permission name="android.permission.UPDATE_APP_OPS_STATS"/>
Start using new reserved disk GID. We recently created a new GID that can be granted to critical system processes, so that the system is usable enough for the user to free up disk space used by abusive apps. Define a permission for the GID so we can grant it to system apps, and add the GID to core apps needed for system stability. (The list was mostly derived from filling a disk and seeing what caused the device to fall over.) Test: builds, boots Bug: 62024591 Change-Id: Icdf471ed3bed4eeb8c01f1d39f0b40c1ea098396
2018-01-05 17:09:52 -07:00
<permission name="android.permission.USE_RESERVED_DISK"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
</privapp-permissions>
<privapp-permissions package="com.android.providers.downloads">
<permission name="android.permission.ACCESS_CACHE_FILESYSTEM"/>
<permission name="android.permission.CLEAR_APP_CACHE"/>
<permission name="android.permission.CONNECTIVITY_INTERNAL"/>
Add START_ACTIVITIES_FROM_BACKGROUND permission for com.android.providers.downloads Required because DownloadManager needs to whitelist a broadcast for bg activity starts. Bug: 135515407 Test: builds, boots (it wouldn't without this) Change-Id: Id6c22d1397417bbc10e2829e563f29cbccccd8bf
2019-06-18 15:39:46 +01:00
<permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.UPDATE_APP_OPS_STATS"/>
<permission name="android.permission.UPDATE_DEVICE_STATS"/>
</privapp-permissions>
<privapp-permissions package="com.android.providers.media">
<permission name="android.permission.ACCESS_MTP"/>
<permission name="android.permission.INTERACT_ACROSS_USERS"/>
<permission name="android.permission.MANAGE_USERS"/>
Start using new reserved disk GID. We recently created a new GID that can be granted to critical system processes, so that the system is usable enough for the user to free up disk space used by abusive apps. Define a permission for the GID so we can grant it to system apps, and add the GID to core apps needed for system stability. (The list was mostly derived from filling a disk and seeing what caused the device to fall over.) Test: builds, boots Bug: 62024591 Change-Id: Icdf471ed3bed4eeb8c01f1d39f0b40c1ea098396
2018-01-05 17:09:52 -07:00
<permission name="android.permission.USE_RESERVED_DISK"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.WRITE_MEDIA_STORAGE"/>
Aggresive performance optimizations. Now that we have LocalCallingIdentity, we can start caching it in very narrow cases. We must be careful to not cache too long, since any changes to granted permissions for the UID mean we need to re-evaluate any cached answers. The best middle-ground for this in the Q release is to use an active camera session as a proxy for when we should create a cache object and then later invalidate it. (It's very unlikely that a user changes permissions while actively using the camera, and this is a strong signal that the caller is sensitive to performance.) Many other sprinkled optimizations to avoid extra binder calls into the OS, such as aggressively caching VolumeInfo related details. Track IDs that are owned by each LocalCallingIdentity, to speed up all future security checks. Dispatch all change notifications asynchronously, and delay them by several seconds while the camera is being actively used, to give more important foreground work a fighting chance. Invalidate thumbnails asynchronously. Optimizations to ModernMediaScanner where it's safe to skip the "reconcile" and "clean" steps when we're focused on a single file that we successfully scanned. Local tests show this CL improves performance of a test app that takes 100 rapid shots by 45%. (All the collective optimizations done so far this week add up to a 70% improvement.) Bug: 130758409 Test: atest --test-mapping packages/providers/MediaProvider Exempt-From-Owner-Approval: trivial manifest change Change-Id: I38cc826af47d41219ef44eae6fbd293caa0c01d5
2019-05-17 18:48:11 -06:00
<permission name="android.permission.WATCH_APPOPS"/>
Shift call statistics back to the original caller. Most of the time MediaProvider is making Binder calls on behalf of an external caller, so use PropagateWorkSourceTransactListener to ensure that we record the original source. Bug: 125725916 Test: atest --test-mapping packages/apps/MediaProvider Change-Id: I591dfb2903a54239639452954ea2d780e79b280c
2019-05-30 12:18:32 -06:00
<permission name="android.permission.UPDATE_DEVICE_STATS"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
</privapp-permissions>
<privapp-permissions package="com.android.providers.telephony">
<permission name="android.permission.INTERACT_ACROSS_USERS"/>
<permission name="android.permission.MODIFY_PHONE_STATE"/>
Start using new reserved disk GID. We recently created a new GID that can be granted to critical system processes, so that the system is usable enough for the user to free up disk space used by abusive apps. Define a permission for the GID so we can grant it to system apps, and add the GID to core apps needed for system stability. (The list was mostly derived from filling a disk and seeing what caused the device to fall over.) Test: builds, boots Bug: 62024591 Change-Id: Icdf471ed3bed4eeb8c01f1d39f0b40c1ea098396
2018-01-05 17:09:52 -07:00
<permission name="android.permission.USE_RESERVED_DISK"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
</privapp-permissions>
Rename NetworkStack package Set the new name to com.android.networkstack. Also rename the stub APK to com.android.networkstack.permissionstub. Also add shared UID to the NetworkStackPermissionStub to enforce signature restrictions on the UID. Test: booted, WiFi working Bug: 124033493 Change-Id: Id8967db08b7faaa659b20f86f1013493eb0e188f
2019-02-08 15:26:06 +09:00
<privapp-permissions package="com.android.networkstack">
Add priv-app permissions for NetworkStack Bug: b/112869080 Test: m, flashed, booted Change-Id: Ia2cf0f708d815a5e5f49924fb15bb9c728f4ad56
2018-12-27 11:49:21 +09:00
<permission name="android.permission.ACCESS_NETWORK_CONDITIONS"/>
<permission name="android.permission.CONNECTIVITY_INTERNAL"/>
<permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
<permission name="android.permission.CONTROL_VPN"/>
Remove INTERACT_ACROSS_USERS_FULL for NetworkStack Replace with INTERACT_ACROSS_USERS, which is needed to send the ACTION_NETWORK_CONDITIONS_MEASURED broadcast. Also cleanup some non-privileged permissions that were added to the priv-app file. Test: built, booted, broadcast and captive portal login work Bug: 123846255 Change-Id: I3c97c166e80c19bf57fa047709c8b91fca75d635
2019-02-04 14:26:32 +09:00
<permission name="android.permission.INTERACT_ACROSS_USERS"/>
Add priv-app permissions for NetworkStack Bug: b/112869080 Test: m, flashed, booted Change-Id: Ia2cf0f708d815a5e5f49924fb15bb9c728f4ad56
2018-12-27 11:49:21 +09:00
<permission name="android.permission.LOCAL_MAC_ADDRESS"/>
<permission name="android.permission.MANAGE_SUBSCRIPTION_PLANS"/>
<permission name="android.permission.MANAGE_USB"/>
Add privapp permissions to network modules. When built as part of the system, the network stack and the captive portal login app should have the BYPASS_PRIVATE_DNS and CONNECTIVITY_USE_RESTRICTED_NETWORKS permissions. These are necessary to validate restricted networks, bypass VPNs, bypass private DNS for captive portal login, etc. Add these permissions to privapp-permissions-platform.xml. When installed as mainline modules that cannot use signature permissions, the modules get this ability by virtue of having the MAINLINE_NETWORK_STACK permissions. Additionally, add the CONNECTIVITY_USE_RESTRICTED_NETWORKS permission to the captive portal login app manifest, which did not contain it. Bug: 129789428 Test: builds, boots Test: dumpsys package shows permissions Change-Id: I632359f7eff09fed71167733ac75824a5aa57894 Merged-In: I632359f7eff09fed71167733ac75824a5aa57894 (cherry picked from commit 109dbf9c05f325d6f8298ffa81b9e90668fddaf3)
2019-04-24 19:28:20 -07:00
<permission name="android.permission.NETWORK_BYPASS_PRIVATE_DNS"/>
Add priv-app permissions for NetworkStack Bug: b/112869080 Test: m, flashed, booted Change-Id: Ia2cf0f708d815a5e5f49924fb15bb9c728f4ad56
2018-12-27 11:49:21 +09:00
<permission name="android.permission.PACKET_KEEPALIVE_OFFLOAD"/>
<permission name="android.permission.READ_NETWORK_USAGE_HISTORY"/>
<permission name="android.permission.READ_PRECISE_PHONE_STATE"/>
<permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
<permission name="android.permission.READ_WIFI_CREDENTIAL"/>
<permission name="android.permission.RECEIVE_DATA_ACTIVITY_CHANGE"/>
<permission name="android.permission.TETHER_PRIVILEGED"/>
<permission name="android.permission.WRITE_SECURE_SETTINGS"/>
</privapp-permissions>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<privapp-permissions package="com.android.server.telecom">
<permission name="android.permission.BIND_CONNECTION_SERVICE"/>
<permission name="android.permission.BIND_INCALL_SERVICE"/>
<permission name="android.permission.CALL_PRIVILEGED"/>
Add prioritized enableCarMode API in UiModeManager Per design doc (go/android-car-mode-design), added new system API to enable car mode and specify a priority for the calling app. Also modified UiModeManager to pass the package name of the caller to UiModeManagerService. Bug: 136109592 Test: Added new unit tests and CTS tests. Test: Added Telecom test app functionality to verify. Change-Id: I2848039c9ea18ba93e7694e04c4e5dc70759daa3 Merged-In: I2848039c9ea18ba93e7694e04c4e5dc70759daa3
2019-09-30 15:12:24 -07:00
<permission name="android.permission.HANDLE_CAR_MODE_CHANGES"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.INTERACT_ACROSS_USERS"/>
<permission name="android.permission.MANAGE_USERS"/>
Change command like set-default-dialer to be a test override. RoleManager likes to terminate apps when roles are changed which does not work in CTS tests. We need to use a temp override in Telecom for now. Test: Run the CTS tests over, and over and over again. Bug: 131065482 Change-Id: Id36942f2813abdfa0020ce4805c492a69bd07d0e (cherry picked from commit 509ef150f23531b18fe29ef85337312f54535300)
2019-04-25 14:28:47 -07:00
<permission name="android.permission.MANAGE_ROLE_HOLDERS"/>
Add call recording tone support. Adding carrier configuration option to specify whether the carrier requires the incall recording tone be played. Added phone account extra used in Telephony to communicate this to Telecom. Added permission pregrant for Telecom for MODIFY_AUDIO_ROUTING; this is needed as Telecom listening to the AudioRecordingConfiguration callback from the audio framework. It needs the permission so that it can be informed of the package names of recording apps. Test: Manually enabled for local carrier and confirmed that recording tone plays to remote party when a recording app is started on the device. Bug: 64138141 Change-Id: I1ab521b79cbeeb4ff4dcbf83de7c17c539637bdc
2018-01-29 14:30:52 -08:00
<permission name="android.permission.MODIFY_AUDIO_ROUTING" />
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.MODIFY_PHONE_STATE"/>
<permission name="android.permission.STOP_APP_SWITCHES"/>
Add SUBSTITUTE_NOTIFICATION_APP_NAME pregrant for Telecom. Test: Manual Bug: 36817809 Change-Id: I2d7439e3d0040b617a842812b6ae8bda3c32f1ee
2017-03-31 17:50:56 -07:00
<permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
</privapp-permissions>
<privapp-permissions package="com.android.sharedstoragebackup">
<permission name="android.permission.WRITE_MEDIA_STORAGE"/>
</privapp-permissions>
<privapp-permissions package="com.android.shell">
Crash if not all privileged permissions are whitelisted Test: reboot device - no crashes Test: Ran privapp_permissions.py for fugu/marlin/taimen Bug: 64693550 Change-Id: I9522ccaa75858b9a3d153c95c529eff70cd13994
2017-10-06 17:02:21 -07:00
<permission name="android.permission.ACCESS_LOWPAN_STATE"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.BACKUP"/>
<permission name="android.permission.BATTERY_STATS"/>
<permission name="android.permission.BIND_APPWIDGET"/>
Make CHANGE_APP_IDLE_STATE a system API Allows a privileged app to set standby bucket states for apps. Bug: 63527785 Test: adb shell am set-standby-bucket com.example.foo 0 Change-Id: I613f8872ae816e39b167aad1c289187362aa6094
2017-10-31 13:29:00 -07:00
<permission name="android.permission.CHANGE_APP_IDLE_STATE"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
<permission name="android.permission.CHANGE_CONFIGURATION"/>
Give shell the CHANGE_DEVICE_IDLE_TEMP_WHITELIST permission Shell needs to have this permission in order for the deviceidle tempwhitelist shell command to exist. Bug 34715096 Test: cts-tradefed run cts -m CtsAppTestCases \ -t android.app.cts.ActivityManagerTest#testBackgroundCheckService Change-Id: Ic1fdd87b6020649705ba0c9349dd00dd096037f3
2017-03-21 17:43:47 -07:00
<permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST" />
Crash if not all privileged permissions are whitelisted Test: reboot device - no crashes Test: Ran privapp_permissions.py for fugu/marlin/taimen Bug: 64693550 Change-Id: I9522ccaa75858b9a3d153c95c529eff70cd13994
2017-10-06 17:02:21 -07:00
<permission name="android.permission.CHANGE_LOWPAN_STATE"/>
Whitelist new CHANGE_OVERLAY_PACKAGES permission The Shell application needs access to change which overlays are enabled in OverlayManagerService. Test: Manual: invoke adb exec-out cmd overlay enable some.package.name when shell is not root (adb unroot on eng builds). Change-Id: I1849f68e244cfc9b1e13eb0e673dde7be03cba6d
2017-02-23 18:17:11 -08:00
<permission name="android.permission.CHANGE_OVERLAY_PACKAGES"/>
Grant Shell ability to clear cached app data. It already has CLEAR_APP_USER_DATA to clear everything inside app storage, and clearing cached data is a subset of that. Test: cts-tradefed run commandAndExit cts-dev -m CtsAppSecurityHostTestCases -t android.appsecurity.cts.StorageHostTest Bug: 36731175 Change-Id: Iefc5be6c80e2562a95424fd6fe413bdb018201a9
2017-04-09 21:37:56 -06:00
<permission name="android.permission.CLEAR_APP_CACHE"/>
Grant Shell ability to clear instant app It already has grant to clear data of application, and instant application is a subset of that. This permission is needed for correct performing of the test: `android.appsecurity.cts.InstantCookieHostTest# testCookieUpdateAndRetrieval`. Bug: 77849650 Test: run several times in a row (at least two), note that first time on the fresh DUT the result is always successful: cts-tradefed run commandAndExit cts-dev \ -m CtsAppSecurityHostTestCases \ -t android.appsecurity.cts.InstantCookieHostTest#testCookieUpdateAndRetrieval Change-Id: I2d6080259e22ebfa40481213238f569e0988d271 Signed-off-by: Sergii Piatakov <sergii.piatakov@globallogic.com>
2018-04-02 16:48:56 +03:00
<permission name="android.permission.ACCESS_INSTANT_APPS" />
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.CONNECTIVITY_INTERNAL"/>
<permission name="android.permission.DELETE_CACHE_FILES"/>
<permission name="android.permission.DELETE_PACKAGES"/>
<permission name="android.permission.DUMP"/>
DO NOT MERGE Add permission to launch activities on VD 1. Added permission ACTIVITY_EMBEDDING which allows apps to launch activities on virtual displays. 2. Allow owner of display to launch activities from same app without permission check to owned display. 3. Added permission checks for launching on secondary displays to more target task/stack resolution paths in ActivityStarter. Bug: 63117330 Test: android.server.cts.ActivityManagerDisplayTests Test: go/wm-smoke Change-Id: If169a77fb56241e06f7de20168dc38c4b0a217f5 (cherry picked from commit 71587649836d8e97c2ca00d968fc95293b59b0d3)
2017-07-06 14:28:59 -07:00
<permission name="android.permission.ACTIVITY_EMBEDDING"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.FORCE_STOP_PACKAGES"/>
<permission name="android.permission.GET_APP_OPS_STATS"/>
Grant com.android.shell access to DynamicSystem Add permission INSTALL_DYNAMIC_SYSTEM to Shell's AndroidManifest.xml and privapp-permissions-platform.xml. Bug: 124637092 Test: adb shell am start-activity Change-Id: Id7727a195f61c2fbffa0b2f52f3098784feeee52
2019-02-21 09:58:02 +08:00
<permission name="android.permission.INSTALL_DYNAMIC_SYSTEM"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.INSTALL_LOCATION_PROVIDER"/>
<permission name="android.permission.INSTALL_PACKAGES"/>
Add INTERACT_ACROSS_PROFILES permission to shell for CTS test. Bug: 127804311 Test: atest CrossProfileAppsHostSideTest#testStartActivity Change-Id: I1deb66409fae1ec654555adb8d4a61d670689d2a
2019-05-17 17:28:50 -07:00
<!-- Needed for test only -->
<permission name="android.permission.INTERACT_ACROSS_PROFILES"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.INTERACT_ACROSS_USERS"/>
Restrict access from apps to bluetooth_address setting BluetoothManagerService for some reason leaks the Android's Bluetooth MAC address via Settings.Secure which is normally readable by all apps. This lets apps bypass the restriction on access to Bluetooth MAC address from apps. This commit fixes the issue by restricting access to bluetooth_address secure setting (Settings.Secure). Only packages which hold the android.permission.LOCAL_MAC_ADDRESS permission retain access. This commit accordingly grants LOCAL_MAC_ADDRESS permission to the system Shell app because a number of scripts (including Android CTS) use "adb shell settings get secure bluetooth_address" as a convenient way to query the device's Bluetooth MAC address over ADB. This is acceptable because the user of the device can see the Bluetooth MAC address and thus it's fine for shell to be able to see the address as well. Test: See CTS test added in the cts project in this topic. Test: "adb shell settings get secure bluetooth_address" returns the Bluetooth MAC address of the Android. Test: "adb shell settings list secure | grep bluetooth_address" returns the Bluetooth MAC address of the Android. Test: Bluetooth works (toggling off/on, pairing, file transfer) Bug: 33701414 Change-Id: I17b110b96eb3794b25c1661e93d29a7a003e3c9a
2017-03-03 14:08:36 -08:00
<permission name="android.permission.LOCAL_MAC_ADDRESS"/>
Make performAccessibilityShortcut a SystemAPI Also create a new MANAGE_ACCESSIBILITY permission to perform the shortcut. Bug: 116118615 Test: make, activate accessibility shortcut Change-Id: Ic65a0cdf7393429e14cb98f4fb0734d20069b05a
2018-10-09 15:01:49 -07:00
<permission name="android.permission.MANAGE_ACCESSIBILITY"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.MANAGE_DEVICE_ADMINS"/>
Allow the shell to set USB functions. Bug: 25596495 Test: svc usb setFunction mtp true Change-Id: I4472464a1c7ed100cb257dbad83d1d8cfef88fc7
2017-02-17 11:46:58 -08:00
<permission name="android.permission.MANAGE_USB"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.MODIFY_APPWIDGET_BIND_PERMISSIONS"/>
<permission name="android.permission.MODIFY_PHONE_STATE"/>
<permission name="android.permission.MOUNT_FORMAT_FILESYSTEMS"/>
<permission name="android.permission.MOUNT_UNMOUNT_FILESYSTEMS"/>
<permission name="android.permission.MOVE_PACKAGE"/>
Add OBSERVE_APP_USAGE permission to shell for CTS test. Bug: 123314449 Test: atest android.content.pm.cts.LauncherAppsTest Change-Id: I5e58aefa9920dd4a974d24388f8ecd8dea7936b3
2019-01-24 07:19:14 -08:00
<permission name="android.permission.OBSERVE_APP_USAGE"/>
Add shell permissions for CTS testing Add NETWORK_SCAN to shell permissions to enable CTS testing of the network scan changes Bug: 126779616 Test: CTS Change-Id: I1f75c9005620b3b0e06f066677cba6190f1d266c
2019-02-28 15:29:19 -08:00
<permission name="android.permission.NETWORK_SCAN"/>
Add PACKAGE_USAGE_STATS permission to shell. This is needed for calling AM.registerUidObserver. Fixes: 64400666 Test: cts-tradefed run singleCommand cts-dev -m CtsAppTestCases -t \ android.app.cts.ActivityManagerProcessStateTest Change-Id: I4f500d0d8d516b6b8961ea2f8c083add3ae949a9
2017-09-01 16:41:10 -07:00
<permission name="android.permission.PACKAGE_USAGE_STATS" />
[KA09] add keepalive offload permission to shell This change adds PACKET_KEEPALIVE_OFFLOAD to shell, which allows shell or code with shell permission identity to use privileged tcp keepalive offload API. Bug: 114151147 Test: -atest ConnectivityManagerTest#testCreateTcpKeepalive -build, flash, boot Change-Id: Ib6660a5eaa72f83042596481452be4d415383f02
2019-01-23 17:24:10 +08:00
<!-- Needed for test only -->
<permission name="android.permission.PACKET_KEEPALIVE_OFFLOAD" />
Create APIs to interact with DynamicPowerSaver This creates the PowerManager APIs that allow apps with the appropriate permissions to interact with Dynamic Power Saver. Bug: 111450127 Test: WIP Change-Id: I5b9483fa0fba81a4ade622b1f3dbaec580b68a67
2018-10-19 13:03:20 -07:00
<permission name="android.permission.POWER_SAVER" />
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.READ_FRAME_BUFFER"/>
Crash if not all privileged permissions are whitelisted Test: reboot device - no crashes Test: Ran privapp_permissions.py for fugu/marlin/taimen Bug: 64693550 Change-Id: I9522ccaa75858b9a3d153c95c529eff70cd13994
2017-10-06 17:02:21 -07:00
<permission name="android.permission.READ_LOWPAN_CREDENTIAL"/>
new SystemAPI for preciseCallState and DisconnectCause 1. decouple disconnectCause and preciseDisconnectCuase from preciseCallState. 2. expose preciseCallState to SystemAPI and expose onPreciseCallStateChanged to System API 3. remove/hide ImsReasonInfo from PreciseDisconnectCuase 4. expose DiconnectCuase and PreciseDisconnectCause to System API 5. new onDisconnectCauseChanged API on PhoneStateListener for CS call and use ImsCallSessionListener for IMS call(imsreasonInfo) 6. add read_precise_phone_state to shell apk to enable GTS test Bug: 119890559 Test: atest GtsGmscoreHostTestCases:TelephonyHostTest#testPhoneStateListener Change-Id: If9256feff16b6bcaef1dfe194c2b0df2a48436b0
2018-12-12 19:59:30 -08:00
<!-- Needed for test only -->
<permission name="android.permission.READ_PRECISE_PHONE_STATE" />
Protect Device Identifiers behind priv permission and DO/PO checks Bug: 110099294 Test: cts-tradefed run cts -m CtsDevicePolicyManagerTestCases \ -t com.android.cts.devicepolicy.DeviceOwnerTest.testDeviceOwnerCanGetDeviceIdentifiers Test: cts-tradefed run cts -m CtsDevicePolicyManagerTestCases \ -t com.android.cts.devicepolicy.ManagedProfileTest#testGetDeviceIdentifiers Test: cts-tradefed run cts -m CtsTelephonyTestCases -t android.telephony.cts.TelephonyManagerTest Test: cts-tradefed run cts -m CtsPermissionTestCases -t android.permission.cts.TelephonyManagerPermissionTest Change-Id: I3c82c53ec89cd17b34a61166ccc9e9747388efac
2018-10-01 16:14:50 -07:00
<permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.REAL_GET_TASKS"/>
Add READ_PRIVILEGED_PHONE_STATE to used permissions Bug: 110099294 Test: cts-tradefed run cts -m CtsTelephonyTestCases -t android.telephony.cts.TelephonyManagerTest Change-Id: I13fec3d397c200ce92883883c96c07007e823efe
2018-10-08 09:39:24 -07:00
<permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.REGISTER_CALL_PROVIDER"/>
<permission name="android.permission.REGISTER_CONNECTION_MANAGER"/>
<permission name="android.permission.REGISTER_SIM_SUBSCRIPTION"/>
<permission name="android.permission.RETRIEVE_WINDOW_CONTENT"/>
<permission name="android.permission.SET_ALWAYS_FINISH"/>
<permission name="android.permission.SET_ANIMATION_SCALE"/>
<permission name="android.permission.SET_DEBUG_APP"/>
<permission name="android.permission.SET_PROCESS_LIMIT"/>
Add set-time and set-timezone shell cmds to alarm service These commands allow a user to set the time and the timezone from the shell. The shell now has signature|privileged SET_TIME and SET_TIME_ZONE permissions. Bug: 67751701 Test: manual - correctly sets the time and timezone from unrooted adb. Change-Id: I1d2820fd7dadd8b1f3900c0592eb28210370ce88
2018-02-01 10:13:10 -08:00
<permission name="android.permission.SET_TIME"/>
<permission name="android.permission.SET_TIME_ZONE"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.SIGNAL_PERSISTENT_PROCESSES"/>
Grant STATUS_BAR permission to com.android.shell Allows for testing APIs protected by this permission from CTS tests Test: adb shell dumpsys package com.android.shell | grep "\bSTATUS_BAR: granted=true" # should find the permission Bug: 130178313 Change-Id: Ida0950664b98217d9c0801c0f19436c754ee6744
2019-04-17 16:47:54 -04:00
<permission name="android.permission.STATUS_BAR"/>
Add a new START_ACTIVITIES_FROM_BACKGROUND signature|privileged|vendorPrivileged|oem permission And grant it to SystemUI and Shell (adb shell am start). Bug: 110956953 Test: atest WmTests:ActivityStarterTests Change-Id: I4885a9a62ee8d47a3aef85f0e34b746c3f51ca2b
2018-12-14 15:17:29 +00:00
<permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND" />
Allow the shell to start task overlay activities. - Fix issue with testFinishPipActivityWithTaskOverlay failing due to new permission check in the system Bug: 71716434 Test: atest CtsActivityManagerDeviceTestCases:ActivityManagerPinnedStackTests#testFinishPipActivityWithTaskOverlay Change-Id: Ifbcd6c182d928f5aa5372d2db9fa71a142dc8474
2018-03-17 12:51:14 -07:00
<permission name="android.permission.START_TASKS_FROM_RECENTS" />
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.STOP_APP_SWITCHES"/>
<permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
Add SUSPEND_APPS permission to shell Since this permission protects system apis, this is required for instrumentation tests. Test: atest com.google.android.suspendapps.gts.SuspendPackagesTest Bug: 79773970 Change-Id: Ib283018c50cc19c3958bd61e2d19befbf2805cc5
2018-07-16 13:23:21 -07:00
<permission name="android.permission.SUSPEND_APPS" />
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.UPDATE_APP_OPS_STATS"/>
Start using new reserved disk GID. We recently created a new GID that can be granted to critical system processes, so that the system is usable enough for the user to free up disk space used by abusive apps. Define a permission for the GID so we can grant it to system apps, and add the GID to core apps needed for system stability. (The list was mostly derived from filling a disk and seeing what caused the device to fall over.) Test: builds, boots Bug: 62024591 Change-Id: Icdf471ed3bed4eeb8c01f1d39f0b40c1ea098396
2018-01-05 17:09:52 -07:00
<permission name="android.permission.USE_RESERVED_DISK"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<permission name="android.permission.WRITE_MEDIA_STORAGE"/>
<permission name="android.permission.WRITE_SECURE_SETTINGS"/>
Tests for matchesCallFilter Test: cts Bug: 123406095 Change-Id: Ibece70d3e5d77d447ece4f3d3118b315a8d6e5cb
2019-01-29 16:19:36 -05:00
<permission name="android.permission.STATUS_BAR_SERVICE"/>
Add IncidentCompanionService It is a helper in the system process that helps dumpstate and incidentd get user confirmation to share reports Bug: 123543706 Test: bit GooglePermissionControllerTest:* Change-Id: Ia3fe4bd5257044ed89fe56ce683876fa03ba6c36
2018-12-18 15:00:25 -08:00
<permission name="android.permission.REQUEST_INCIDENT_REPORT_APPROVAL"/>
Add CONTROL_KEYGUARD_SECURE_NOTIFICATIONS to shell app Shell app needs the permission when we run KeyguardManager CTS for allowing private notifications as a privileged app. Bug: 127351183 Test: m -j Change-Id: I199bac8c8fed9ff0fc63b8c62f8002a6b273b28f
2019-03-19 21:45:49 +00:00
<permission name="android.permission.CONTROL_KEYGUARD_SECURE_NOTIFICATIONS"/>
Add Shell permission for CTS test. Add Shell permission for new CTS tests to test the multi-display functionality in WallpaperService/WallpaperManagerService. Bug: 123707989 Test: atest WallpaperManagerMultiDisplayTests Test: atest ActivityManagerMultiDisplayTests Change-Id: Id97db050a0b9d1940c2dfaa793fbe526df578105
2019-02-20 23:08:45 +08:00
<permission name="android.permission.SET_WALLPAPER" />
<permission name="android.permission.SET_WALLPAPER_COMPONENT" />
Adjust testapis/permissions for CTS tests Test: cts Bug: 127341023 Change-Id: Ice19dc337a06a3f20edca583ecbe5ef3148fd96d
2019-04-08 10:35:40 -04:00
<permission name="android.permission.REQUEST_NOTIFICATION_ASSISTANT_SERVICE" />
Add ExplicitHealthCheckServiceImplTest Test: atest android.ext.services.watchdog.ExplicitHealthCheckServiceImplTest Bug: 132640467 Change-Id: I2d1820a38adce238a157e925512898c184dadec0
2019-05-14 18:51:32 +01:00
<!-- Permission required to test ExplicitHealthCheckServiceImpl. -->
<permission name="android.permission.BIND_EXPLICIT_HEALTH_CHECK_SERVICE"/>
Car mode InCallService changes. 1. Grant ENTER_CAR_MODE and CONTROL_INCALL_EXPERIENCE permissions to the shell identity for use within CTS tests. 2. Remove un-needed Telecom shell command. Test: unit tests, telecom CTS tests, manual testing Bug: 144345414 Change-Id: I54a2e723d6ef9552117e6cadf4ab7c449dd5e3cb
2019-11-20 07:54:36 -08:00
<!-- Permission required for UiModeManager CTS test. -->
Add prioritized enableCarMode API in UiModeManager Per design doc (go/android-car-mode-design), added new system API to enable car mode and specify a priority for the calling app. Also modified UiModeManager to pass the package name of the caller to UiModeManagerService. Bug: 136109592 Test: Added new unit tests and CTS tests. Test: Added Telecom test app functionality to verify. Change-Id: I2848039c9ea18ba93e7694e04c4e5dc70759daa3 Merged-In: I2848039c9ea18ba93e7694e04c4e5dc70759daa3
2019-09-30 15:12:24 -07:00
<permission name="android.permission.ENTER_CAR_MODE_PRIORITIZED"/>
Car mode InCallService changes. 1. Grant ENTER_CAR_MODE and CONTROL_INCALL_EXPERIENCE permissions to the shell identity for use within CTS tests. 2. Remove un-needed Telecom shell command. Test: unit tests, telecom CTS tests, manual testing Bug: 144345414 Change-Id: I54a2e723d6ef9552117e6cadf4ab7c449dd5e3cb
2019-11-20 07:54:36 -08:00
<!-- Permission required for Telecom car mode CTS tests. -->
<permission name="android.permission.CONTROL_INCALL_EXPERIENCE"/>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
</privapp-permissions>
<privapp-permissions package="com.android.statementservice">
<permission name="android.permission.INTENT_FILTER_VERIFICATION_AGENT"/>
</privapp-permissions>
Declare privileged permissions of Live TV app Test: build Bug: 35782070 Change-Id: Ia1e39dcf8fdd3345837ebec1729ad4d02699763b
2017-03-20 15:19:11 -07:00
<privapp-permissions package="com.android.tv">
Add permissions for LiveTv (AOSP) It crashes without the permissions Bug: 67474061 Test: make; flashall; install and open LiveTv; Change-Id: Ifec8bfb4ee93ac6b9189a9c337fdd2ef9ec34537
2017-10-05 18:31:00 -07:00
<permission name="android.permission.CHANGE_HDMI_CEC_ACTIVE_SOURCE"/>
<permission name="android.permission.DVB_DEVICE"/>
<permission name="android.permission.GLOBAL_SEARCH"/>
<permission name="android.permission.HDMI_CEC"/>
<permission name="android.permission.MODIFY_PARENTAL_CONTROLS"/>
<permission name="android.permission.READ_CONTENT_RATING_SYSTEMS"/>
<permission name="com.android.providers.tv.permission.ACCESS_ALL_EPG_DATA"/>
<permission name="com.android.providers.tv.permission.ACCESS_WATCHED_PROGRAMS"/>
Declare privileged permissions of Live TV app Test: build Bug: 35782070 Change-Id: Ia1e39dcf8fdd3345837ebec1729ad4d02699763b
2017-03-20 15:19:11 -07:00
</privapp-permissions>
Control privileged permissions for priv-apps Added support for privapp-permissions config element. It allows to explicitly control what privileged permissions applications should be granted. Feature is controlled by ro.control_privapp_permissions property. Possible values: - 0/false, the feature is completely disabled - signature|privileged permissions are granted automatically without logging. *Default behavior* - 1/true, enforce that only whitelisted permissions are granted. Only devices with ro.control_privapp_permission=1 will pass CTS tests. Test: Manual Bug:31008485 Change-Id: I93a8c2782cc72b3953f32c237086d08d82ac0d5b
2016-11-09 14:32:27 -08:00
<privapp-permissions package="com.android.vpndialogs">
<permission name="android.permission.CONNECTIVITY_INTERNAL"/>
<permission name="android.permission.CONTROL_VPN"/>
</privapp-permissions>
API review followup: DynamicAndroidClient Some API changes per API reivew: - Move DynamicAndroidClient and ~Manager to android.os.image. - Rename them to DynamicSystemClient and ~Manager. - Rename permission MANAGE_DYNAMIC_ANDROID to MANAGE_DYNAMIC_SYSTEM - Corresponding changes in the installation service. - Corresponding changes in privapp-permissions-platform.xml. - Add missing annotations. - Change setOnStatusChangedListener's parameters order. - Improve documentations. - Re-generate api/system-current.txt. Bug: 126613281 Test: adb shell am Change-Id: Ia920e9ccf6de1dbbd38c52910cb72cb81b9b5b32
2019-03-07 11:57:17 +08:00
<privapp-permissions package="com.android.dynsystem">
Add DynamicAndroidInstallationService DynamicAndroidInstallationService is a framework service to download, unzip and write DynamicAndroid images. Apps should interact with it using DynamicAndroidClient. Or, developers can use adb am commmands. Test: build and run on internal target Bug: 122015653 Change-Id: I7c834ed37de52840a407fb140743eda1f2bd82e8
2019-01-12 00:40:02 +08:00
<permission name="android.permission.REBOOT"/>
API review followup: DynamicAndroidClient Some API changes per API reivew: - Move DynamicAndroidClient and ~Manager to android.os.image. - Rename them to DynamicSystemClient and ~Manager. - Rename permission MANAGE_DYNAMIC_ANDROID to MANAGE_DYNAMIC_SYSTEM - Corresponding changes in the installation service. - Corresponding changes in privapp-permissions-platform.xml. - Add missing annotations. - Change setOnStatusChangedListener's parameters order. - Improve documentations. - Re-generate api/system-current.txt. Bug: 126613281 Test: adb shell am Change-Id: Ia920e9ccf6de1dbbd38c52910cb72cb81b9b5b32
2019-03-07 11:57:17 +08:00
<permission name="android.permission.MANAGE_DYNAMIC_SYSTEM"/>
Add DynamicAndroidInstallationService DynamicAndroidInstallationService is a framework service to download, unzip and write DynamicAndroid images. Apps should interact with it using DynamicAndroidClient. Or, developers can use adb am commmands. Test: build and run on internal target Bug: 122015653 Change-Id: I7c834ed37de52840a407fb140743eda1f2bd82e8
2019-01-12 00:40:02 +08:00
</privapp-permissions>
Add BIND_IMS_SERVICE to permissions whitelist Adds android.permission.BIND_IMS_SERVICE to the permissions whitelist xml file. Bug: 34813244 Test: Manual Change-Id: I7a7ad1a361c9d2dcc51769bc74a436878ad4adc5
2017-02-03 10:42:25 -08:00
</permissions>
Reference in New Issue Copy Permalink