Merge "Don't remove SYSTEM_FIXED for intentional fixed grants to critical apps."

2022-01-04 23:34:38 +00:00 · 2022-01-04 23:34:38 +00:00 · 547654cab7
commit 547654cab7
parent ed021212d6 cc0a80895f
1 changed files with 2 additions and 1 deletions
--- a/services/core/java/com/android/server/pm/permission/DefaultPermissionGrantPolicy.java
+++ b/services/core/java/com/android/server/pm/permission/DefaultPermissionGrantPolicy.java
@ -435,7 +435,8 @@ final class DefaultPermissionGrantPolicy {
                    || !pm.isGranted(Manifest.permission.READ_PRIVILEGED_PHONE_STATE,
                            pkg, UserHandle.of(userId))
                    || !pm.isGranted(Manifest.permission.READ_PHONE_STATE, pkg,
-                            UserHandle.of(userId))) {
+                            UserHandle.of(userId))
+                    || pm.isSysComponentOrPersistentPlatformSignedPrivApp(pkg)) {
                continue;
            }