21 Commits

Author SHA1 Message Date
TreeHugger Robot
9682046756 Merge "preinstalled-packages-platform for profiles" 2019-12-23 22:38:48 +00:00
Bookatz
6d31ac184d preinstalled-packages-platform for profiles
Unwhitelist packages that are not needed on profiles, such as wallpaper,
navbar, and cutout apps. These system packages will therefore not be
pre-installed on profile users.

Bug: 134605778
Test: Confirmed that these packages do not appear in a profile
Change-Id: Icefbcf8def31450a0f2d93cca12f6fcbf6803cb7
2019-12-19 11:48:28 -08:00
TreeHugger Robot
a1d5731beb Merge "Move SystemUI to /system_ext" 2019-12-19 02:17:02 +00:00
Jeongik Cha
d45d9e111b Move SystemUI to /system_ext
we plan to forbid hidden API in product partition.
So this app should be moved to /system_ext because it uses hidden API.
It is not permanent, so they can be moved back to /product due to
needs if there isn't hidden usage anymore.

Bug: 137908189
Test: m
Test: check whether device boots successfully
Test: atest SystemUITests
Change-Id: I54f86496d4a0045af3576091cce00e5cd285b4f8
2019-12-17 07:19:45 +00:00
Jeongik Cha
f32bbcf742 move privapp_whitelist_com.android.storagemanager to system_ext
As StorageManager, permissions.xml should follow the app's partition.

Test: m && check booting
Bug: 137908189
Change-Id: Ie791b5fbe1b1906537a57e8f1c34029c0f092afc
2019-12-11 22:02:59 +09:00
Jeongik Cha
9a970c0494 Move 'privapp_whitelist_com.android.launcher3' to system_ext
As AOSP launcher is moved to system_ext, its permission files will follow the app location.

Test: m
Bug: 137908189
Change-Id: I5d11e3901633be82f375c56a5ef2c79b6e0b0922
2019-12-04 13:09:41 +09:00
Jeongik Cha
a8eb85afb4 Move 'privapp_whitelist_com.android.settings' to system_ext
As Settings is moved to system_ext, its permission files will follow the app location.

Test: m
Bug: 137908189
Change-Id: I58ae29a6454f91f222b15ccbd9d3e5b5d5889289
2019-12-04 12:35:08 +09:00
Jeongik Cha
2c979fcb5f move privapp_whitelist_com.android.provision to system_ext
Test: m
Bug: 137908189
Change-Id: I183397b6e7e3783e26f1fd345c357af47410bb22
2019-11-26 16:15:40 +09:00
Jeongik Cha
38ed7d7410 privapp_whitelist_com.android.emergency to system_ext
Test: m
Bug: 137908189
Change-Id: I50c04967fb5a3e4f3227b50d750f24d3d8deeec4
2019-11-26 16:13:57 +09:00
Jeongik Cha
228ef6fa66 privapp_whitelist_com.android.carrierconfig to system_ext
Test: m
Bug: 137908189
Change-Id: I65cb7cb998d23541c8bcd2cfd81c8a9b94e7eccc
2019-11-26 15:55:47 +09:00
TreeHugger Robot
be0f335f5a Merge "Whitelist packages for user types" 2019-09-25 18:45:13 +00:00
Bookatz
04d7ae5c6f Whitelist packages for user types
Creates a new SystemConfig xml entry which allows a device to whitelist
system packages to be installed on users when they are created, based on
the type of user.

System packages will be installed on users when they are created, or
during OTAs, based on this whitelist. The whitelist can be
enabled/disabled via a Config resource.

For any user type, system packages can be whitelisted or blacklisted.
If it is both (for the same user type), the blacklist takes priority.
If it is neither, it won't be installed (since it isn't whitelisted).

If a system package isn't mentioned in the whitelist file at all, for
any user, then its behaviour depends on the Config resource value, which
can optionally implicitly whitelist all such apps on all users.

For now, the list is mostly empty and the default config is set to be
enabled but implicitly whitelist all system packages that are not
mentioned.

Test: atest FrameworksServicesTests:SystemConfigTest
Test: atest com.android.server.pm.UserManagerServicePackageWhitelistTest
Test: manually test user 0 by flashall -w and checking packages
Test: manually test OTA by setting setprop persist.pm.mock-upgrade 1
Bug: 134605778

Change-Id: Ia098c1f597f66a1c946cfcc9b7771c25e8ceabf7
2019-09-24 09:38:58 -07:00
Adam Pardyl
0f1b3d4602 WindowManager ProtoLog feature
This CL implements the on-device part of ProtoLog
- the new logging system for WindowManager.

Design doc: go/windowmanager-log2proto

Change-Id: I2c88c97dabb3465ffc0615b8017b335a494bca59
Bug:
Test: atest FrameworksServicesTests:com.android.server.protolog protologtool-tests
2019-09-23 15:47:29 +00:00
Bill Lin
54f1f21be2 Add privapp-permissions for DocumentsUI
DocumentsUI use @hide private permission:
    "android.permission.CHANGE_OVERLAY_PACKAGES"

Test: atest DocumentsUITests
Test: check CHANGE_OVERLAY_PACKAGES grant to DocumentsUI.apk
Test: check CHANGE_OVERLAY_PACKAGES grant to com.android.documentsui
Test: com.android.documentsui.xml locate in system/etc/permissions
Test: DocumentsUI.apk locate in /system/priv-app/

Bug: 128689309
Bug: 131331107
Bug: 132671058

Change-Id: Ie9bffbe152da511dc08882fd44e95dd426aef980
2019-05-15 05:13:24 +08:00
Anton Hansson
38cb100224 Move EmergencyInfo perm whitelist to /product
The app is moving to /product, to separate out its permission
grants to a separate file and move that file to /product as well.

Bug: 122353713
Test: boot aosp_arm64 emulator
Change-Id: Ic165aae180a002c3566e3c1b1495a1d50dfd0e4a
2019-03-25 20:13:54 +00:00
Anton Hansson
832f74662d Separate privapp grant for dialer
This app is moving to /product, so split it out of the grant
file on /system. The grant file is made required by the app itself.

Bug: 122353713
Test: boot aosp_blueline
Change-Id: I5e304e9df8af6c974b59a56edee7dcd0a932de3f
2019-01-25 14:03:37 +00:00
Anton Hansson
edd61059d8 Move settings intelligence grant file to /product
The app is moving to /product, so move its privapp permission
grant along with it.

Bug: 122353713
Test: make
Test: boot aosp product
Change-Id: Ib4041ac5e39fa037939326db9c858db78d31d51b
2019-01-15 10:34:44 +00:00
Anton Hansson
221f4d4614 Move a set of app privapp grants to /product
These apps are moving to /product, so move the grant
files to /product as well.

Bug: 122353713
Test: make
Test: boot aosp product
Change-Id: Ief20d30ddb834a63cec8ed070022bb5165e07497
2019-01-15 10:33:38 +00:00
Anton Hansson
27eedf5052 Split out more privapp permissions
These apps are all moving to /product, so split them
out of the grant file on /system. For now, make them
required by the /system file. As part of moving the
an app to /product, the grant file will be made required
by the app itself.

Bug: 122353713
Test: make
Exempt-From-Owner-Approval: approved already
Change-Id: If207576d1e78037159051de25a733d90c1cb29c8
2019-01-15 10:32:32 +00:00
Anton Hansson
099d53b9cb Separate privapp grant for settings.intelligence
This app is moving to /product, so split it out of the grant
file on /system. For now, make it required by the /system file.
As part of moving the an app to /product, the grant file will
be made required by the app itself.

Bug: 122353713
Test: make
Exempt-From-Owner-Approval: approved already
Change-Id: I994137279b2c25938fd9967027f606a88bb39468
Merged-In: I994137279b2c25938fd9967027f606a88bb39468
2019-01-15 10:30:19 +00:00
Anton Hansson
7736426465 Convert data/etc/Android.mk to blueprint
Should produce identical artifacts.

Test: boot blueline
Change-Id: Iad06f3efc727d97bdef3d4a7cec9b2b1fbc775b9
Merged-In: Iad06f3efc727d97bdef3d4a7cec9b2b1fbc775b9
(cherry picked from commit 8fe7b41bc9333b33e38571edf7fcc3560cbb2366)
2019-01-14 09:24:21 +00:00