d6474c24a8
1.Protect Device Identifiers: Starting in Android Q, apps must have the READ_PRIVILEGED_PHONE_STATE privileged permission in order to access the device's non-resettable identifiers IMEI and serial is used for the *#06# dialog. OEMs needs this to run factory tests. Perhaps it is something that should be moved to telephony, but as the current state dialer is showing it. 2.Limit pre-installed app network permission:Preinstalled apps that want to access restricted network needs to declare the CONNECTIVITY_USE_RESTRICTED_NETWORKS permission. Restricted network is used for VVM access. Bug: 132081872,132080738 Test: Compile and load build Change-Id: I246ab62a252d8a0335b8cc9ac5bb2089910781c9
31 lines
1.5 KiB
XML
31 lines
1.5 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<!--
|
|
~ Copyright (C) 2019 The Android Open Source Project
|
|
~
|
|
~ Licensed under the Apache License, Version 2.0 (the "License");
|
|
~ you may not use this file except in compliance with the License.
|
|
~ You may obtain a copy of the License at
|
|
~
|
|
~ http://www.apache.org/licenses/LICENSE-2.0
|
|
~
|
|
~ Unless required by applicable law or agreed to in writing, software
|
|
~ distributed under the License is distributed on an "AS IS" BASIS,
|
|
~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
~ See the License for the specific language governing permissions and
|
|
~ limitations under the License
|
|
-->
|
|
<permissions>
|
|
<privapp-permissions package="com.android.dialer">
|
|
<permission name="android.permission.ALLOW_ANY_CODEC_FOR_PLAYBACK"/>
|
|
<permission name="android.permission.CONTROL_INCALL_EXPERIENCE"/>
|
|
<permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
|
|
<permission name="android.permission.MODIFY_PHONE_STATE"/>
|
|
<permission name="android.permission.STATUS_BAR"/>
|
|
<permission name="android.permission.STOP_APP_SWITCHES"/>
|
|
<permission name="com.android.voicemail.permission.READ_VOICEMAIL"/>
|
|
<permission name="com.android.voicemail.permission.WRITE_VOICEMAIL"/>
|
|
<permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
|
|
<permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
|
|
</privapp-permissions>
|
|
</permissions>
|