6762e2b661
We already have a permission, MANAGE_DYNAMIC_SYSTEM, whose protection level is signature. Only platform applications holding it can interact directly with DynamicSystemService, a wrapper of native GsiService. In our design, DynamicSystemInstallationService is the sole platform app holding it. Then we need another permission for non-platform but privileged apps. This new permission doesn't give apps access to DynamicSystemService, but only to system API DynamicSystemClient. DynamicSystemClient works with underneath DynamicSystemInstallationService and allows privileged apps to install DynamicSystem images and get status updates in our designed manner. Bug: 128982216 Test: verified using DynamicSystemClient. Change-Id: I3e67322511e3ab08db87bfad40d8c3d3cf6fdfe5
48 lines
1.9 KiB
XML
48 lines
1.9 KiB
XML
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
|
|
package="com.android.dynsystem"
|
|
android:sharedUserId="android.uid.system">
|
|
|
|
<uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
|
|
<uses-permission android:name="android.permission.INTERNET" />
|
|
<uses-permission android:name="android.permission.MANAGE_DYNAMIC_SYSTEM" />
|
|
<uses-permission android:name="android.permission.REBOOT" />
|
|
<uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
|
|
|
|
<application
|
|
android:allowBackup="false"
|
|
android:label="@string/app_name">
|
|
|
|
<service
|
|
android:name=".DynamicSystemInstallationService"
|
|
android:enabled="true"
|
|
android:exported="true"
|
|
android:permission="android.permission.INSTALL_DYNAMIC_SYSTEM"
|
|
android:process=":dynsystem">
|
|
<intent-filter>
|
|
<action android:name="android.os.image.action.NOTIFY_IF_IN_USE" />
|
|
<category android:name="android.intent.category.DEFAULT" />
|
|
</intent-filter>
|
|
</service>
|
|
|
|
<activity android:name=".VerificationActivity"
|
|
android:exported="true"
|
|
android:permission="android.permission.INSTALL_DYNAMIC_SYSTEM"
|
|
android:theme="@android:style/Theme.Material.Light.Dialog.NoActionBar"
|
|
android:process=":dynsystem">
|
|
<intent-filter>
|
|
<action android:name="android.os.image.action.START_INSTALL" />
|
|
<category android:name="android.intent.category.DEFAULT" />
|
|
</intent-filter>
|
|
</activity>
|
|
|
|
<receiver
|
|
android:name=".BootCompletedReceiver"
|
|
android:enabled="true"
|
|
android:exported="false">
|
|
<intent-filter>
|
|
<action android:name="android.intent.action.BOOT_COMPLETED" />
|
|
</intent-filter>
|
|
</receiver>
|
|
</application>
|
|
</manifest>
|