From 006f56897e12cd1ae9b08aaec76078d601b0d24a Mon Sep 17 00:00:00 2001
From: Shivanker Goel <shivanker@google.com>
Date: Tue, 31 Jan 2023 16:07:51 +0000
Subject: [PATCH] Add new permissions to gate StatsManager restricted logging
 APIs.

Test: atest FrameworkStatsdHostTest
Bug: 266087404
Bug: 266081994

Change-Id: I084d2c49ad777799eed75323fff47299da294a8d
---
 core/api/system-current.txt  | 1 +
 core/res/AndroidManifest.xml | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/core/api/system-current.txt b/core/api/system-current.txt
index 4a0b2eb502dd3..13eae40b6903d 100644
--- a/core/api/system-current.txt
+++ b/core/api/system-current.txt
@@ -271,6 +271,7 @@ package android {
     field public static final String READ_PRINT_SERVICE_RECOMMENDATIONS = "android.permission.READ_PRINT_SERVICE_RECOMMENDATIONS";
     field public static final String READ_PRIVILEGED_PHONE_STATE = "android.permission.READ_PRIVILEGED_PHONE_STATE";
     field public static final String READ_PROJECTION_STATE = "android.permission.READ_PROJECTION_STATE";
+    field public static final String READ_RESTRICTED_STATS = "android.permission.READ_RESTRICTED_STATS";
     field public static final String READ_RUNTIME_PROFILES = "android.permission.READ_RUNTIME_PROFILES";
     field public static final String READ_SAFETY_CENTER_STATUS = "android.permission.READ_SAFETY_CENTER_STATUS";
     field public static final String READ_SEARCH_INDEXABLES = "android.permission.READ_SEARCH_INDEXABLES";
diff --git a/core/res/AndroidManifest.xml b/core/res/AndroidManifest.xml
index 0b6b0a1350cb6..86701efe28f20 100644
--- a/core/res/AndroidManifest.xml
+++ b/core/res/AndroidManifest.xml
@@ -5657,6 +5657,11 @@
     <permission android:name="android.permission.REGISTER_STATS_PULL_ATOM"
                 android:protectionLevel="signature|privileged" />
 
+    <!-- @SystemApi @hide Allows an application to read restricted stats from statsd.
+         <p>Not for use by third-party applications. -->
+    <permission android:name="android.permission.READ_RESTRICTED_STATS"
+                android:protectionLevel="internal|privileged" />
+
     <!-- @SystemApi Allows an application to control the backup and restore process.
     <p>Not for use by third-party applications.
          @hide pending API council -->