From 2000a4bddcd15a3d7e7dce3bd368df143e9691d0 Mon Sep 17 00:00:00 2001
From: Winson <chiuwinson@google.com>
Date: Mon, 15 Mar 2021 16:04:33 -0700
Subject: [PATCH] Update DOMAIN_VERIFICATION_AGENT to internal|privileged

This change means a system image update is required to change the
grant for this permission. A role cannot be used as the intended
consumer declares a library in its manifest.

Bug: 177080830

Test: manual, verified using com.android.statementservice

Change-Id: I70549c0bceefa111bddf72d785bb58a7320a4220
---
 core/res/AndroidManifest.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/res/AndroidManifest.xml b/core/res/AndroidManifest.xml
index d783b445515d2..024f0cf8b8a99 100644
--- a/core/res/AndroidManifest.xml
+++ b/core/res/AndroidManifest.xml
@@ -4799,7 +4799,7 @@
          TODO(159952358): STOPSHIP: This must be updated to the new "internal" protectionLevel
     -->
     <permission android:name="android.permission.DOMAIN_VERIFICATION_AGENT"
-        android:protectionLevel="signature|privileged" />
+        android:protectionLevel="internal|privileged" />
 
     <!-- @SystemApi @hide Must be required by the domain verification agent's intent
          BroadcastReceiver, to ensure that only the system can interact with it.