From 18511f25ec4831c86fb8ab3030263d1e65cddb62 Mon Sep 17 00:00:00 2001
From: Himanshu Gupta <himanshuz@google.com>
Date: Tue, 3 Jan 2023 11:46:04 +0000
Subject: [PATCH] Adding a new permission to interact across clone profile
 apps.

This permision would only be available to system and 3P apps would
be restricted from using it.
OEMs can use this permission for their properietry apps installed with the OEM image.

Test: Manual verification by triggering system sharesheet.
Change-Id: I65e57cd5b4d79d3e090817ac3040844f6aa3e600
---
 core/api/system-current.txt  | 1 +
 core/res/AndroidManifest.xml | 9 +++++++++
 2 files changed, 10 insertions(+)

diff --git a/core/api/system-current.txt b/core/api/system-current.txt
index 4e0e4b9d1ec79..314e27050423b 100644
--- a/core/api/system-current.txt
+++ b/core/api/system-current.txt
@@ -248,6 +248,7 @@ package android {
     field public static final String PROVIDE_TRUST_AGENT = "android.permission.PROVIDE_TRUST_AGENT";
     field public static final String PROVISION_DEMO_DEVICE = "android.permission.PROVISION_DEMO_DEVICE";
     field public static final String QUERY_ADMIN_POLICY = "android.permission.QUERY_ADMIN_POLICY";
+    field public static final String QUERY_CLONED_APPS = "android.permission.QUERY_CLONED_APPS";
     field @Deprecated public static final String QUERY_TIME_ZONE_RULES = "android.permission.QUERY_TIME_ZONE_RULES";
     field public static final String QUERY_USERS = "android.permission.QUERY_USERS";
     field public static final String RADIO_SCAN_WITHOUT_LOCATION = "android.permission.RADIO_SCAN_WITHOUT_LOCATION";
diff --git a/core/res/AndroidManifest.xml b/core/res/AndroidManifest.xml
index 3f18e5a838cb5..f74ebc49760c3 100644
--- a/core/res/AndroidManifest.xml
+++ b/core/res/AndroidManifest.xml
@@ -7040,6 +7040,15 @@
         android:protectionLevel="signature|knownSigner"
         android:knownCerts="@array/config_healthConnectMigrationKnownSigners" />
 
+    <!-- @SystemApi Allows an app to query apps in clone profile. The permission is
+         bidirectional in nature, i.e. cloned apps would be able to query apps in root user.
+         The permission is not meant for 3P apps as of now.
+         <p>Protection level: signature|privileged
+         @hide
+    -->
+    <permission android:name="android.permission.QUERY_CLONED_APPS"
+                android:protectionLevel="signature|privileged" />
+
     <!-- Attribution for Geofencing service. -->
     <attribution android:tag="GeofencingService" android:label="@string/geofencing_service"/>
     <!-- Attribution for Country Detector. -->