From 21015bc62d208b8cfd56cf985275f8bcf3a0bcd9 Mon Sep 17 00:00:00 2001
From: Roman Kalukiewicz <romkal@google.com>
Date: Wed, 19 Oct 2022 14:16:32 -0700
Subject: [PATCH] Allow KILL_UID to be held by a role.

Test: m; adb shell dumpsys package com.google.android.gms.supervision
Change-Id: I305d75e147d09043bf9144205bb8a1083ae931d7
---
 core/res/AndroidManifest.xml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/core/res/AndroidManifest.xml b/core/res/AndroidManifest.xml
index dbfefd0f89d5a..e2247a1e50893 100644
--- a/core/res/AndroidManifest.xml
+++ b/core/res/AndroidManifest.xml
@@ -5876,10 +5876,12 @@
                 android:protectionLevel="signature" />
 
     <!-- @SystemApi Allows applications to kill UIDs.
+        <p>This permission can be granted to the SYSTEM_SUPERVISOR role used for parental
+        controls.
         <p>Not for use by third-party applications.
          @hide -->
     <permission android:name="android.permission.KILL_UID"
-                android:protectionLevel="signature|installer" />
+                android:protectionLevel="signature|installer|role" />
 
     <!-- @SystemApi Allows applications to read the local WiFi and Bluetooth MAC address.
         @hide -->