From 486bdfd92b8f9eec282392acf3895c4f1ea22329 Mon Sep 17 00:00:00 2001
From: Angela Wang <angelala@google.com>
Date: Wed, 1 Mar 2023 12:23:52 +0000
Subject: [PATCH] Makes Flash Notifications preview broadcasts be protected

Flash Notifications preview broadcasts should not be sent by non-system apps for now. Makes them be protected to ensure no malicious apps can impersonate the OS to perform the unexpectly flashing. Also, broadcasts sent from system internals should be protected to avoid security holes.

Bug: 266775677
Test: ensures non-protected broadcast from system error logs are gone manually
Change-Id: Ibd8b76d505e65f8150619607545e87d550e6affb
---
 core/res/AndroidManifest.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/core/res/AndroidManifest.xml b/core/res/AndroidManifest.xml
index 85d17650289a0..4dc88b96c091e 100644
--- a/core/res/AndroidManifest.xml
+++ b/core/res/AndroidManifest.xml
@@ -822,6 +822,8 @@
     <protected-broadcast android:name="com.android.internal.telephony.cat.SMS_SENT_ACTION" />
     <protected-broadcast android:name="com.android.internal.telephony.cat.SMS_DELIVERY_ACTION" />
     <protected-broadcast android:name="android.companion.virtual.action.VIRTUAL_DEVICE_REMOVED" />
+    <protected-broadcast android:name="com.android.internal.intent.action.FLASH_NOTIFICATION_START_PREVIEW" />
+    <protected-broadcast android:name="com.android.internal.intent.action.FLASH_NOTIFICATION_STOP_PREVIEW" />
 
     <!-- ====================================================================== -->
     <!--                          RUNTIME PERMISSIONS                           -->