Add an App Protection Service role

This is a new, exclusive role for a system app that is able to access
application behavior data in order to detect potentially harmful behavior.

Currently, this role will have access to historical app ops via the new
GET_HISTORICAL_APP_OPS_STATS permission.

Security review: b/196982126

Bug: 204929538
Test: manual build and install
Change-Id: I9bd4cfcfed0419b5136a08d314c65572519af3db
This commit is contained in:
Ben Gruver
2021-11-02 15:18:54 -07:00
parent 754be5ce15
commit 3d3b22a1f7
3 changed files with 5 additions and 0 deletions

View File

@@ -387,6 +387,7 @@ package android {
field public static final int config_helpPackageNameValue = 17039388; // 0x104001c
field public static final int config_systemActivityRecognizer = 17039416; // 0x1040038
field public static final int config_systemAmbientAudioIntelligence = 17039411; // 0x1040033
field public static final int config_systemAppProtectionService;
field public static final int config_systemAudioIntelligence = 17039412; // 0x1040034
field public static final int config_systemAutomotiveCluster = 17039400; // 0x1040028
field public static final int config_systemAutomotiveProjection = 17039401; // 0x1040029

View File

@@ -2066,6 +2066,8 @@
<string name="config_systemTelevisionRemoteService" translatable="false">@string/config_tvRemoteServicePackage</string>
<!-- The name of the package that will hold the device management role -->
<string name="config_deviceManager" translatable="false"></string>
<!-- The name of the package that will hold the app protection service role. -->
<string name="config_systemAppProtectionService" translatable="false"></string>
<!-- The name of the package that will be allowed to change its components' label/icon. -->
<string name="config_overrideComponentUiPackage" translatable="false">com.android.stk</string>

View File

@@ -3322,6 +3322,8 @@
<public name="config_systemSupervision" />
<!-- @hide @SystemApi -->
<public name="config_deviceManager" />
<!-- @hide @SystemApi -->
<public name="config_systemAppProtectionService" />
</staging-public-group>
<staging-public-group type="dimen" first-id="0x01db0000">