From 7037a86e36ddfe23833c80acba258abf9f0c1d62 Mon Sep 17 00:00:00 2001
From: Andrew Solovay
Device owners and profile owners can temporarily suspend access to packages
- by calling the new DevicePolicyManager.getPackagesSuspended()
- method.Owners can use the same method to re-enable those packages.
+ by calling the new DevicePolicyManager.setPackagesSuspended()
+ method. Owners can use the same method to re-enable those packages.
- While a package is suspended, it cannot start activities, and notifications - to the package are suppressed. Suspended packages do not show in the overview screen is hidden. + Suspended packages do not show in the overview screen, and they cannot show dialogs (including toasts and snackbars). They also cannot play audio or vibrate the device. @@ -157,19 +159,22 @@ Android N.
Launchers should apply a distinctive UI to suspended apps to show that the
apps aren't currently available; for example, they might render the app icon
- in gray. Launchers can find out which apps are suspended by calling the new
- DevicePolicyManager.getPackagesSuspended() method.
+ in gray. Launchers can find out if an app is suspended by calling the new
+ DevicePolicyManager.getPackageSuspended() method.
On dual-profile devices, users can toggle work mode on and off. While work - mode is turned off, the managed profile is temporarily shut down. Work profile apps, background sync, and notifications are all disabled, including the profile - owner app. While the work profile is disabled, the system displays a persistent status icon to remind users that they can't launch work apps. The system launcher - indicates that work apps and widgets are not accessible. +
+ On dual-profile devices, users can toggle work mode on and off. While work + mode is turned off, the managed profile is temporarily shut down. Work + profile apps, background sync, and notifications are all disabled, including + the profile owner app. While the work profile is disabled, the system + displays a persistent status icon to remind users that they can't launch work + apps. The system launcher indicates that work apps and widgets are not + accessible.
-@@ -270,29 +275,36 @@ Android N.
Device owners can identify suspicious activity by remotely tracking device activity, including app launches, adb activity, and screen unlocks. Process logs don’t require user consent. To retrieve logs, device owners enable - device logging usingsetDeviceLoggingEnabled().
+ device logging using DevicePolicyManager.setSecurityLoggingEnabled().
- The new android.auditing.SecurityLog class includes these
- methods:
+ API changes include:
void DevicePolicyManager.setDeviceLoggingEnabled()
+ The new class android.app.admin.SecurityLog and its
+ methods
boolean DevicePolicyManager.getDeviceLoggingEnabled()
+ void DevicePolicyManager.setSecurityLoggingEnabled()
List DevicePolicyManager.retrieveDeviceLogs()
+ boolean DevicePolicyManager.isSecurityLoggingEnabled()
List DevicePolicyManager.retrievePreviousDeviceLogs()
+ List<SecurityEvent>
+ DevicePolicyManager.retrieveSecurityLogs()
+ List<SecurityEvent>
+ DevicePolicyManager.retrievePreRebootSecurityLogs()
Device owners can provide owner information to be shownon the lockscreen. - This information takes precedence the user lock screen message (if one is + This information takes precedence over the user lock screen message (if one is set). New {@link android.app.admin.DevicePolicyManager} methods are: