From 41c59babd51dfb26171365e7aa51942f1794c7c3 Mon Sep 17 00:00:00 2001 From: paulhu Date: Tue, 8 Sep 2020 11:19:01 +0800 Subject: [PATCH] Add CONNECTIVITY_USE_RESTRICTED_NETWORKS permission to DownloadProvider - DownloadManager will use the requestor app's default network to open a connection. When the VPN app lists the DownloadProvider as a disallowed application, this will fail with EPERM. - This is because in R, the DownloadProvider lost its privileges due to the removal of the CONNECTIVITY_INTERNAL permission. It's removed without considering the corner case where the DownloadProvider is excluded from using the VPN. It's the only case where this makes a difference. - Adding CONNECTIVITY_USE_RESTRICTED_NETWORKS will give DownloadProvider the ability to use the VPN again in this case, fixing the issue. Bug: 165774987 Test: Build, flash rom and boot to home. Manully test that DownloadProvider can download file via VPN. Change-Id: If8fa785568ace1f15f53daec67c06e1207d5dc9c --- data/etc/privapp-permissions-platform.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/data/etc/privapp-permissions-platform.xml b/data/etc/privapp-permissions-platform.xml index e08e42aec391e..5f34a5eb58a12 100644 --- a/data/etc/privapp-permissions-platform.xml +++ b/data/etc/privapp-permissions-platform.xml @@ -224,6 +224,7 @@ applications that come with the platform +