From 4d55976c4f3862c203c840ea23fa35b61c4ed545 Mon Sep 17 00:00:00 2001
From: Richard Uhler <ruhler@google.com>
Date: Mon, 14 Jan 2019 09:28:05 +0000
Subject: [PATCH] Change MANAGE_ROLLBACKS permission to signature|verifier

It was set to signature|installer so that Phonesky would have access to
the RollbackManager APIs, but Phonesky is the verifier, not the
installer.

Test: atest RollbackTest
Test: atest CtsPermission2TestCases:PermissionPolicyTest
Bug: 112431924
Change-Id: I45fbe3fe2e618517bca1fd93f35324f93851868c
---
 core/res/AndroidManifest.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/res/AndroidManifest.xml b/core/res/AndroidManifest.xml
index 8b85a28c4a40d..de8d50adc7d12 100644
--- a/core/res/AndroidManifest.xml
+++ b/core/res/AndroidManifest.xml
@@ -3861,7 +3861,7 @@
 
     <!-- @SystemApi @hide Allows managing apk level rollbacks. -->
     <permission android:name="android.permission.MANAGE_ROLLBACKS"
-        android:protectionLevel="signature|installer" />
+        android:protectionLevel="signature|verifier" />
 
     <!-- @SystemApi @hide Allows an application to mark other applications as harmful -->
     <permission android:name="android.permission.SET_HARMFUL_APP_WARNINGS"