From b1cdcb26a98915009f8d13e4f6373832a6d59a11 Mon Sep 17 00:00:00 2001
From: Alex Johnston <acjohnston@google.com>
Date: Fri, 21 Jan 2022 12:04:57 +0000
Subject: [PATCH] Introduce a permission to trigger lost mode

* This permission will be included with
  the DEVICE_MANAGER role

Bug: 206945072
Test: atest CtsPermission2TestCases
Change-Id: Ie4c8767bf89151a9d9e152c80048c634229469cd
---
 core/api/system-current.txt  |  1 +
 core/res/AndroidManifest.xml | 12 ++++++++++++
 2 files changed, 13 insertions(+)

diff --git a/core/api/system-current.txt b/core/api/system-current.txt
index 313fc75ed668e..43162a84a5aa7 100644
--- a/core/api/system-current.txt
+++ b/core/api/system-current.txt
@@ -313,6 +313,7 @@ package android {
     field public static final String SYSTEM_CAMERA = "android.permission.SYSTEM_CAMERA";
     field public static final String TETHER_PRIVILEGED = "android.permission.TETHER_PRIVILEGED";
     field public static final String TOGGLE_AUTOMOTIVE_PROJECTION = "android.permission.TOGGLE_AUTOMOTIVE_PROJECTION";
+    field public static final String TRIGGER_LOST_MODE = "android.permission.TRIGGER_LOST_MODE";
     field public static final String TV_INPUT_HARDWARE = "android.permission.TV_INPUT_HARDWARE";
     field public static final String TV_VIRTUAL_REMOTE_CONTROLLER = "android.permission.TV_VIRTUAL_REMOTE_CONTROLLER";
     field public static final String UNLIMITED_SHORTCUTS_API_CALLS = "android.permission.UNLIMITED_SHORTCUTS_API_CALLS";
diff --git a/core/res/AndroidManifest.xml b/core/res/AndroidManifest.xml
index ae2052b66f9cd..7917afdbc677a 100644
--- a/core/res/AndroidManifest.xml
+++ b/core/res/AndroidManifest.xml
@@ -2306,6 +2306,18 @@
     <permission android:name="android.permission.MANAGE_FACTORY_RESET_PROTECTION"
         android:protectionLevel="signature|privileged"/>
 
+    <!-- ======================================== -->
+    <!-- Permissions for lost mode -->
+    <!-- ======================================== -->
+    <eat-comment />
+
+    <!-- @SystemApi Allows an application to trigger lost mode on an organization-owned device.
+         <p>Not for use by third-party applications.
+         @hide
+    -->
+    <permission android:name="android.permission.TRIGGER_LOST_MODE"
+        android:protectionLevel="signature|role"/>
+
     <!-- ================================== -->
     <!-- Permissions for accessing hardware -->
     <!-- ================================== -->