From ffe2cfcffa82cc180ea0ace576b5d0eb02ef6a2a Mon Sep 17 00:00:00 2001
From: Danny Epstein <depstein@google.com>
Date: Wed, 3 Mar 2021 10:38:33 -0800
Subject: [PATCH] Configure privapp perms for rotary service

Test: Check for SecurityException on boot
Bug: 181577696
Change-Id: Ib0596f87c81fda75c830989ecc57059392b7fc42
Merged-In: Ib0596f87c81fda75c830989ecc57059392b7fc42
---
 data/etc/car/Android.bp                 |  7 +++++++
 data/etc/car/com.android.car.rotary.xml | 23 +++++++++++++++++++++++
 2 files changed, 30 insertions(+)
 create mode 100644 data/etc/car/com.android.car.rotary.xml

diff --git a/data/etc/car/Android.bp b/data/etc/car/Android.bp
index 2f41b9084f40d..89644e2320c1a 100644
--- a/data/etc/car/Android.bp
+++ b/data/etc/car/Android.bp
@@ -145,6 +145,13 @@ prebuilt_etc {
     system_ext_specific: true,
 }
 
+prebuilt_etc {
+    name: "allowed_privapp_com.android.car.rotary",
+    sub_dir: "permissions",
+    src: "com.android.car.rotary.xml",
+    filename_from_src: true,
+}
+
 prebuilt_etc {
     name: "allowed_privapp_com.android.car.ui.paintbooth",
     sub_dir: "permissions",
diff --git a/data/etc/car/com.android.car.rotary.xml b/data/etc/car/com.android.car.rotary.xml
new file mode 100644
index 0000000000000..eddef1acbbc7e
--- /dev/null
+++ b/data/etc/car/com.android.car.rotary.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2021 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+<permissions>
+    <privapp-permissions package="com.android.car.rotary">
+        <permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+    </privapp-permissions>
+</permissions>
+