Commit Graph

1561 Commits

Author SHA1 Message Date
Chen Xu
af413b18d2 DO NOT MERGE add android.permission.STATUS_BAR for cellbroadcastreceiver
See b/171668171#29 for fix explanation.

Bug: 171668171
Bug: 172602964
Bug: 171614598
Bug: 171755310
Test: Manual test
Change-Id: Ie12354d42aa7d1bf07eeca1cb2c389d2383abbf4
2020-12-17 21:52:28 +00:00
Tyler Gunn
108dd94479 Grant CHANGE_DEVICE_IDLE_TEMP_WHITELIST to call log provider.
The call log provider needs to grant an allow-list exemption in
broadcast options when sending the ACTION_NEW_VOICEMAIL intent to it's
directed recipient.  This is required so that the voicemail app can
start a background service to do some time consuming (but timely) work
in the background upon receiving the intent.

Test: Manual test with Call log provider.
Bug: 173155475
Change-Id: I3e84d65292ec74ffe374fc997e57c4c688f71b9d
Merged-In: I3e84d65292ec74ffe374fc997e57c4c688f71b9d
2020-12-11 16:14:37 +00:00
TreeHugger Robot
d9541fb81b Merge "Add READ_DREAM_STATE to the settings list" into rvc-qpr-dev 2020-11-24 06:46:48 +00:00
Agatha Man
166aaccebb Add permissions to car shell
Bug: 173532101
Test: make && emulator
Change-Id: Iddaf0dfc25df76f8b3492fb293ccb3910ae2898e
Merged-In: Iddaf0dfc25df76f8b3492fb293ccb3910ae2898e
2020-11-19 19:59:03 +00:00
Edgar Wang
46f664b7ac Add READ_DREAM_STATE to the settings list
Settings application needs the previleged permission to
get AoD supression status by using PowerManager API

Bug: 173425264
Change-Id: I5da006b7c88dc36d3eefebc559f2a2f3ab50823f
Test: Manual & bootup device
(cherry picked from commit 8a888b9745)
Merged-In: I5da006b7c88dc36d3eefebc559f2a2f3ab50823f
2020-11-19 14:25:05 +00:00
Heemin Seog
52537c1ea2 Allow permission to change application state
Needed to give KitchenSink control over enabling/disabling rotary
functionality.

Bug: 170232080
Test: manual
Change-Id: Ic69222642884444597e7411b17b6c6f363076981
2020-10-16 16:16:56 -07:00
Sarah Chin
8517e8d998 Add read/write logic for SubscriptionPlan network types field
Add permissions for Phone process to access SubscriptionPlans for
meteredness

Test: manual verification
Bug: 169187737
Change-Id: Ib821590a573db87b22619cfe7ebe64c0230c5031
2020-09-23 23:59:02 -07:00
paulhu
41c59babd5 Add CONNECTIVITY_USE_RESTRICTED_NETWORKS permission to DownloadProvider
- DownloadManager will use the requestor app's default network to
open a connection. When the VPN app lists the DownloadProvider as
a disallowed application, this will fail with EPERM.
- This is because in R, the DownloadProvider lost its privileges
due to the removal of the CONNECTIVITY_INTERNAL permission. It's
removed without considering the corner case where the
DownloadProvider is excluded from using the VPN. It's the only
case where this makes a difference.
- Adding CONNECTIVITY_USE_RESTRICTED_NETWORKS will give
DownloadProvider the ability to use the VPN again in this case,
fixing the issue.

Bug: 165774987
Test: Build, flash rom and boot to home. Manully test that
      DownloadProvider can download file via VPN.
Change-Id: If8fa785568ace1f15f53daec67c06e1207d5dc9c
2020-09-08 11:19:01 +08:00
Fabian Kozynski
d951edaa48 Merge "Add MODIFY_AUDIO_ROUTING permission to systemui" into rvc-qpr-dev 2020-08-17 18:40:14 +00:00
Agatha Man
39bcfc7c83 Remove car permissions from common shell package
Removing car permissions that were added into common shell so that they
can be re-evaulated to include into CarShell. Adding car permissions to
shell should be reviewed by car frameworks team to determine what can be
allowed to the end-user and in terms of car safety.

Bug: 160339243
Test: make then check permission for shell user with adb shell pm dump
com.android.shell

Change-Id: I5a3b2086f605ba31f4231ec425cb2cb7c51ea7e6
(cherry picked from commit 89e5cfe9d8)
Merged-In: I5a3b2086f605ba31f4231ec425cb2cb7c51ea7e6
2020-08-14 18:44:14 +00:00
Fabian Kozynski
5f617413aa Add MODIFY_AUDIO_ROUTING permission to systemui
Adds the privileged permission for AppOpsControllerImpl.

Test: build and record
Fixes: 164213112
Change-Id: Ib23749542bb41eb1df2fb7cfe62db57fba73d0cf
2020-08-14 11:40:29 -04:00
Philip P. Moltmann
f379917d3e Allow permission controller to read audio configuration
- Unfortunately there is no read-only permission that allows to read the
audio configuration
- Unfortunately there is no API bump before the feature ships that would
allow us to add such a read-only permission

Bug: 162547999
Test: Read audio configuration from permission controller
Change-Id: Icfe2b5ae54cae1cfc1be44a1370ffb0692365316
2020-08-05 02:40:55 +00:00
Agatha Man
77d8407cb0 Merge "Add CAR_DIAGNOSTICS, CLEAR_CAR_DIAGNOSTICS, CONTROL_APP_BLOCKING, and CAR_UX_RESTRICTIONS_CONFIGURATION permissions to run ATS tests" into rvc-qpr-dev 2020-07-27 21:09:41 +00:00
Agatha Man
5c17bba24d Add CAR_DIAGNOSTICS, CLEAR_CAR_DIAGNOSTICS, CONTROL_APP_BLOCKING,
and CAR_UX_RESTRICTIONS_CONFIGURATION permissions to run ATS tests

CarDeviceInfo requires CAR_DIAGNOSTICS, CLEAR_CAR_DIAGNOSTICS.
AtsCarHostTestCases requires CONTROL_APP_BLOCKING and
CAR_UX_RESTRICTIONS_CONFIGURATION.

Note: This change allows anyone with a usb cable to write an app
to call the protected APIs in her/his car.

Bug: 162120802
Test: make
Change-Id: I9d0e1266389170cca3624522820457e826bbc613
2020-07-27 21:03:15 +00:00
Fabian Kozynski
9a85dc9c0a Merge changes from topic "permission_chip" into rvc-qpr-dev
* changes:
  Restricts notified app ops based on flags
  Add back privacy chip
2020-07-23 13:45:26 +00:00
TreeHugger Robot
b7130b274c Merge changes from topic "permission_hub_2_framework" into rvc-qpr-dev
* changes:
  Give Permission Controller the ability to see all accounts.
  Allow perm controller to read historical app-op data
2020-07-22 06:21:01 +00:00
Philip P. Moltmann
9abf24f032 Give Permission Controller the ability to see all accounts.
Bug: 161007415
Change-Id: I912cbfdc9a1881a0e9a1755848147cdf23781885
2020-07-21 20:38:37 +00:00
Fabian Kozynski
fd89d72b13 Restricts notified app ops based on flags
AppOps that are received by SystemUI and notified to listeners of
AppOpsControllerImpl are filtered based on the permission flag
PackageManager.FLAG_PERMISSION_USER_SENSITIVE_WHEN_GRANTED.

As calls to obtain this flag require an IPC, three things are done to
mitigate impact:
* PermissionFlagsCache keeps track of requested flags and will update
those (in a background thread), when a change is notified for a given
uid.
* Calls to getActiveAppOps/getActiveAppOpsForUser should be made from a
background thread.
* notifySubscribers is always called in the background thread.

Bug: 160966908
Test: atest PermissionFlagsCacheTest AppOpsControllerTest
Change-Id: I871094c32ce5ec940d779626333caa0ca500a4e3
Merged-In: I871094c32ce5ec940d779626333caa0ca500a4e3
2020-07-20 16:02:19 -04:00
Agatha Man
39ba8c9cc3 Add CAR_DRIVING_STATE and CAR_CONTROL_AUDIO_VOLUME permissions to run
ATS tests

AtsCarHostTestCases and AtsCarDeviceApp requires CAR_DRIVING_STATE.
AtsDeviceInfo and AtsAudioDeviceTestCases requires
CAR_CONTROL_AUDIO_VOLUME.

Bug: 161193447
Test: m -j && run ats tests
Change-Id: Ib16c6c5e54b489479c872cfa826b055262b797bb
2020-07-17 17:48:36 +00:00
Sarah Chin
c363a3a148 Add HANDLE_CAR_MODE_CHANGED permission
Required to allow DeviceStateMonitor to monitor changes in car mode to
get an accurate state of when all screens are on/off.

Test: build
Bug: 160898432
Change-Id: If3ad86a2564ce3ba53afea44e8ad5bf02b8d51e0
2020-07-16 21:50:38 +00:00
TreeHugger Robot
553b71a5b2 Merge "Deliver hideInsets when target is removed" into rvc-dev am: bb6c1e09ad
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/12011265

Change-Id: Idd5ef36a92ca4440dc9be16e6ce98e1092572a38
2020-07-01 16:59:13 +00:00
Taran Singh
4545703367 Deliver hideInsets when target is removed
hideInsets(IME) may not be delivered to the control target if
the window requesting hide is no longer available in WindowManager's
window map. However, it is still nicer to deliver it to the default
display's control target rather than not delivering it at all.
Fix: 159623277
Test: Manually using steps in bug.

Change-Id: I22cdf20627da2183d30af444f6dd9d0375d417c1
2020-06-30 10:02:10 -07:00
TreeHugger Robot
a0ba1c6f27 Merge "Wait for remote animation to stop freezing display" into rvc-dev am: 0207dba4b6
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/12034123

Change-Id: I70daa117908a5a26091ceff41f45efd58abd9d27
2020-06-30 03:32:16 +00:00
TreeHugger Robot
0207dba4b6 Merge "Wait for remote animation to stop freezing display" into rvc-dev 2020-06-30 03:29:46 +00:00
Joshua Duong
af1f67ebd4 Merge changes from topic "adbwifi-cts" into rvc-dev am: 5ab3aa0c7b
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/12000446

Change-Id: I612c709e9dad8b75e91f07e6eab44cff28fd1404
2020-06-30 00:57:39 +00:00
Joshua Duong
5ab3aa0c7b Merge changes from topic "adbwifi-cts" into rvc-dev
* changes:
  Add shell commands for AdbService.
  Add shell permissions for CTS test (AdbManagerTest).
2020-06-30 00:55:36 +00:00
Riddle Hsu
96ed092b10 Wait for remote animation to stop freezing display
If display is rotated 180 degree, the display might not have
configuration change. And if there is remote rotation and it hasn't
done, the rotation of display is still the old one. Once there is
a path calls stop-freezing-display, the rotation animation will be
executed directly with 0 degree delta. And if the activity needs to
relaunch, there will be obvious flickering.

Fixes: 160107205
Test: atest DisplayContentTests#testRemoteRotation
Change-Id: I66a02b67f7066abafd65c2c282144222701feaae
2020-06-30 01:28:35 +08:00
Rajeev Kumar
68894b7c9f Merge "Add privapp permissions permission for com.android.cellbroadcastreceiver package." into rvc-dev am: 0c059b97dd
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/12011267

Change-Id: I0989bfc34b94d649b1e31c4ba7c815587eb96f97
2020-06-26 21:33:34 +00:00
Rajeev Kumar
8fe5465ada Add privapp permissions permission for
com.android.cellbroadcastreceiver package.

Bug: 159544147
Fixes: 159544147
Test: Built a system image with this change and flashed
a device with it and the device booted successfully.

Change-Id: I7fd5080aa740fcfcebeb4f934d0a3fc39d847cc9
2020-06-26 19:26:31 +00:00
Joshua Duong
f2e03b393f Add shell permissions for CTS test (AdbManagerTest).
Bug: 159936209

Test: atest CtsAdbManagerTests
Change-Id: I896b53df582cceb7d1b0d6694d00064b0fb57b94
2020-06-25 15:03:19 -07:00
Shafik Nassar
964206ed74 Merge "Allow MediaProvider to request REGISTER_STATS_PULL_ATOM" into rvc-dev am: f59cdcf6dc
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/11880479

Change-Id: I7217a1cfb42b1500d9c1bb234ebe47f4dd38fd64
2020-06-18 15:06:39 +00:00
Enrico Granata
5392a4d81f Merge "Move car companion device support app perms to framework" into rvc-dev am: 561b09994b
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/11853982

Change-Id: I2b1b2bfac9d0ca3665e57317849c4469052c659d
2020-06-18 14:39:49 +00:00
Shafik Nassar
f59cdcf6dc Merge "Allow MediaProvider to request REGISTER_STATS_PULL_ATOM" into rvc-dev 2020-06-18 12:25:55 +00:00
shafik
44f3ca5679 Allow MediaProvider to request REGISTER_STATS_PULL_ATOM
MediaProvider needs the permission to register a StatsPullCallback in
statsd to pull the external storage metrics.

Test: build
Bug: 149669087
Change-Id: I4f7e09c2e514e2290d1cd5ac765bb115e7ade9ef
2020-06-17 11:34:01 +01:00
Hao Chen
8de2ca3e5c Move car companion device support app perms to framework
Test: build and flash the trout PDK, boot to the UI
Bug: 158483244
Change-Id: Ic8cd135cde2d616e5a8d36b71de56acba4dab261
2020-06-16 21:30:12 +00:00
Yan Zhu
17d5ac8048 Merge "Install auto-generrate overlay packages even when not included in whitelist" into rvc-dev am: b6ac0061fa
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/11529815

Change-Id: I851b95ed15c125502b8be10279b4c560b68cfd91
2020-06-10 04:38:22 +00:00
Yan Zhu
b6ac0061fa Merge "Install auto-generrate overlay packages even when not included in whitelist" into rvc-dev 2020-06-10 04:23:30 +00:00
TreeHugger Robot
5523cc5b9e Merge "Move car bugreport app perms to framework." into rvc-dev am: 94bedc9aec
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/11784244

Change-Id: I78af05f8237a504e9072d4540e11711b245cfa48
2020-06-09 01:22:05 +00:00
Yan Zhu
31b01e4bc5 Install auto-generrate overlay packages even when not included in whitelist
Detect auto-generated overlay packages according to the suffix
(.auto_generated_rro_vendor_ OR .auto_generated_rro_product_)

Bug: 156668533
Bug: 140120696
Test: logcat: set DEBUG=true
adb logcat UserManagerService | grep overlay
atest
FrameworksServicesTests:com.android.server.pm.UserSystemPackageInstallerTest
-c

Change-Id: I1835eb923bf2421b2e171be0ac0fa400b6fd38f7
2020-06-08 16:34:34 -07:00
Zhomart Mukhamejanov
9fd6408edd Move car bugreport app perms to framework.
Change-Id: I5e541138c35cdf67d18ce5475221baeb3e7faef4
Test: emulator
Bug: 158151004
2020-06-07 18:04:19 -07:00
TreeHugger Robot
99664b235a Merge "Adding incremental related peremissions to Shell" into rvc-dev am: d1f5bf1f93
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/11722415

Change-Id: Ia47f5557acc54572dbae5fd0dc215015884e7283
2020-06-04 22:36:33 +00:00
Dimuthu Gamage
8589197fb5 Adding incremental related peremissions to Shell
This is expected to be used with adoptShellPermission in the Incremental
CTS tests.

Test: atest android.content.pm.cts.PackageManagerShellCommandTest
(There will be future tests relying on this)

Bug: 158024822
Change-Id: I46674498783c5323668ff775c76ff31a304aeadb
2020-06-04 17:04:44 +00:00
Sung Min Lee
0bb87d4503 Merge "Add CAPTURE_AUDIO_OUTPUT permission required for GTS test" into rvc-dev am: 5bafce8420
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/11712625

Change-Id: Id0c25e0e665d740e7f7d768b64fafc17a2ffddc0
2020-06-04 01:22:00 +00:00
Sung Min Lee
5bafce8420 Merge "Add CAPTURE_AUDIO_OUTPUT permission required for GTS test" into rvc-dev 2020-06-04 01:07:27 +00:00
TreeHugger Robot
c4021be11b Merge "Add keylayout for Xbox controller over USB" into rvc-dev am: f7deec1444
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/11707675

Change-Id: Ie4964b47d41366b0dea3343babf1f655d436ebdf
2020-06-03 23:52:18 +00:00
TreeHugger Robot
f7deec1444 Merge "Add keylayout for Xbox controller over USB" into rvc-dev 2020-06-03 23:40:37 +00:00
Siarhei Vishniakou
4647f1866c Add keylayout for Xbox controller over USB
Without a custom layout, this controller has incorrect mappings for the
right stick and gas/break axes.
Add a custom layout to ensure all axes and keys are mapped properly.

Bug: 157852643
Test: connected controller to the phone and verified mappings using the
controllerTester app

Change-Id: I1f65fe973652e25fab5e6e29ab598eee54e33e06
2020-06-03 12:35:19 -07:00
Sung Min Lee
a90b1fcaca Add CAPTURE_AUDIO_OUTPUT permission required for GTS test
GtsDialerAudioTestCases require this privileged permission for testing in GTS.

Bug: 157243201
Test: run gts -m GtsDialerAudioTestCases
Change-Id: I32516e5dcf966b05cfb8ab4956a0cdb183298f2a
2020-06-02 21:24:59 -07:00
Mina Granic
9c50a0fd93 Merge "Whitelist READ_PRIVILEGED_PHONE_STATE permission needed by Build.getSerial()." into rvc-dev am: 3420744449
Change-Id: I2abef9f3ff3f447cc9438da976a1c9e41390294a
2020-05-29 16:50:20 +00:00
Mina Granic
3420744449 Merge "Whitelist READ_PRIVILEGED_PHONE_STATE permission needed by Build.getSerial()." into rvc-dev 2020-05-29 16:43:43 +00:00