Commit Graph

829 Commits

Author SHA1 Message Date
Paul Duffin
2a9cd14900 Merge "Conditionally remove android.test.base from bootclasspath" 2018-01-30 11:20:50 +00:00
Alison Cichowlas
76f0ccb5f1 Revert "Security model for moving sharesheet to systemui"
This reverts commit 88f3d4dbe1.

Bug: 72554856
Test: repro instructions in bug
2018-01-29 16:34:33 -05:00
Paul Duffin
a3b692113c Conditionally remove android.test.base from bootclasspath
This makes the runtime handling of the android.test.base library
conditional based on a build flag REMOVE_ATB_FROM_BCP.

When REMOVE_ATB_FROM_BCP=true:
* The framework-atb-backward-compatibility is added to the
  bootclasspath instead of android.test.base.
* Any APK that targets pre-P (or has a dependency on android.test.runner)
  has android.test.base added to their library list.

Otherwise:
* The android.test.base library is added to the bootclasspath.
* Any APK that explicitly specifies that it depends on the
  android.test.base library has the library removed as the classes
  are available at runtime.

Added android.test.base to platform libraries so it can be used when
not on the bootclasspath.

Tested both cases by building with or without the build flag, flashing,
setting up, adding an account, adding a trusted place.

Also, tested that all combinations of REMOVE_ATB_FROM_BCP and
REMOVE_OAHL_FROM_BCP work.

adb install -r -g out/target/product/marlin/testcases/FrameworksCoreTests/FrameworksCoreTests.apk
adb shell am instrument -w -e class android.content.pm.PackageBackwardCompatibilityTest,android.content.pm.AndroidTestRunnerSplitUpdaterTest,android.content.pm.OrgApacheHttpLegacyUpdaterTest,android.content.pm.RemoveUnnecessaryOrgApacheHttpLegacyLibraryTest,android.content.pm.RemoveUnnecessaryAndroidTestBaseLibraryTest,android.content.pm.AndroidTestBaseUpdaterTest com.android.frameworks.coretests/android.support.test.runner.AndroidJUnitRunner

Bug: 30188076
Test: as above
Change-Id: I4b9d8a5bed6787cd334c2b13a458bbc0efc3f3b6
2018-01-29 11:48:44 +00:00
Selim Cinek
2627d72e61 Launching Notification animations inline
Using the new control mechanism introduced in order
to coordinate notification launches and smoothly
transform the notification into the launching window.

Bug: 69168591
Test: add notification, launch it
Change-Id: Ib2d671c65f276ec596a2f07edf64d65bf27a2882
2018-01-24 23:29:28 +00:00
Geoffrey Pitsch
d997d191ed Merge "Security model for moving sharesheet to systemui" 2018-01-24 17:33:59 +00:00
Yuichiro Hanada
c1415f3e3c Add new refresh key constant.
Bug: 64149858
Bug: 64662317
Test: Builds and manual tests with Chromebook.

Change-Id: I865d657ee7d78b5e45f642e786d26a65a14f49e1
2018-01-24 09:11:49 +09:00
Geoffrey Pitsch
88f3d4dbe1 Security model for moving sharesheet to systemui
ResolverActivity (still in frameworks) now requests a "permission token"
that it hands to a stubbed system ui activity ChooserActivity.

This permission token allows an app (SysUI) with the signed permission
"START_ACTIVITY_AS_CALLER" to call
ActivityManagerService#startActivityAsCaller. Permission tokens are a
one-time use, limited-time offer.

Test: runtest systemui && manual testing
Bug: 69850752
Change-Id: I3600e1a8ff9eea7397f5f59853423c79b6401f98
2018-01-23 10:23:55 -05:00
Yi Jin
974e56f141 Enable incidentd.rc also add dump and usage_stats permission to statsd
so it bypass incidentd's permission check

Test: manual
Change-Id: I65b501fe46f66f9f62fedfcfc75aa17f29fc1076
2018-01-22 14:41:19 -08:00
Svet Ganov
82f09bcf93 No camera for idle uids - framework
If a UID is idle (being in the background for more than
cartain amount of time) it should not be able to use the
camera. If the UID becomes idle we generate an eror and
close the cameras for this UID. If an app in an idle UID
tries to use the camera we immediately generate an error.
Since apps already should handle these errors it is safe
to apply this policy to all apps to protect user privacy.

Test: Pass - cts-tradefed run cts -m CtsCameraTestCases
      Added - CameraTest#testCameraAccessForIdleUid

Change-Id: If6ad1662f2af6592b6aca1aeee4bd481389b5e00
2018-01-21 02:55:49 -08:00
Yi Jin
d1238e7b50 Merge "Fix permissions problems of incidentd." 2018-01-19 23:27:32 +00:00
TreeHugger Robot
1d2ddf8ede Merge "Put contacts/calendar providers in except-idle whitelist" 2018-01-18 17:41:35 +00:00
Yi Jin
4bab3a191a Fix permissions problems of incidentd.
Test: manual
Change-Id: I4ee0d1f2349ee1a25a422cabf1b5b87c612710d2
2018-01-17 19:16:49 -08:00
Makoto Onuki
fb26332380 Put contacts/calendar providers in except-idle whitelist
Bug: 71911050
Test: Boot and dumpsys deviceidle
Change-Id: I544b660583c2752dadec920305b33b5a8557ce61
2018-01-17 13:23:50 -08:00
Jorim Jaggi
33a701a55c Remote animations (app-controlled animations)
Adds the ability for another app to control an entire app
transition. It does so by creating an ActivityOptions object that
contains a RemoteAnimationAdapter object that describes how the
animation should be run: Along of some meta-data, this object
contains a callback that gets invoked from WM when the transition
is ready to be started.

Window manager supplies a list of RemoteAnimationApps into the
callback. Each app contains information about the app as well as
the animation leash. The controlling app can modify the leash like
any other surface, including the possibility to synchronize
updating the leash's surface properties with a frame to be drawn
using the Transaction.deferUntil API.

When the animation is done, the app can invoke the finished
callback to get WM out of the animating state, which will also
clean up any closing apps.

We use a timeout of 2000ms such that a buggy controlling app can
not break window manager forever (duration subject to change).

Test: go/wm-smoke
Test: RemoteAnimationControllerTest

Bug: 64674361
Change-Id: I34e0c9a91b28badebac74896f95c6390f1b947ab
2018-01-17 15:12:19 +01:00
Yao Chen
0f2171041e make statsd run in its own uid
+ Assign permission android.permission.STATSCOMPANION to statsd
+ Fixes in StatsCompanionService to allow statsd to get uid mapping

Test: manual
Change-Id: I3e6ca79eefed7f93a4588578c156321c4c278fd3
2018-01-11 11:58:10 -08:00
Jeff Sharkey
4a539441d8 Start using new reserved disk GID.
We recently created a new GID that can be granted to critical system
processes, so that the system is usable enough for the user to free
up disk space used by abusive apps.

Define a permission for the GID so we can grant it to system apps,
and add the GID to core apps needed for system stability.  (The list
was mostly derived from filling a disk and seeing what caused the
device to fall over.)

Test: builds, boots
Bug: 62024591
Change-Id: Icdf471ed3bed4eeb8c01f1d39f0b40c1ea098396
2018-01-07 19:40:29 -07:00
TreeHugger Robot
b743b067e5 Merge "Don't record audio if UID is idle - core framework" 2017-12-26 03:39:42 +00:00
Zhi An Ng
897719ef13 Merge "Add default alarm back into AudioPackage" 2017-12-22 03:34:17 +00:00
Ng Zhi An
3b4f22178a Add default alarm back into AudioPackage
Bug: 70788062
Test: open alarm clock and see default alarm
Change-Id: Ic2ca2638015e4bc114461c3b8b0f4fe7dd07c666
2017-12-21 17:02:02 -08:00
Roshan Pius
f76dc03d6f Settings: Add LOCAL_MAC_ADDRESS permission
This permission is needed for displaying the WIFI MAC address.

Bug: 70638295
Test: Wifi network details page shows the wifi MAC address.
Change-Id: Iaa595d520abf36ba55cfa9e888b169baae6ea1fb
2017-12-20 14:09:20 -08:00
Michael Wright
4cb42f3894 There is only one Generic.kl.
Generic.kl is a special file that defines the default mappings for all
devices. There can only be one and it cannot change regardless of the
product area the device is in. This should *never* have been checked in,
especially not without someone on the input team looking at it.

Also, add support for the POUND and STAR keys, which is why it was
forked in the first place.

Test: N/A
Change-Id: I894cbefe20fc77d827dc500daa3a380f252eb8b6
2017-12-05 18:45:41 +00:00
Fan Zhang
c3a6ed25a6 Whitelist SettingsIntelligence to manage fingerprint
This permission used to be Settings. With new settings suggestion
system we need the permission in the unbundled app (SettingsIntelligence)

Bug: 69427300
Test: rebuild
Change-Id: Iaf8dd3281f4cdf5460dd544f50391ca241716d37
2017-11-30 15:50:54 -08:00
Svet Ganov
14ab967edd Don't record audio if UID is idle - core framework
If a UID is in an idle state we don't allow recording to protect
user's privacy. If the UID is in an idle state we allow recording
but report empty data (all zeros in the byte array) and once
the process goes in an active state we report the real mic data.
This avoids the race between the app being notified aboout its
lifecycle and the audio system being notified about the state
of a UID.

Test: Added - AudioRecordTest#testRecordNoDataForIdleUids
      Passing - cts-tradefed run cts-dev -m CtsMediaTestCases
                        -t android.media.cts.AudioRecordTest

bug:63938985
Change-Id: I15264c5c4b47813ca60280bce30b22b8b1f87eab
2017-11-22 20:59:14 -08:00
TreeHugger Robot
1e70100877 Merge "Add OWNERS to system_server services." 2017-11-21 21:28:03 +00:00
Michael Wright
9fc31ee1f8 Add OWNERS to system_server services.
Test: N/A
Change-Id: I60174fcbbf2a061df2961239ec1b45df2e6b20ed
2017-11-21 18:35:16 +00:00
TreeHugger Robot
8cfd3d03de Merge "Use serif fonts for serif fallback." 2017-11-21 01:40:34 +00:00
Seigo Nonaka
99a7b60e51 Use serif fonts for serif fallback.
Bug: 31491668
Test: m -j1024 fontchain_lint
Change-Id: Ic1d356aa684f2284b0b0fc8de5d0e36380eb44bc
2017-11-20 14:46:31 -08:00
Colin Cross
4db5cb7ba3 Merge "Add output file and dependencies to fontchain_lint" am: b0a3e9dc83 am: 4db8be0bb3
am: c181b06021

Change-Id: Id001092f532e66c896dfb7baf83aa4e810d2cd6e
2017-11-20 20:54:14 +00:00
Colin Cross
4db8be0bb3 Merge "Add output file and dependencies to fontchain_lint"
am: b0a3e9dc83

Change-Id: I835565031398b97c995260a0bfc9c8f1f50cef2e
2017-11-20 20:36:15 +00:00
Nan Zhang
24c9924797 Merge "Build fontchain_lint using python_binary_host" am: 7ecac139ea am: 7ade558ad2
am: 67695d3aff

Change-Id: I850304f79c1c35bfeb6951307b8ca2365da0330b
2017-11-17 22:30:37 +00:00
Nan Zhang
7ade558ad2 Merge "Build fontchain_lint using python_binary_host"
am: 7ecac139ea

Change-Id: I4fef971c8fc8837f73644667988ddc3e7f4305ec
2017-11-17 22:12:58 +00:00
Colin Cross
f5de525ee3 Add output file and dependencies to fontchain_lint
Keep fontchain_lint from rerunning on every make checkbuild by
making it touch an output file and giving it dependencies on
anything that should cause it to rerun.

Bug: 27727331
Test: m checkbuild
Change-Id: I0d8a41b308cac04844e27beb51c12dbf46cb1a4a
2017-11-17 18:11:09 +00:00
Nan Zhang
2db709de30 Build fontchain_lint using python_binary_host
Test: out/host/linux-x86/bin/fontchain_lint
out/target/product/generic/system true external/unicode
Bug: b/27727331

Change-Id: Ib9353d2338c3b939027069f49e3e847c65526581
2017-11-17 09:22:12 -08:00
Xin Li
220871a697 Merge commit '98e12851336b7db16e583f9afac63ecc97465980' from
oc-mr1-dev-plus-aosp-without-vendor into stage-aosp-master.

Change-Id: Ia7b8da4a00d215160e4a4fa40f6044208d1297b7
Merged-In: I19846d2a3ee27aecbae2367a74ee49082eea154d
2017-11-14 12:31:11 -08:00
Fan Zhang
b0e44af1d4 Whitelist SettingsIntelligence to read search indexables.
This permission used to be Settings. With moving ranking to
SettingsIntelligence we need to move permission whitelisting as well

In a follow up we will remove the permission from Settings list.

Bug: 65065268
Test: flash with a clean build
Change-Id: I81fafe0b390df5990989da81629e4c6d67f1480a
2017-11-09 09:48:32 -08:00
TreeHugger Robot
b119f85d34 Merge "Custom message in AoD" 2017-11-07 17:24:27 +00:00
Amith Yamasani
4a76a3f32a Merge "Make CHANGE_APP_IDLE_STATE a system API" 2017-11-03 15:34:25 +00:00
Amith Yamasani
4470ab9c33 Make CHANGE_APP_IDLE_STATE a system API
Allows a privileged app to set standby bucket states for apps.

Bug: 63527785
Test: adb shell am set-standby-bucket com.example.foo 0
Change-Id: I613f8872ae816e39b167aad1c289187362aa6094
2017-11-02 21:12:18 -07:00
Siarhei Vishniakou
46429ecd93 Add keylayout for xbox controller over bt
When connected over bluetooth, the device
registers with vendorId=045e, productId=02e0.
Add the keylayout for this here.

Bug: 37115804
Bug: 37115820
Test: connect the controller, use
'getevent' to keep track of the generated events

Change-Id: Ia4b80e54a547e5d6716ff0f83b068e4cc87dfbb0
2017-11-02 19:45:31 -07:00
Lucas Dupin
957e50ccdf Custom message in AoD
Optional message that lives under the clock and also
in AoD. Implemented using a slice.

Test: launch sysui, look at the date in AoD
Test: runtest -x packages/SystemUI/tests/src/com/android/systemui/keyguard/KeyguardSliceProviderTest.java
Change-Id: I9dbc827bd48c6a3d1b25b0a481ffaecc0dd37f25
2017-11-02 18:03:40 -07:00
Jeff Sharkey
d877f14834 Merge "Define OWNERS for permission grant changes." am: 8d2a5bd42a am: 4ab5a3f8cd
am: e2ef47f1bd

Change-Id: I32c2ddf0f6c5f21651750579e045198438045d12
2017-10-30 03:42:16 +00:00
Jeff Sharkey
e2ef47f1bd Merge "Define OWNERS for permission grant changes." am: 8d2a5bd42a
am: 4ab5a3f8cd

Change-Id: Ie27d6ee76a7ab6585881d5f83c197ab99f7d26f4
2017-10-30 03:26:54 +00:00
Jeff Sharkey
e40d8409bd Define OWNERS for permission grant changes.
Permission grant changes need explicit approval from product and
SWE leadership to ensure that CTS/CDD requirements are met.

Change-Id: I0a84712b5c5b4e11e72bf5921b72ef6a47e7fdc1
2017-10-29 19:32:02 -06:00
Fyodor Kupolov
7e7c48ae9c Updated the whitelist to match the state of platform apps
Some apps in frameworks/base are only included in AOSP targets and
discrepancies weren't discovered by CI tests.

Test: manual
Bug: 67718369
Change-Id: If88aa90f4dcab51b6e11562cadbe003948b6c149
2017-10-20 14:42:24 -07:00
Kang Li
21ec85f12a Update package name for ExtServices to whitelist permissions.
Test: shared images in Camera to verify this.

Change-Id: Iebbe7405afa7de5246e02d7dbdb84fb0f319db5f
2017-10-19 15:02:11 -07:00
Fyodor Kupolov
c56106a13e Crash if not all privileged permissions are whitelisted
Test: reboot device - no crashes
Test: Ran privapp_permissions.py for fugu/marlin/taimen
Bug: 64693550
Change-Id: I9522ccaa75858b9a3d153c95c529eff70cd13994
2017-10-09 14:27:47 -07:00
Shubang
8a56855ec4 Merge "Add permissions for LiveTv (AOSP)" into oc-mr1-dev am: 4dc2938418
am: e13b57b3b9

Change-Id: I91925da75262c8980d27e3e33f5822aa0b4495b4
2017-10-07 01:22:28 +00:00
Shubang
d06de348b6 Add permissions for LiveTv (AOSP)
It crashes without the permissions

Bug: 67474061
Test: make; flashall; install and open LiveTv;
Change-Id: Ifec8bfb4ee93ac6b9189a9c337fdd2ef9ec34537
2017-10-06 14:06:26 -07:00
Sunny Goyal
158c98cee1 Merge "Fixing Launcher package name for privilege permission" into oc-mr1-dev am: 22f7ae8d07
am: 1c56c23331

Change-Id: I00aca55b29ff96f5db393b1130727d6dec5e612a
2017-09-29 23:14:54 +00:00
Sunny Goyal
71d4bcc053 Fixing Launcher package name for privilege permission
Test: None
Bug: 67017745
Change-Id: I37b903c0c771e54a68bf4dac42a0ce39641b7933
2017-09-29 20:08:15 +00:00