The modules 'framework', 'framework-minus-apex', 'framework-all' contain
private symbols that shouldn't be accessible to Mainline modules.
Restrict the access by making the framework modules to be accessible
only to the platform (the non updatable part).
Bug: 145796956
Test: m
Merged-In: I08cb61a67aef88ffe04ef52670144e1cbeff3cf9
Change-Id: I08cb61a67aef88ffe04ef52670144e1cbeff3cf9
FileDescriptor type in AIDL was translated into const unique_fd& in C++.
Now, it is unique_fd, i.e. passed by value, to make it easier to keep it
beyond the scope of the call.
Bug: 144943748
Test: m
Exempt-From-Owner-Approval: cherry-pick from internal
Merged-In: I2b87761401361f9cf96cdda070f26e70a5c6c935
(cherry picked from commit b8ba23418a)
Change-Id: I2b87761401361f9cf96cdda070f26e70a5c6c935
Since tethering is moved from systemServer to networkStack
process, it would lose privileged capability. Grant privileged
permissions for tethering individually. Grant MANAGE_USB to control
usb rndis function. Grant MODIFY_PHONE_STATE to know whether DUN
is required. Grant READ_NETWORK_USAGE_HISTORY to update tethering
usage. Grant UPDATE_APP_OPS_STATS to check WRITE_SETTINGS permission.
Bug: 144320246
Test: -build, flash, boot
-atest TetheringTests
Change-Id: Id6e71b58e027d6ba90551084367ef881652c2555
Tidy up changes for TimeZoneDetectorStrategy that were noticed while
debugging / making changes to TimeDetectorStrategyImpl.
Bug: 140712361
Test: manual / treehugger
Change-Id: I17a5d91f6864d702599834058694ae3de53173d0
The annotation processor is being modified to produce an intermediate
output that will then be processed to produce the config that ends up on
device. As such, using XmlWriter in frameworks test code no longer makes
sense.
Instead, hard-code XML config in the test to break this problematic
dependency.
Test: atest CompatConfigTest
Change-Id: I371ba32bd83d6a84de94d594169dbb5c63f3d9be
Merged-In: I371ba32bd83d6a84de94d594169dbb5c63f3d9be
Add an additional loading path which is used for libs permission
xml providing from Cronet apex module.
Bug: 145474221
Bug: 139397529
Test: build
Test: manual test with Cronet
Change-Id: I103539a45fe9182f84a79bfe45a6172d94068690
Merged-In: I02541eb2d4808d69ab8cb2d6a48cf8aaa39c86dc
* changes:
IKE Session API changes in setting CA cert and retrieving vendor ID
Child Session API changes in configuring and retrieving internal address
Platform VPN profiles keyed by apps must use a different key prefix to
prevent the Settings app from seeing them (and thus exposing potentially
sensitive credential information). Thus, the profiles will be
partitioned as follows:
Custom (Settings-app) based profiles continues using VPN_* prefix
App provisioned profiles will use the new PLATFORM_VPN_* prefix
Bug: 144245359
Test: Compiles, FrameworksNetTests passing
Change-Id: If8762e468c6cbbeb80738f14b066ebbad5cc665f
* changes:
MediaSessionManager: Split abstract class Callback into interfaces
MediaSessionManager: Use Executor instead of Handler
Allow to register multiple callbacks in MediaSessionManager
This commit:
- makes serverCaCert @Nullable
- adds interface to retrieve vendor ID of the remote server
Bug: 145276978
Bug: 146168441
Test: atest FrameworksIkeTests(all passed)
Test: make update-api && make
Change-Id: If55a0a70c99a98287933a6d134413ab1329ff402
This commit:
- creates separate methods for requesting IPv4 and IPv6 internal
address
- removes method to request internal subnet
- removes methods to request specific DNS and DHCP server
- uses IpPrefix to represent subnet
Bug: 145453636
Bug: 145454043
Bug: 145451419
Bug: 145454818
Test: atest FrameworksIkeTests(all passed)
Test: make update-api && make
Change-Id: Ic3fdccc12e7f2c361637e004e34b27e09d7900a0
