32e80d7588
Typical apps are restricted so they can only view shared storage belonging to the user they're running as. However, a handful of system components need access to shared storage across all users, such as DefaultContainerService and SystemUI. Since WRITE_MEDIA_STORAGE already offers this functionality by bypassing any FUSE emulation, reuse it to grant the "sdcard_rw" GID which is no longer handed out to third-party apps. Then we change the FUSE daemon to allow the "sdcard_rw" GID to see shared storage of all users. Bug: 19995822 Change-Id: I504c2a179ba74f142ed0d32da5baa69f4212cd82
23 lines
1.1 KiB
XML
23 lines
1.1 KiB
XML
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
|
|
package="com.android.defcontainer" coreApp="true">
|
|
<uses-permission android:name="android.permission.ASEC_ACCESS"/>
|
|
<uses-permission android:name="android.permission.ASEC_CREATE"/>
|
|
<uses-permission android:name="android.permission.ASEC_DESTROY"/>
|
|
<uses-permission android:name="android.permission.ASEC_MOUNT_UNMOUNT"/>
|
|
<uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" />
|
|
<!-- Used to improve MeasureUtils performance on emulated storage, and to
|
|
view storage for all users -->
|
|
<uses-permission android:name="android.permission.WRITE_MEDIA_STORAGE" />
|
|
<uses-permission android:name="android.permission.ACCESS_CACHE_FILESYSTEM" />
|
|
|
|
<application android:label="@string/service_name"
|
|
android:allowBackup="false">
|
|
|
|
<service android:name=".DefaultContainerService"
|
|
android:enabled="true"
|
|
android:exported="true"
|
|
android:permission="android.permission.COPY_PROTECTED_DATA"/>
|
|
</application>
|
|
|
|
</manifest>
|