From 95b8fa97ba80e3996d3ec488d21a5ebc569cdc31 Mon Sep 17 00:00:00 2001
From: Arne Coucheron <arco68@gmail.com>
Date: Wed, 18 Dec 2019 06:34:24 +0100
Subject: [PATCH] default-permissions: Grant default permissions to
 com.android.exchange

Change-Id: I9dfcecde0e662b9e481696b661e16ac7e131a75c
---
 config/common.mk                              |  4 ++
 .../lineage-default-permissions.xml           | 39 +++++++++++++++++++
 2 files changed, 43 insertions(+)
 create mode 100644 config/permissions/lineage-default-permissions.xml

diff --git a/config/common.mk b/config/common.mk
index a8818a3e..7c8809f4 100644
--- a/config/common.mk
+++ b/config/common.mk
@@ -87,6 +87,10 @@ PRODUCT_COPY_FILES += \
 PRODUCT_COPY_FILES += \
     vendor/lineage/config/permissions/lineage-power-whitelist.xml:$(TARGET_COPY_OUT_SYSTEM)/etc/sysconfig/lineage-power-whitelist.xml
 
+# Pre-granted permissions
+PRODUCT_COPY_FILES += \
+    vendor/lineage/config/permissions/lineage-default-permissions.xml:$(TARGET_COPY_OUT_PRODUCT)/etc/default-permissions/lineage-default-permissions.xml
+
 # Include AOSP audio files
 include vendor/lineage/config/aosp_audio.mk
 
diff --git a/config/permissions/lineage-default-permissions.xml b/config/permissions/lineage-default-permissions.xml
new file mode 100644
index 00000000..00b48a1f
--- /dev/null
+++ b/config/permissions/lineage-default-permissions.xml
@@ -0,0 +1,39 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+<!-- Copyright (C) 2019 The LineageOS Project
+
+     Licensed under the Apache License, Version 2.0 (the "License");
+     you may not use this file except in compliance with the License.
+     You may obtain a copy of the License at
+
+          http://www.apache.org/licenses/LICENSE-2.0
+
+     Unless required by applicable law or agreed to in writing, software
+     distributed under the License is distributed on an "AS IS" BASIS,
+     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+     See the License for the specific language governing permissions and
+     limitations under the License.
+-->
+
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+
+<exceptions>
+    <exception package="com.android.exchange">
+        <permission name="android.permission.WRITE_EXTERNAL_STORAGE" fixed="false"/>
+        <permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
+        <permission name="com.android.email.permission.READ_ATTACHMENT" fixed="false"/>
+    </exception>
+</exceptions>