Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0cb06c72 authored by Jiaming Liu's avatar Jiaming Liu
Browse files

Add EMBED_ANY_APP_IN_UNTRUSTED_MODE permission 

Bug: 289199433
Test: atest PermissionPolicyTest
Change-Id: I42a0a3b37f1775fd175d0d2430b8db1149fd37a3
parent 2bb24d1c

core/api/system-current.txt

+1 −0
Original line number Diff line number Diff line
@@ -129,6 +129,7 @@ package android { 
    field public static final String DISABLE_SYSTEM_SOUND_EFFECTS = "android.permission.DISABLE_SYSTEM_SOUND_EFFECTS";

    field public static final String DISPATCH_PROVISIONING_MESSAGE = "android.permission.DISPATCH_PROVISIONING_MESSAGE";

    field public static final String DOMAIN_VERIFICATION_AGENT = "android.permission.DOMAIN_VERIFICATION_AGENT";

    field @FlaggedApi("com.android.window.flags.untrusted_embedding_any_app_permission") public static final String EMBED_ANY_APP_IN_UNTRUSTED_MODE = "android.permission.EMBED_ANY_APP_IN_UNTRUSTED_MODE";

    field @FlaggedApi("android.content.pm.emergency_install_permission") public static final String EMERGENCY_INSTALL_PACKAGES = "android.permission.EMERGENCY_INSTALL_PACKAGES";

    field public static final String ENTER_CAR_MODE_PRIORITIZED = "android.permission.ENTER_CAR_MODE_PRIORITIZED";

    field public static final String EXEMPT_FROM_AUDIO_RECORD_RESTRICTIONS = "android.permission.EXEMPT_FROM_AUDIO_RECORD_RESTRICTIONS";

core/java/android/window/flags/windowing_sdk.aconfig

+8 −0
Original line number Diff line number Diff line
@@ -40,6 +40,14 @@ flag { 
    bug: "293654166"

}



flag {

    namespace: "windowing_sdk"

    name: "untrusted_embedding_any_app_permission"

    description: "Feature flag to enable the permission to embed any app in untrusted mode."

    bug: "289199433"

    is_fixed_read_only: true

}



flag {

    namespace: "windowing_sdk"

    name: "activity_window_info_flag"

core/res/AndroidManifest.xml

+12 −0
Original line number Diff line number Diff line
@@ -3828,6 +3828,18 @@ 
    <permission android:name="android.permission.ACTIVITY_EMBEDDING"

                android:protectionLevel="signature|privileged" />



    <!-- Allows an application to embed any other apps in untrusted embedding mode without the need

         for the embedded app to consent.

         <p>For now, this permission is only granted to the Assistant application selected by

         the user.

         {@see https://developer.android.com/guide/topics/large-screens/activity-embedding#trust_model}

         @SystemApi

         @FlaggedApi("com.android.window.flags.untrusted_embedding_any_app_permission")

         @hide

        -->

    <permission android:name="android.permission.EMBED_ANY_APP_IN_UNTRUSTED_MODE"

                android:protectionLevel="internal|role" />



    <!-- Allows an application to start any activity, regardless of permission

         protection or exported state.

         @hide -->