Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0debf554 authored by Michael Groover's avatar Michael Groover
Browse files

Add privileged flag to SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE 

The privileged flag is being added to the
SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE permission to allow priv-apps
to listen for changes to the device lock state from KeyguardManager.

Bug: 380120712
Flag: android.security.subscribe_to_keyguard_locked_state_perm_priv_flag
Ignore-AOSP-First: Flag req TBD
Test: Manually verified priv-app was granted permission
Change-Id: I1a43eeaafea5192b09bc2b6b1dd5f6fd45ab8b22
parent 24630204

core/java/android/security/flags.aconfig

+8 −0
Original line number Diff line number Diff line
@@ -138,3 +138,11 @@ flag { 
    bug: "373422357"

    is_exported: true

}



flag {

    name: "subscribe_to_keyguard_locked_state_perm_priv_flag"

    namespace: "psap_ai"

    description: "Feature flag to add the privileged flag to the SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE permission"

    bug: "380120712"

    is_fixed_read_only: true

}
 
 No newline at end of file

core/res/AndroidManifest.xml

+13 −3
Original line number Diff line number Diff line
@@ -5639,11 +5639,21 @@ 


    <!-- Allows an application to subscribe to device locked and keyguard locked (i.e., showing)

        state.

         <p>Protection level: signature|role

         <p>Intended for use by ROLE_ASSISTANT and signature apps only.

         <p>Protection level: signature|module|role

         <p>Intended for use by ROLE_ASSISTANT, VDM, and signature apps only.

    -->

    <permission android:name="android.permission.SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE"

                android:protectionLevel="signature|module|role"

                android:featureFlag="!android.security.subscribe_to_keyguard_locked_state_perm_priv_flag"/>



    <!-- Allows an application to subscribe to device locked and keyguard locked (i.e., showing)

        state.

         <p>Protection level: signature|privileged|module|role

         <p>Intended for use by ROLE_ASSISTANT, VDM, and signature / privileged apps only.

    -->

    <permission android:name="android.permission.SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE"

                android:protectionLevel="signature|module|role"/>

                android:protectionLevel="signature|privileged|module|role"

                android:featureFlag="android.security.subscribe_to_keyguard_locked_state_perm_priv_flag"/>



    <!-- Must be required by a {@link android.service.autofill.AutofillService},

         to ensure that only the system can bind to it.