Merge "Ensure trust agents are only provided by platform packages" into lmp-preview-dev

 * A service that notifies the system about whether it believes the environment of the device

 * to be trusted.

 *

 * <p>Trust agents may only be provided by the platform.</p>

 *

 * <p>To extend this class, you must declare the service in your manifest file with

 * the {@link android.Manifest.permission#BIND_TRUST_AGENT} permission

 * and include an intent filter with the {@link #SERVICE_INTERFACE} action. For example:</p>

                android:label="@string/permlab_trust_listener"

                android:description="@string/permdesc_trust_listener" />

    <!-- Allows an application to provide a trust agent.

         @hide For security reasons, this is a platform-only permission. -->

    <permission android:name="android.permission.PROVIDE_TRUST_AGENT"

                android:protectionLevel="signatureOrSystem"

                android:label="@string/permlab_provide_trust_agent"

                android:description="@string/permdesc_provide_trust_agent" />

    <!-- Must be required by an {@link

         android.service.trust.TrustAgentService},

         to ensure that only the system can bind to it. -->

    <!-- Description of an application permission that lets it listen to trust state changes. -->

    <string name="permdesc_trust_listener">Allows an application to listen for changes in trust state.</string>

    <!-- Title of an application permission that lets it provide a trust agent. -->

    <string name="permlab_provide_trust_agent">Provide a trust agent.</string>

    <!-- Description of an application permission that lets it provide a trust agent. -->

    <string name="permdesc_provide_trust_agent">Allows an application to provide a trust agent.</string>

    <!-- Title of an application permission that lets it bind to a trust agent service. -->

    <string name="permlab_bind_trust_agent_service">Bind to a trust agent service</string>

    <!-- Description of an application permission that lets it bind to a trust agent service. -->

LOCAL_PACKAGE_NAME := SampleTrustAgent

# Remove these to verify permission checks are working correctly

#LOCAL_CERTIFICATE := platform

#LOCAL_PRIVILEGED_MODULE := true

# Remove this to verify permission checks are working correctly

LOCAL_CERTIFICATE := platform

LOCAL_MODULE_TAGS := tests

    package="com.android.trustagent.test">

    <uses-sdk android:minSdkVersion="10" android:targetSdkVersion="17"/>

    <uses-permission android:name="android.permission.CONTROL_KEYGUARD" />

    <uses-permission android:name="android.permission.PROVIDE_TRUST_AGENT" />

    <application android:label="@string/app_name">

      <service

          android:name=".SampleTrustAgent"