Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5ce5acd1 authored by Jing Ji's avatar Jing Ji
Browse files

Allow apps to create FGS with type mediaProjection if the user granted 

...the media projection permission from the system dialog
(i.e. MediaProjectionPermissionActivity).

The updated flow of starting a media projection will be:

1. Declares a FGS with type mediaProjection
2. startActivityForResult(MediaProjectionManager#createScreenCaptureIntent())
3. [NEW] Start the FGS on getting the result from step #2
4. MediaProjectionManager#getMediaProjection()
5. MediaProjection#createVirtualDisplay()

Also, bring back the permission enforcement for mediaProjection FGS
which was removed in I1efa698207182043cfab3d5503829da8eec075ab.

Additional, this CL added the feature flags for the permission
enforcement for each FGS type.

Bug: 267740338
Bug: 246792057
Test: atest CtsMediaProjectionTestCases
Test: atest CtsWindowManagerDeviceTestCases
Test: atest CtsAppFgsTestCases
Change-Id: I1e5b58ddea232fecaaa5ed513276a62c72429a0b
Merged-In: I1e5b58ddea232fecaaa5ed513276a62c72429a0b
parent 18216d97

core/java/android/app/ActivityManagerInternal.java

+47 −0
Original line number Diff line number Diff line
@@ -18,6 +18,7 @@ package android.app; 


import static android.app.ActivityManager.StopUserOnSwitch;



import android.annotation.IntDef;

import android.annotation.NonNull;

import android.annotation.Nullable;

import android.annotation.PermissionMethod;
@@ -47,6 +48,8 @@ import android.util.Pair; 


import com.android.internal.os.TimeoutRecord;



import java.lang.annotation.Retention;

import java.lang.annotation.RetentionPolicy;

import java.util.ArrayList;

import java.util.List;

import java.util.Map;
@@ -991,4 +994,48 @@ public abstract class ActivityManagerInternal { 
     */

    public abstract void logFgsApiEnd(int apiType, int uid, int pid);



    /**

     * The list of the events about the {@link android.media.projection.IMediaProjection} itself.

     *

     * @hide

     */

    @Retention(RetentionPolicy.SOURCE)

    @IntDef({

        MEDIA_PROJECTION_TOKEN_EVENT_CREATED,

        MEDIA_PROJECTION_TOKEN_EVENT_DESTROYED,

    })

    public @interface MediaProjectionTokenEvent{};



    /**

     * An instance of {@link android.media.projection.IMediaProjection} has been created

     * by the system.

     *

     * @hide

     */

    public static final @MediaProjectionTokenEvent int MEDIA_PROJECTION_TOKEN_EVENT_CREATED = 0;



    /**

     * An instance of {@link android.media.projection.IMediaProjection} has been destroyed

     * by the system.

     *

     * @hide

     */

    public static final @MediaProjectionTokenEvent int MEDIA_PROJECTION_TOKEN_EVENT_DESTROYED = 1;



    /**

     * Called after the system created/destroyed a media projection for an app, if the user

     * has granted the permission to start a media projection from this app.

     *

     * <p>This API is specifically for the use case of enforcing the FGS type

     * {@code android.content.pm.ServiceInfo#FOREGROUND_SERVICE_TYPE_MEDIA_PROJECTION},

     * where the app who is starting this type of FGS must have been granted with the permission

     * to start the projection via the {@link android.media.projection.MediaProjection} APIs.

     *

     * @param uid The uid of the app which the system created/destroyed a media projection for.

     * @param projectionToken The {@link android.media.projection.IMediaProjection} token that

     *                        the system created/destroyed.

     * @param event The actual event happening to the given {@code projectionToken}.

     */

    public abstract void notifyMediaProjectionEvent(int uid, @NonNull IBinder projectionToken,

            @MediaProjectionTokenEvent int event);

}

core/java/android/app/ForegroundServiceTypePolicy.java

+237 −23
Original line number Diff line number Diff line
@@ -59,6 +59,9 @@ import android.hardware.usb.UsbManager; 
import android.os.RemoteException;

import android.os.ServiceManager;

import android.permission.PermissionCheckerManager;

import android.provider.DeviceConfig;

import android.text.TextUtils;

import android.util.ArrayMap;

import android.util.ArraySet;

import android.util.SparseArray;
@@ -146,6 +149,108 @@ public abstract class ForegroundServiceTypePolicy { 
    @Overridable

    public static final long FGS_TYPE_PERMISSION_CHANGE_ID = 254662522L;



    /**

     * The prefix for the feature flags of the permission enforcement.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX =

            "fgs_type_perm_enforcement_flag_";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_DATA_SYNC},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_DATA_SYNC =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "data_sync";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_MEDIA_PLAYBACK},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_MEDIA_PLAYBACK =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "media_playback";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_PHONE_CALL},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_PHONE_CALL =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "phone_call";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_LOCATION},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_LOCATION =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "location";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_CONNECTED_DEVICE},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_CONNECTED_DEVICE =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "connected_device";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_MEDIA_PROJECTION},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_MEDIA_PROJECTION =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "media_projection";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_CAMERA},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_CAMERA =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "camera";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_MICROPHONE},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_MICROPHONE =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "microphone";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_HEALTH},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_HEALTH =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "health";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_REMOTE_MESSAGING},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_REMOTE_MESSAGING =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "remote_messaging";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_SYSTEM_EXEMPTED},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_SYSTEM_EXEMPTED =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "system_exempted";



    /**

     * The feature flag of the permission enforcement for

     * {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_SPECIAL_USE},

     * in the namespace of {@link DeviceConfig#NAMESPACE_ACTIVITY_MANAGER}.

     */

    private static final String FGS_TYPE_PERM_ENFORCEMENT_FLAG_SPECIAL_USE =

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PREFIX + "special_use";



    /**

     * The policy for the {@link ServiceInfo#FOREGROUND_SERVICE_TYPE_MANIFEST}.

     *
@@ -156,8 +261,10 @@ public abstract class ForegroundServiceTypePolicy { 
            FOREGROUND_SERVICE_TYPE_MANIFEST,

            FGS_TYPE_NONE_DEPRECATION_CHANGE_ID,

            FGS_TYPE_NONE_DISABLED_CHANGE_ID,

            null,

            null

            null /* allOfPermissions */,

            null /* anyOfPermissions */,

            null /* permissionEnforcementFlag */,

            false /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -170,8 +277,10 @@ public abstract class ForegroundServiceTypePolicy { 
            FOREGROUND_SERVICE_TYPE_NONE,

            FGS_TYPE_NONE_DEPRECATION_CHANGE_ID,

            FGS_TYPE_NONE_DISABLED_CHANGE_ID,

            null,

            null

            null /* allOfPermissions */,

            null /* anyOfPermissions */,

            null /* permissionEnforcementFlag */,

            false /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -187,7 +296,9 @@ public abstract class ForegroundServiceTypePolicy { 
            new ForegroundServiceTypePermissions(new ForegroundServiceTypePermission[] {

                new RegularPermission(Manifest.permission.FOREGROUND_SERVICE_DATA_SYNC)

            }, true),

            null

            null /* anyOfPermissions */,

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_DATA_SYNC /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -203,7 +314,9 @@ public abstract class ForegroundServiceTypePolicy { 
            new ForegroundServiceTypePermissions(new ForegroundServiceTypePermission[] {

                new RegularPermission(Manifest.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK)

            }, true),

            null

            null /* anyOfPermissions */,

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_MEDIA_PLAYBACK /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -221,7 +334,9 @@ public abstract class ForegroundServiceTypePolicy { 
            }, true),

            new ForegroundServiceTypePermissions(new ForegroundServiceTypePermission[] {

                new RegularPermission(Manifest.permission.MANAGE_OWN_CALLS)

            }, false)

            }, false),

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_PHONE_CALL /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -240,7 +355,9 @@ public abstract class ForegroundServiceTypePolicy { 
            new ForegroundServiceTypePermissions(new ForegroundServiceTypePermission[] {

                new RegularPermission(Manifest.permission.ACCESS_COARSE_LOCATION),

                new RegularPermission(Manifest.permission.ACCESS_FINE_LOCATION),

            }, false)

            }, false),

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_LOCATION /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -268,7 +385,9 @@ public abstract class ForegroundServiceTypePolicy { 
                new RegularPermission(Manifest.permission.UWB_RANGING),

                new UsbDevicePermission(),

                new UsbAccessoryPermission(),

            }, false)

            }, false),

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_CONNECTED_DEVICE /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -284,7 +403,12 @@ public abstract class ForegroundServiceTypePolicy { 
            new ForegroundServiceTypePermissions(new ForegroundServiceTypePermission[] {

                new RegularPermission(Manifest.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION)

            }, true),

            null

            new ForegroundServiceTypePermissions(new ForegroundServiceTypePermission[] {

                new RegularPermission(Manifest.permission.CAPTURE_VIDEO_OUTPUT),

                new AppOpPermission(AppOpsManager.OP_PROJECT_MEDIA)

            }, false),

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_MEDIA_PROJECTION /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -303,7 +427,9 @@ public abstract class ForegroundServiceTypePolicy { 
            new ForegroundServiceTypePermissions(new ForegroundServiceTypePermission[] {

                new RegularPermission(Manifest.permission.CAMERA),

                new RegularPermission(Manifest.permission.SYSTEM_CAMERA),

            }, false)

            }, false),

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_CAMERA /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -326,7 +452,9 @@ public abstract class ForegroundServiceTypePolicy { 
                new RegularPermission(Manifest.permission.CAPTURE_TUNER_AUDIO_INPUT),

                new RegularPermission(Manifest.permission.CAPTURE_VOICE_COMMUNICATION_OUTPUT),

                new RegularPermission(Manifest.permission.RECORD_AUDIO),

            }, false)

            }, false),

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_MICROPHONE /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -347,7 +475,9 @@ public abstract class ForegroundServiceTypePolicy { 
                new RegularPermission(Manifest.permission.BODY_SENSORS),

                new RegularPermission(Manifest.permission.BODY_SENSORS_WRIST_TEMPERATURE),

                new RegularPermission(Manifest.permission.HIGH_SAMPLING_RATE_SENSORS),

            }, false)

            }, false),

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_HEALTH /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -363,7 +493,9 @@ public abstract class ForegroundServiceTypePolicy { 
            new ForegroundServiceTypePermissions(new ForegroundServiceTypePermission[] {

                new RegularPermission(Manifest.permission.FOREGROUND_SERVICE_REMOTE_MESSAGING)

            }, true),

            null

            null /* anyOfPermissions */,

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_REMOTE_MESSAGING /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -383,7 +515,9 @@ public abstract class ForegroundServiceTypePolicy { 
                new RegularPermission(Manifest.permission.SCHEDULE_EXACT_ALARM),

                new RegularPermission(Manifest.permission.USE_EXACT_ALARM),

                new AppOpPermission(AppOpsManager.OP_ACTIVATE_VPN),

            }, false)

            }, false),

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_SYSTEM_EXEMPTED /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -396,7 +530,10 @@ public abstract class ForegroundServiceTypePolicy { 
            FOREGROUND_SERVICE_TYPE_SHORT_SERVICE,

            ForegroundServiceTypePolicyInfo.INVALID_CHANGE_ID,

            ForegroundServiceTypePolicyInfo.INVALID_CHANGE_ID,

            null /* no type specific permissions */, null /* no type specific permissions */

            null /* allOfPermissions */,

            null /* anyOfPermissions */,

            null /* permissionEnforcementFlag */,

            false /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -412,7 +549,9 @@ public abstract class ForegroundServiceTypePolicy { 
            new ForegroundServiceTypePermissions(new ForegroundServiceTypePermission[] {

                new RegularPermission(Manifest.permission.FOREGROUND_SERVICE_FILE_MANAGEMENT)

            }, true),

            null

            null /* anyOfPermissions */,

            null /* permissionEnforcementFlag */,

            false /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -428,7 +567,9 @@ public abstract class ForegroundServiceTypePolicy { 
            new ForegroundServiceTypePermissions(new ForegroundServiceTypePermission[] {

                new RegularPermission(Manifest.permission.FOREGROUND_SERVICE_SPECIAL_USE)

            }, true),

            null

            null /* anyOfPermissions */,

            FGS_TYPE_PERM_ENFORCEMENT_FLAG_SPECIAL_USE /* permissionEnforcementFlag */,

            true /* permissionEnforcementFlagDefaultValue */

    );



    /**
@@ -512,6 +653,14 @@ public abstract class ForegroundServiceTypePolicy { 
            @NonNull String packageName, int callerUid, int callerPid, boolean allowWhileInUse,

            @NonNull ForegroundServiceTypePolicyInfo policy);



    /**

     * Run the given {@code policyFunctor} on the matching policy, if the flag is known

     * to the policy.

     *

     * @hide

     */

    public abstract void updatePermissionEnforcementFlagIfNecessary(@NonNull String flag);



    @GuardedBy("sLock")

    private static ForegroundServiceTypePolicy sDefaultForegroundServiceTypePolicy = null;
@@ -574,11 +723,31 @@ public abstract class ForegroundServiceTypePolicy { 
         */

        final @Nullable ForegroundServiceTypePermissions mAnyOfPermissions;



        /**

         * A permission enforcement flag, unlike the {@link #FGS_TYPE_PERMISSION_CHANGE_ID},

         * here it applies to all apps using this FGS type.

         */

        final @Nullable String mPermissionEnforcementFlag;



        /**

         * The default value to {@link #mPermissionEnforcementFlag}.

         */

        final boolean mPermissionEnforcementFlagDefaultValue;



        /**

         * A customized check for the permissions.

         */

        @Nullable ForegroundServiceTypePermission mCustomPermission;



        /**

         * The value of the permission enforcement flag, will be updated by the system.

         * If the value is {@code false}, the FGS permission check will be ignored.

         *

         * <p>This value could be updated via the DeviceConfig flag specified

         * in the {@link #mPermissionEnforcementFlag}.</p>

         */

        volatile boolean mPermissionEnforcementFlagValue;



        /**

         * Not a real change id, but a place holder.

         */
@@ -599,12 +768,17 @@ public abstract class ForegroundServiceTypePolicy { 
        public ForegroundServiceTypePolicyInfo(@ForegroundServiceType int type,

                long deprecationChangeId, long disabledChangeId,

                @Nullable ForegroundServiceTypePermissions allOfPermissions,

                @Nullable ForegroundServiceTypePermissions anyOfPermissions) {

                @Nullable ForegroundServiceTypePermissions anyOfPermissions,

                @Nullable String permissionEnforcementFlag,

                boolean permissionEnforcementFlagDefaultValue) {

            mType = type;

            mDeprecationChangeId = deprecationChangeId;

            mDisabledChangeId = disabledChangeId;

            mAllOfPermissions = allOfPermissions;

            mAnyOfPermissions = anyOfPermissions;

            mPermissionEnforcementFlag = permissionEnforcementFlag;

            mPermissionEnforcementFlagDefaultValue = permissionEnforcementFlagDefaultValue;

            mPermissionEnforcementFlagValue = permissionEnforcementFlagDefaultValue;

        }



        /**
@@ -650,6 +824,17 @@ public abstract class ForegroundServiceTypePolicy { 
            return sb;

        }



        private void updatePermissionEnforcementFlagIfNecessary(@NonNull String flagName) {

            if (mPermissionEnforcementFlag == null

                    || !TextUtils.equals(flagName, mPermissionEnforcementFlag)) {

                return;

            }

            mPermissionEnforcementFlagValue = DeviceConfig.getBoolean(

                    DeviceConfig.NAMESPACE_ACTIVITY_MANAGER,

                    mPermissionEnforcementFlag,

                    mPermissionEnforcementFlagDefaultValue);

        }



        /**

         * @hide

         */
@@ -745,6 +930,15 @@ public abstract class ForegroundServiceTypePolicy { 
                        ServiceManager.getService(Context.PLATFORM_COMPAT_SERVICE));

            platformCompat.clearOverrideForTest(changeId, packageName);

        }



        /**

         * For test only.

         *

         * @return The permission enforcement flag.

         */

        public @Nullable String getPermissionEnforcementFlagForTest() {

            return mPermissionEnforcementFlag;

        }

    }



    /**
@@ -990,6 +1184,12 @@ public abstract class ForegroundServiceTypePolicy { 
        private final SparseArray<ForegroundServiceTypePolicyInfo> mForegroundServiceTypePolicies =

                new SparseArray<>();



        /**

         * The map between permission enforcement flag to its permission policy info.

         */

        private final ArrayMap<String, ForegroundServiceTypePolicyInfo>

                mPermissionEnforcementToPolicyInfoMap = new ArrayMap<>();



        /**

         * Constructor

         */
@@ -1022,10 +1222,15 @@ public abstract class ForegroundServiceTypePolicy { 
                    FGS_TYPE_POLICY_SYSTEM_EXEMPTED);

            mForegroundServiceTypePolicies.put(FOREGROUND_SERVICE_TYPE_SHORT_SERVICE,

                    FGS_TYPE_POLICY_SHORT_SERVICE);

            mForegroundServiceTypePolicies.put(FOREGROUND_SERVICE_TYPE_FILE_MANAGEMENT,

                    FGS_TYPE_POLICY_FILE_MANAGEMENT);

            // TODO (b/271950506): revisit it in the next release.

            // Hide the file management type for now. If anyone uses it, will default to "none".

            mForegroundServiceTypePolicies.put(FOREGROUND_SERVICE_TYPE_SPECIAL_USE,

                    FGS_TYPE_POLICY_SPECIAL_USE);

            for (int i = 0, size = mForegroundServiceTypePolicies.size(); i < size; i++) {

                final ForegroundServiceTypePolicyInfo info =

                        mForegroundServiceTypePolicies.valueAt(i);

                mPermissionEnforcementToPolicyInfoMap.put(info.mPermissionEnforcementFlag, info);

            }

        }



        @Override
@@ -1078,8 +1283,8 @@ public abstract class ForegroundServiceTypePolicy { 
                }

            }

            if (permissionResult != PERMISSION_GRANTED) {

                return (CompatChanges.isChangeEnabled(

                        FGS_TYPE_PERMISSION_CHANGE_ID, callerUid))

                return policy.mPermissionEnforcementFlagValue

                        && (CompatChanges.isChangeEnabled(FGS_TYPE_PERMISSION_CHANGE_ID, callerUid))

                        ? FGS_TYPE_POLICY_CHECK_PERMISSION_DENIED_ENFORCED

                        : FGS_TYPE_POLICY_CHECK_PERMISSION_DENIED_PERMISSIVE;

            }
@@ -1089,5 +1294,14 @@ public abstract class ForegroundServiceTypePolicy { 
            }

            return FGS_TYPE_POLICY_CHECK_OK;

        }



        @Override

        public void updatePermissionEnforcementFlagIfNecessary(@NonNull String flagName) {

            final ForegroundServiceTypePolicyInfo info =

                    mPermissionEnforcementToPolicyInfoMap.get(flagName);

            if (info != null) {

                info.updatePermissionEnforcementFlagIfNecessary(flagName);

            }

        }

    }

}

services/core/java/com/android/server/am/ActiveServices.java

+34 −0
Original line number Diff line number Diff line
@@ -640,6 +640,7 @@ public final class ActiveServices { 
        mAppWidgetManagerInternal = LocalServices.getService(AppWidgetManagerInternal.class);

        setAllowListWhileInUsePermissionInFgs();

        initSystemExemptedFgsTypePermission();

        initMediaProjectFgsTypeCustomPermission();

    }



    private AppStateTracker getAppStateTracker() {
@@ -2580,6 +2581,39 @@ public final class ActiveServices { 
        }

    }



    /**

     * A custom permission checker for the "mediaProjection" FGS type:

     * if the app has been granted the permission to start a media projection via

     * the {@link android.media.project.MediaProjectionManager#createScreenCaptureIntent()},

     * it'll get the permission to start a foreground service with type "mediaProjection".

     */

    private class MediaProjectionFgsTypeCustomPermission extends ForegroundServiceTypePermission {

        MediaProjectionFgsTypeCustomPermission() {

            super("Media projection screen capture permission");

        }



        @Override

        public int checkPermission(@NonNull Context context, int callerUid, int callerPid,

                @NonNull String packageName, boolean allowWhileInUse) {

            return mAm.isAllowedMediaProjectionNoOpCheck(callerUid)

                    ? PERMISSION_GRANTED : PERMISSION_DENIED;

        }

    }



    /**

     * Set a custom permission checker for the "mediaProjection" FGS type.

     */

    private void initMediaProjectFgsTypeCustomPermission() {

        final ForegroundServiceTypePolicy policy = ForegroundServiceTypePolicy.getDefaultPolicy();

        final ForegroundServiceTypePolicyInfo policyInfo =

                policy.getForegroundServiceTypePolicyInfo(

                       ServiceInfo.FOREGROUND_SERVICE_TYPE_MEDIA_PROJECTION,

                       ServiceInfo.FOREGROUND_SERVICE_TYPE_NONE);

        if (policyInfo != null) {

            policyInfo.setCustomPermission(new MediaProjectionFgsTypeCustomPermission());

        }

    }



    ServiceNotificationPolicy applyForegroundServiceNotificationLocked(Notification notification,

            final String tag, final int id, final String pkg, final int userId) {

        // By nature of the FGS API, all FGS notifications have a null tag

services/core/java/com/android/server/am/ActivityManagerConstants.java

+7 −0
Original line number Diff line number Diff line
@@ -25,6 +25,7 @@ import static com.android.server.am.BroadcastConstants.DEFER_BOOT_COMPLETED_BROA 


import android.annotation.NonNull;

import android.app.ActivityThread;

import android.app.ForegroundServiceTypePolicy;

import android.content.ComponentName;

import android.content.ContentResolver;

import android.content.Context;
@@ -1196,6 +1197,7 @@ final class ActivityManagerConstants extends ContentObserver { 
                                updateUseTieredCachedAdj();

                                break;

                            default:

                                updateFGSPermissionEnforcementFlagsIfNecessary(name);

                                break;

                        }

                    }
@@ -1951,6 +1953,11 @@ final class ActivityManagerConstants extends ContentObserver { 
            DEFAULT_TIERED_CACHED_ADJ_DECAY_TIME);

    }



    private void updateFGSPermissionEnforcementFlagsIfNecessary(@NonNull String name) {

        ForegroundServiceTypePolicy.getDefaultPolicy()

                .updatePermissionEnforcementFlagIfNecessary(name);

    }



    @NeverCompile // Avoid size overhead of debugging code.

    void dump(PrintWriter pw) {

        pw.println("ACTIVITY MANAGER SETTINGS (dumpsys activity settings) "

services/core/java/com/android/server/am/ActivityManagerService.java

+57 −0

File changed.

Preview size limit exceeded, changes collapsed.