Allow permissions to be granted via whitelisted signatures
When an application defines a permission, it can now add a new attribute "allowViaWhitelist", a boolean value. If set to true, the permission may be granted to a package signed with a predefined key, if it is defined via <allow-permission> in /system/etc/permissions/someapp.xml. Since this is a hidden attribute, it must use the prv namespace XML declaration. E.g.: add the following to the <manifest> tag: xmlns:androidprv="http://schemas.android.com/apk/prv/res/android " In the permission declaration: <permission android:name="" android:protectionLevel="signature" androidprv:allowViaWhitelist"true" /> And a corresponding entry in /system/etc/permissions/someapp.xml: <allow-permission name="some.android.PERMISSION" signature="<known public signature>" /> Note: if the permission never declares "allowViaWhitelist", then the whitelisted permissions will be ignored. Change-Id: Ie4597a07eb0a193375fa2724bd9cf468184a7926 Signed-off-by: Roman Birg <roman@cyngn.com>
Loading
Please register or sign in to comment