Commit 94b8768d authored Nov 12, 2024 by Michael Groover

Add psap_ai flag to protect DeviceConfig flags

Android 16 adds restrictions to the DeviceConfig flags that can
be modified by the shell user; to support this, the
WRITE_DEVICE_CONFIG permission will be removed from the shell
user's manifest. This commit adds a new flag in the psap_ai
namespace that will be used to flag all changes to support
these restrictions.

Bug: 364083026
Flag: android.security.protect_device_config_flags
Test: Build
Change-Id: I763594e84b31e75e62f36c4aafe5edbefecc296d

parent f098e278

core/java/android/security/flags.aconfig

+8 −0

Original line number	Diff line number	Diff line
		@@ -114,6 +114,14 @@ flag {
		bug: "365994454"
		}

		flag {
		name: "protect_device_config_flags"
		namespace: "psap_ai"
		description: "Feature flag to limit adb shell to allowlisted flags"
		bug: "364083026"
		is_fixed_read_only: true
		}

		flag {
		name: "keystore_grant_api"
		namespace: "hardware_backed_security"