Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b23235b9 authored by Roshan Pius's avatar Roshan Pius
Browse files

permissions: Allow few permissions for mainline modules 

These are needed by the NFC stack which is becoming an Apex-in-Apk for
Android V (NFC was previously signed by platform certs, so got these
permissions via `signature` level)

Bug: 320583956
Test: Bootup test with signed NFC APK (within NFC apex)
Change-Id: I2b171875d02f464a7f8ae54273ec10f3cce91e38
parent 8cbd6091

core/res/AndroidManifest.xml

+4 −4
Original line number Diff line number Diff line
@@ -3160,7 +3160,7 @@ 
         types of interactions

         @hide -->

    <permission android:name="android.permission.INTERACT_ACROSS_USERS_FULL"

        android:protectionLevel="signature|installer|role" />

        android:protectionLevel="signature|installer|module|role" />

    <uses-permission android:name="android.permission.INTERACT_ACROSS_USERS_FULL" />



    <!-- Allows interaction across profiles in the same profile group. -->
@@ -5055,7 +5055,7 @@ 
         <p>Intended for use by ROLE_ASSISTANT and signature apps only.

    -->

    <permission android:name="android.permission.SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE"

                android:protectionLevel="signature|role"/>

                android:protectionLevel="signature|module|role"/>



    <!-- Must be required by a {@link android.service.autofill.AutofillService},

         to ensure that only the system can bind to it.
@@ -5673,7 +5673,7 @@ 
    <!-- @SystemApi Allows an application to manage the holders of a role.

         @hide -->

    <permission android:name="android.permission.MANAGE_ROLE_HOLDERS"

                android:protectionLevel="signature|installer" />

                android:protectionLevel="signature|installer|module" />



    <!-- @SystemApi Allows an application to manage the holders of roles associated with default

         applications.
@@ -5693,7 +5693,7 @@ 
    <!-- @SystemApi Allows an application to observe role holder changes.

         @hide -->

    <permission android:name="android.permission.OBSERVE_ROLE_HOLDERS"

                android:protectionLevel="signature|installer" />

                android:protectionLevel="signature|installer|module" />



    <!-- Allows an application to manage the companion devices.

         @hide -->