Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit dea682ad authored by Winson's avatar Winson
Browse files

Add new domain verification permissions 

One for the domain verification agent package, one for the agent's
broadcast receiver, and one for Settings to mutate the user state.

Exempt-From-Owner-Approval: Already approved by owners on main branch

Bug: 163565712

Test: none, will be tested as part of implementation/enforcement

Change-Id: I680a495103ae1bc0c22695c38b3e9ad74ca47d8f
parent e803a1bd

core/api/system-current.txt

+3 −0
Original line number Diff line number Diff line
@@ -34,6 +34,7 @@ package android { 
    field public static final String BIND_CONTENT_CAPTURE_SERVICE = "android.permission.BIND_CONTENT_CAPTURE_SERVICE";

    field public static final String BIND_CONTENT_SUGGESTIONS_SERVICE = "android.permission.BIND_CONTENT_SUGGESTIONS_SERVICE";

    field public static final String BIND_DIRECTORY_SEARCH = "android.permission.BIND_DIRECTORY_SEARCH";

    field public static final String BIND_DOMAIN_VERIFICATION_AGENT = "android.permission.BIND_DOMAIN_VERIFICATION_AGENT";

    field public static final String BIND_EUICC_SERVICE = "android.permission.BIND_EUICC_SERVICE";

    field public static final String BIND_EXTERNAL_STORAGE_SERVICE = "android.permission.BIND_EXTERNAL_STORAGE_SERVICE";

    field public static final String BIND_GBA_SERVICE = "android.permission.BIND_GBA_SERVICE";
@@ -86,6 +87,7 @@ package android { 
    field public static final String CRYPT_KEEPER = "android.permission.CRYPT_KEEPER";

    field public static final String DEVICE_POWER = "android.permission.DEVICE_POWER";

    field public static final String DISPATCH_PROVISIONING_MESSAGE = "android.permission.DISPATCH_PROVISIONING_MESSAGE";

    field public static final String DOMAIN_VERIFICATION_AGENT = "android.permission.DOMAIN_VERIFICATION_AGENT";

    field public static final String ENTER_CAR_MODE_PRIORITIZED = "android.permission.ENTER_CAR_MODE_PRIORITIZED";

    field public static final String EXEMPT_FROM_AUDIO_RECORD_RESTRICTIONS = "android.permission.EXEMPT_FROM_AUDIO_RECORD_RESTRICTIONS";

    field public static final String FORCE_BACK = "android.permission.FORCE_BACK";
@@ -258,6 +260,7 @@ package android { 
    field public static final String TV_VIRTUAL_REMOTE_CONTROLLER = "android.permission.TV_VIRTUAL_REMOTE_CONTROLLER";

    field public static final String UNLIMITED_SHORTCUTS_API_CALLS = "android.permission.UNLIMITED_SHORTCUTS_API_CALLS";

    field public static final String UPDATE_APP_OPS_STATS = "android.permission.UPDATE_APP_OPS_STATS";

    field public static final String UPDATE_DOMAIN_VERIFICATION_USER_SELECTION = "android.permission.UPDATE_DOMAIN_VERIFICATION_USER_SELECTION";

    field public static final String UPDATE_FONTS = "android.permission.UPDATE_FONTS";

    field public static final String UPDATE_LOCK = "android.permission.UPDATE_LOCK";

    field public static final String UPDATE_TIME_ZONE_RULES = "android.permission.UPDATE_TIME_ZONE_RULES";

core/res/AndroidManifest.xml

+20 −0
Original line number Diff line number Diff line
@@ -4702,6 +4702,26 @@ 
    <permission android:name="android.permission.BIND_INTENT_FILTER_VERIFIER"

        android:protectionLevel="signature" />



    <!-- @SystemApi @hide Domain verification agent package needs to have this permission before the

         system will trust it to verify domains.



         TODO(159952358): STOPSHIP: This must be updated to the new "internal" protectionLevel

    -->

    <permission android:name="android.permission.DOMAIN_VERIFICATION_AGENT"

        android:protectionLevel="signature|privileged" />



    <!-- @SystemApi @hide Must be required by the domain verification agent's intent

         BroadcastReceiver, to ensure that only the system can interact with it.

    -->

    <permission android:name="android.permission.BIND_DOMAIN_VERIFICATION_AGENT"

        android:protectionLevel="signature" />



    <!-- @SystemApi @hide Allows an app like Settings to update the user's grants to what domains

         an app is allowed to automatically open.

    -->

    <permission android:name="android.permission.UPDATE_DOMAIN_VERIFICATION_USER_SELECTION"

        android:protectionLevel="signature" />



    <!-- @SystemApi Allows applications to access serial ports via the SerialManager.

         @hide -->

    <permission android:name="android.permission.SERIAL_PORT"