Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e372d996 authored by Evan Severson's avatar Evan Severson
Browse files

Don't exempt background mic / camera when device upgrades 

Fixes the issue where the platform added preinstalled apps to the
background mic / camera allowlists so they were able to request
these permissions.

Bug: 169856898
Bug: 158311343
Test: Upgrade from R. Upgrade from ToT.
Change-Id: I8ad30cd3d3e30f94b4e42c2bf8acbb0b0e0b7472
parent 3a20a22e

services/core/java/com/android/server/pm/permission/DefaultPermissionGrantPolicy.java

+6 −1
Original line number Diff line number Diff line
@@ -1272,7 +1272,12 @@ public final class DefaultPermissionGrantPolicy { 
                    newFlags |= (flags & PackageManager.FLAGS_PERMISSION_RESTRICTION_ANY_EXEMPT);



                    // If we are allowlisting the permission, update the exempt flag before grant.

                    if (whitelistRestrictedPermissions && pm.isPermissionRestricted(permission)) {

                    // If the permission can't be allowlisted by an installer, skip it here because

                    // this is where the platform takes the role of the installer for exempting

                    // preinstalled apps.

                    if (whitelistRestrictedPermissions && pm.isPermissionRestricted(permission)

                            && !pm.getPermissionInfo(permission).isInstallerExemptIgnored()) {



                        pm.updatePermissionFlags(permission, pkg,

                                PackageManager.FLAG_PERMISSION_RESTRICTION_SYSTEM_EXEMPT,

                                PackageManager.FLAG_PERMISSION_RESTRICTION_SYSTEM_EXEMPT, user);