Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f11e5d34 authored by Chad Brubaker's avatar Chad Brubaker
Browse files

Permissions to protect socket marking settings

Add the manifest entries for the net_mark group that protects marking
traffic as from another user in per user routing.

Change-Id: I97932a9e407467a7adc733caea8746a712bc6b68
parent b06accf3
Loading
Loading
Loading
Loading
+10 −0
Original line number Diff line number Diff line
@@ -2235,6 +2235,16 @@
        android:description="@string/permdesc_modifyNetworkAccounting"
        android:protectionLevel="signature|system" />

    <!-- Allows an application to mark traffic as from another user for per user routing.
         Used by system wide services like media server that execute delegated network connections
         for users.
         @hide
    -->
    <permission android:name="android.permission.MARK_NETWORK_SOCKET"
        android:label="@string/permlab_markNetworkSocket"
        android:description="@string/permdesc_markNetworkSocket"
        android:protectionLevel="signature|system" />

    <!-- C2DM permission.
         @hide Used internally.
     -->
+5 −0
Original line number Diff line number Diff line
@@ -1831,6 +1831,11 @@
    <!-- Description of an application permission, listed so the user can choose whether they want to allow the application to do this. -->
    <string name="permdesc_modifyNetworkAccounting">Allows the app to modify how network usage is accounted against apps. Not for use by normal apps.</string>

    <!-- Title of an application permission, listed so the user can choose whether they want to allow the application to do this. -->
    <string name="permlab_markNetworkSocket">modify socket marks</string>
    <!-- Description of an application permission, listed so the user can choose whether they want to allow the application to do this. -->
    <string name="permdesc_markNetworkSocket">Allows the app to modify socket marks for routing</string>

    <!-- Title of an application permission, listed so the user can choose whether they want to allow the application to do this. -->
    <string name="permlab_accessNotifications">access notifications</string>
    <!-- Description of an application permission, listed so the user can choose whether they want to allow the application to do this. -->