Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Unverified Commit f86c92a1 authored by Oliver Scott's avatar Oliver Scott Committed by Michael Bestas
Browse files

Stop domain verification delegated from UIDs blocked by network policy 

Issue: calyxos#889
Change-Id: I00278802bdf9e9d2ff2c8e94304a14cceb1a2c0d
parent 88dcc606

data/etc/Android.bp

+1 −1
Original line number Diff line number Diff line
@@ -185,7 +185,7 @@ prebuilt_etc { 


prebuilt_etc {

    name: "privapp_whitelist_com.android.statementservice",

    product_specific: true,

    system_ext_specific: true,

    sub_dir: "permissions",

    src: "com.android.statementservice.xml",

    filename_from_src: true,

packages/StatementService/Android.bp

+2 −2
Original line number Diff line number Diff line
@@ -31,8 +31,8 @@ android_app { 
        proguard_flags_files: ["proguard.flags"],

    },

    target_sdk_version: "29",

    sdk_version: "system_current",

    product_specific: true,

    platform_apis: true,

    system_ext_specific: true,

    privileged: true,

    required: [

        "privapp_whitelist_com.android.statementservice",

packages/StatementService/AndroidManifest.xml

+1 −0
Original line number Diff line number Diff line
@@ -26,6 +26,7 @@ 
    <uses-permission android:name="android.permission.INTENT_FILTER_VERIFICATION_AGENT"/>

    <uses-permission android:name="android.permission.INTERACT_ACROSS_USERS" />

    <uses-permission android:name="android.permission.INTERNET"/>

    <uses-permission android:name="android.permission.OBSERVE_NETWORK_POLICY"/>

    <uses-permission android:name="android.permission.QUERY_ALL_PACKAGES" />

    <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED"/>

    <uses-permission android:name="android.permission.UPDATE_DOMAIN_VERIFICATION_USER_SELECTION"/>

packages/StatementService/src/com/android/statementservice/StatementServiceApplication.kt

+1 −0
Original line number Diff line number Diff line
@@ -29,6 +29,7 @@ class StatementServiceApplication : Application() { 
        if (userManager.isUserUnlocked) {

            // WorkManager can only schedule when the user data directories are unencrypted (after

            // the user has entered their lock password.

            DomainVerificationUtils.registerNetworkPolicyListener(this)

            DomainVerificationUtils.schedulePeriodicCheckUnlocked(WorkManager.getInstance(this))

            DomainVerificationUtils.schedulePeriodicUpdateUnlocked(WorkManager.getInstance(this))

        }

packages/StatementService/src/com/android/statementservice/domain/BootCompletedReceiver.kt

+1 −0
Original line number Diff line number Diff line
@@ -43,6 +43,7 @@ class BootCompletedReceiver : BroadcastReceiver() { 
    override fun onReceive(context: Context, intent: Intent) {

        if (intent.action != Intent.ACTION_BOOT_COMPLETED) return

        val workManager = WorkManager.getInstance(context)

        DomainVerificationUtils.registerNetworkPolicyListener(context)

        DomainVerificationUtils.schedulePeriodicCheckUnlocked(workManager)

        workManager.beginUniqueWork(

            PACKAGE_BOOT_REQUEST_KEY,