From 52537c1ea2b4bd0acd25bf66cadc47b880ad684b Mon Sep 17 00:00:00 2001
From: Heemin Seog <hseog@google.com>
Date: Fri, 16 Oct 2020 16:01:50 -0700
Subject: Allow permission to change application state

Needed to give KitchenSink control over enabling/disabling rotary
functionality.

Bug: 170232080
Test: manual
Change-Id: Ic69222642884444597e7411b17b6c6f363076981
---
 data/etc/car/com.google.android.car.kitchensink.xml | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'data')

diff --git a/data/etc/car/com.google.android.car.kitchensink.xml b/data/etc/car/com.google.android.car.kitchensink.xml
index 7292e0796bf5..f21e9bff16ec 100644
--- a/data/etc/car/com.google.android.car.kitchensink.xml
+++ b/data/etc/car/com.google.android.car.kitchensink.xml
@@ -43,5 +43,8 @@
         <!-- use for CarServiceTest -->
         <permission name="android.permission.SET_ACTIVITY_WATCHER"/>
         <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+
+        <!-- use for rotary fragment to enable/disable packages related to rotary -->
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
     </privapp-permissions>
 </permissions>
-- 
cgit v1.2.3


From 46f664b7ac73d8258481eb6dcb801a6c03130503 Mon Sep 17 00:00:00 2001
From: Edgar Wang <edgarwang@google.com>
Date: Thu, 19 Nov 2020 03:41:36 +0000
Subject: Add READ_DREAM_STATE to the settings list

Settings application needs the previleged permission to
get AoD supression status by using PowerManager API

Bug: 173425264
Change-Id: I5da006b7c88dc36d3eefebc559f2a2f3ab50823f
Test: Manual & bootup device
(cherry picked from commit 8a888b9745f0483dbb80131ae15bf92b189af07b)
Merged-In: I5da006b7c88dc36d3eefebc559f2a2f3ab50823f
---
 data/etc/com.android.settings.xml | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'data')

diff --git a/data/etc/com.android.settings.xml b/data/etc/com.android.settings.xml
index fe1182ecad4f..e473c55ce010 100644
--- a/data/etc/com.android.settings.xml
+++ b/data/etc/com.android.settings.xml
@@ -56,5 +56,7 @@
         <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
         <permission name="android.permission.CONTROL_DISPLAY_COLOR_TRANSFORMS" />
         <permission name="android.permission.INSTALL_DYNAMIC_SYSTEM"/>
+        <permission name="android.permission.READ_DREAM_STATE"/>
+        <permission name="android.permission.READ_DREAM_SUPPRESSION"/>
     </privapp-permissions>
 </permissions>
-- 
cgit v1.2.3


From 166aaccebbcdf7c884509b9b2219fcd9b02be865 Mon Sep 17 00:00:00 2001
From: Agatha Man <agathaman@google.com>
Date: Tue, 17 Nov 2020 14:13:30 -0800
Subject: Add permissions to car shell

Bug: 173532101
Test: make && emulator
Change-Id: Iddaf0dfc25df76f8b3492fb293ccb3910ae2898e
Merged-In: Iddaf0dfc25df76f8b3492fb293ccb3910ae2898e
---
 data/etc/car/Android.bp                |  7 +++++++
 data/etc/car/com.android.car.shell.xml | 22 ++++++++++++++++++++++
 2 files changed, 29 insertions(+)
 create mode 100644 data/etc/car/com.android.car.shell.xml

(limited to 'data')

diff --git a/data/etc/car/Android.bp b/data/etc/car/Android.bp
index e5492714b29f..3c990abaec87 100644
--- a/data/etc/car/Android.bp
+++ b/data/etc/car/Android.bp
@@ -163,3 +163,10 @@ prebuilt_etc {
     src: "com.android.car.ui.paintbooth.xml",
     filename_from_src: true,
 }
+
+prebuilt_etc {
+    name: "allowed_privapp_com.android.carshell",
+    sub_dir: "permissions",
+    src: "com.android.car.shell.xml",
+    filename_from_src: true,
+}
diff --git a/data/etc/car/com.android.car.shell.xml b/data/etc/car/com.android.car.shell.xml
new file mode 100644
index 000000000000..32666c8d9f68
--- /dev/null
+++ b/data/etc/car/com.android.car.shell.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2020 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License
+  -->
+<permissions>
+    <privapp-permissions package="com.android.car.shell">
+        <permission name="android.permission.INSTALL_PACKAGES" />
+        <permission name="android.permission.MEDIA_CONTENT_CONTROL"/>
+    </privapp-permissions>
+</permissions>
-- 
cgit v1.2.3


From 108dd9447982419072446d3d4ff8bfc89830fd30 Mon Sep 17 00:00:00 2001
From: Tyler Gunn <tgunn@google.com>
Date: Wed, 9 Dec 2020 13:05:56 -0800
Subject: Grant CHANGE_DEVICE_IDLE_TEMP_WHITELIST to call log provider.

The call log provider needs to grant an allow-list exemption in
broadcast options when sending the ACTION_NEW_VOICEMAIL intent to it's
directed recipient.  This is required so that the voicemail app can
start a background service to do some time consuming (but timely) work
in the background upon receiving the intent.

Test: Manual test with Call log provider.
Bug: 173155475
Change-Id: I3e84d65292ec74ffe374fc997e57c4c688f71b9d
Merged-In: I3e84d65292ec74ffe374fc997e57c4c688f71b9d
---
 data/etc/privapp-permissions-platform.xml | 1 +
 1 file changed, 1 insertion(+)

(limited to 'data')

diff --git a/data/etc/privapp-permissions-platform.xml b/data/etc/privapp-permissions-platform.xml
index 950666b81003..b1669e30d3b6 100644
--- a/data/etc/privapp-permissions-platform.xml
+++ b/data/etc/privapp-permissions-platform.xml
@@ -208,6 +208,7 @@ applications that come with the platform
 
     <privapp-permissions package="com.android.providers.contacts">
         <permission name="android.permission.BIND_DIRECTORY_SEARCH"/>
+        <permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST"/>
         <permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
         <permission name="android.permission.INTERACT_ACROSS_USERS"/>
         <permission name="android.permission.MANAGE_USERS"/>
-- 
cgit v1.2.3


From af413b18d2bbafaec841f6ac72583a78afae5c06 Mon Sep 17 00:00:00 2001
From: Chen Xu <fionaxu@google.com>
Date: Mon, 2 Nov 2020 10:00:05 -0800
Subject: DO NOT MERGE add android.permission.STATUS_BAR for
 cellbroadcastreceiver

See b/171668171#29 for fix explanation.

Bug: 171668171
Bug: 172602964
Bug: 171614598
Bug: 171755310
Test: Manual test
Change-Id: Ie12354d42aa7d1bf07eeca1cb2c389d2383abbf4
---
 data/etc/com.android.cellbroadcastreceiver.xml | 1 +
 data/etc/privapp-permissions-platform.xml      | 1 +
 2 files changed, 2 insertions(+)

(limited to 'data')

diff --git a/data/etc/com.android.cellbroadcastreceiver.xml b/data/etc/com.android.cellbroadcastreceiver.xml
index dd2df42e442f..228ec54420ff 100644
--- a/data/etc/com.android.cellbroadcastreceiver.xml
+++ b/data/etc/com.android.cellbroadcastreceiver.xml
@@ -22,5 +22,6 @@
         <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
         <permission name="android.permission.RECEIVE_EMERGENCY_BROADCAST"/>
         <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.STATUS_BAR" />
     </privapp-permissions>
 </permissions>
diff --git a/data/etc/privapp-permissions-platform.xml b/data/etc/privapp-permissions-platform.xml
index b1669e30d3b6..3b6abd50eebb 100644
--- a/data/etc/privapp-permissions-platform.xml
+++ b/data/etc/privapp-permissions-platform.xml
@@ -52,6 +52,7 @@ applications that come with the platform
         <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
         <permission name="android.permission.RECEIVE_EMERGENCY_BROADCAST"/>
         <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.STATUS_BAR" />
     </privapp-permissions>
 
     <privapp-permissions package="com.android.cellbroadcastservice">
-- 
cgit v1.2.3