add special runtime permissions test cases#176

Open

inthewaves wants to merge 367 commits intoGrapheneOS:16from

inthewaves:srtperms-tests-1.0

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 10, 2025

SystemUI: apply "Add users from lock screen" setting to guest users

muhomorr
authored and
u-fred
committed
SystemUI: Allow customizing lock screen shortcuts via ThemePicker

quh4gko8
authored and
u-fred
committed
Add config to exempt telephony-related app from location indicators

kdrag0n
authored and
u-fred
committed
exempt some system packages from status bar privacy indicator

thestinger
authored and
u-fred
committed
allow PackageInstaller to use platform APIs

muhomorr
authored and
u-fred
committed
PackageInstaller: link "App info" screen from the uninstallation dialog

muhomorr
authored and
u-fred
committed
PackageInstaller: fix crash when showing app's first confirmation prompt

muhomorr
authored and
u-fred
committed
disable support for pre-approving PackageInstaller sessions

muhomorr
authored and
u-fred
committed
define READ_LOGS_FULL permission for promptless logcat access

muhomorr
authored and
u-fred
committed
add APIs for launching LogViewer app

muhomorr
authored and
u-fred
committed
add helpers for system_server extensions

muhomorr
authored and
u-fred
committed
Warn the user if they are using a prototype Pixel device

authored and
u-fred
committed
Support forwarding notifications from other users

authored and
u-fred
committed
DeviceIdleJobsController: don't ignore whitelisted system apps

muhomorr
authored and
u-fred
committed
do not allow disabling app visibility filtering

muhomorr
authored and
u-fred
committed
add hooks for modifying PackageManagerService behavior

muhomorr
authored and
u-fred
committed
rename AppsFilterImpl.grantImplicitAccess method

muhomorr
authored and
u-fred
committed
add hooks for modifying ActivityThread behavior

muhomorr
authored and
u-fred
committed
add helper class for launching non-standard Settings intents

muhomorr
authored and
u-fred
committed
AppBindArgs: infrastructure for passing extra args to app process init

muhomorr
authored and
u-fred
committed
infrastructure for custom handling of known packages

muhomorr
authored and
u-fred
committed
SettingsProvider: add support for further restriction of setting access

muhomorr
authored and
u-fred
committed
gosps: support for per-app GrapheneOS-specific persistent state

muhomorr
authored and
u-fred
committed
extend excludedMethods list in AndroidPackageTest

muhomorr
authored and
u-fred
committed
add method for updating cached package permission state

muhomorr
authored and
u-fred
committed
PackageHooks: infrastructure for per-package hooks in system_server

muhomorr
authored and
u-fred
committed
add base class for complex per-app switches

muhomorr
authored and
u-fred
committed
SettingsLib: add CategoryKey for Exploit protection screen

muhomorr
authored and
u-fred
committed
infrastructure for spoofing self permission checks

muhomorr
authored and
u-fred
committed
infrastructure for special runtime permissions

muhomorr
authored and
u-fred
committed
add special runtime permission for other sensors

muhomorr
authored and
u-fred
committed
notify the user when sensors access is denied by OTHER_SENSORS perm

muhomorr
authored and
u-fred
committed
make INTERNET into a special runtime permission

thestinger
authored and
u-fred
committed
improve compatibility of INTERNET special runtime permission

muhomorr
authored and
u-fred
committed
don't run jobs that need connectivity in apps that lack INTERNET perm

muhomorr
authored and
u-fred
committed
PackageInstallerUI: an option to skip auto-grant of INTERNET permission

muhomorr
authored and
u-fred
committed
use permanent fingerprint lockout immediately

thestinger
authored and
u-fred
committed
add system property for disabling keyguard camera

thestinger
authored and
u-fred
committed
add auto-reboot feature

muhomorr
authored and
u-fred
committed
infrastructure for the Storage Scopes feature

muhomorr
authored and
u-fred
committed
sscopes: temp: disable incomplete handling of READ_MEDIA_VISUAL_USER_SELECTED

muhomorr
authored and
u-fred
committed
control access to Android/obb directory with a GosPackageState flag

muhomorr
authored and
u-fred
committed
ErrorDialogController: do not auto-dismiss crash dialogs

muhomorr
authored and
u-fred
committed
fix ANR details link not working in profiles and in secondary users

muhomorr
authored and
u-fred
committed
include path of ANR stack traces file in ApplicationErrorReport

muhomorr
authored and
u-fred
committed
don't block reading ANR stack traces file via Unix file permissions

muhomorr
authored and
u-fred
committed
add option to view application error details in LogViewer app

muhomorr
authored and
u-fred
committed
Set always-on and lockdown on by default on first vpn connection at system_server side

quh4gko8
authored and
u-fred
committed
pre-grant POST_NOTIFICATIONS to more system apps

muhomorr
authored and
u-fred
committed
allow privileged installer to search for packages across all users

muhomorr
authored and
u-fred
committed
extend original-package renaming to provider authorities for Vanadium

muhomorr
authored and
u-fred
committed
extend original-package renaming to static launcher shortcuts

muhomorr
authored and
u-fred
committed
disable package parser cache

muhomorr
authored and
u-fred
committed
perform additional boot-time checks on system package updates

muhomorr
authored and
u-fred
committed
allow out-of-band package updates to use original-package system

muhomorr
authored and
u-fred
committed
require fs-verity when installing system package updates

muhomorr
authored and
u-fred
committed
don't allow updating system packages to the same versionCode

muhomorr
authored and
u-fred
committed
allow privileged installers to use getSharedLibraries(MATCH_ANY_USER)

muhomorr
authored and
u-fred
committed
allow only first party app source and shell to update system packages

muhomorr
authored and
u-fred
committed
Remove build fingerprint from screenshot EXIF

x86pup
authored and
u-fred
committed
add toggle for screenshot timestamp EXIF metadata

x86pup
authored and
u-fred
committed
SUPL: Don't send IMSI / Phone number to SUPL server

MSe1969
authored and
u-fred
committed
add GNSS SUPL setting

muhomorr
authored and
u-fred
committed
allow privileged installers to maintain a global list of busy packages

muhomorr
authored and
u-fred
committed
add option to scramble PIN layout

muhomorr
authored and
u-fred
committed
enable LOCK_PIN_ENHANCED_PRIVACY setting by default

muhomorr
authored and
u-fred
committed
don't crash apps that depend on missing Gservices provider

muhomorr
authored and
u-fred
committed
integrate Google's EuiccSupportPixel package

muhomorr
authored and
u-fred
committed
integrate Google's eUICC LPA package (EuiccGoogle)

muhomorr
authored and
u-fred
committed
do not auto-grant Camera permission to the eUICC LPA UI app

muhomorr
authored and
u-fred
committed
add a method for sending BOOT_COMPLETED broadcast to a specific package

muhomorr
authored and
u-fred
committed
define READ_DEVICE_SERIAL_NUMBER permission for Build.getSerial() access

muhomorr
authored and
u-fred
committed
aauto: define a restricted version of the MANAGE_USB permission

muhomorr
authored and
u-fred
committed
aauto: add definition of restricted BLUETOOTH_PRIVILEGED permission

muhomorr
authored and
u-fred
committed
aauto: add definition of restricted WIFI_PRIVILEGED permission

muhomorr
authored and
u-fred
committed
aauto: add definition of restricted READ_PRIVILEGED_PHONE_STATE permission

muhomorr
authored and
u-fred
committed
adjust definition of TelecomManager.getUserSelectedOutgoingPhoneAccount()

muhomorr
authored and
u-fred
committed
aauto: support using aauto USB accessory activity as a default activity

muhomorr
authored and
u-fred
committed
aauto: define ASSOCIATE_COMPANION_DEVICES_RESTRICTED permission

muhomorr
authored and
u-fred
committed
aauto: support allowing association with "automotive projection" devices

muhomorr
authored and
u-fred
committed
add BinderWrapper

muhomorr
authored and
u-fred
committed
gmscompat: add compatibility layer for unprivileged GMS

thestinger
authored and
u-fred
committed
require vendor camera extensions package to be a system app by default

muhomorr
authored and
u-fred
committed
add config for Pixel Camera Services

muhomorr
authored and
u-fred
committed
infrastructure for creating per-package seinfo overrides

muhomorr
authored and
u-fred
committed
support denying special access to hardware accelerators by Google apps

muhomorr
authored and
u-fred
committed
add GNSS PSDS setting

muhomorr
authored and
u-fred
committed
support redirecting ContentProvider calls to another provider

muhomorr
authored and
u-fred
committed
infrastructure for the Contact Scopes feature

muhomorr
authored and
u-fred
committed
add connectivity checks setting and its migration from Settings.Global

muhomorr
authored and
u-fred
committed
Wi-Fi auto turn off

authored and
u-fred
committed
Bluetooth auto turn off

authored and
u-fred
committed
add support for hooking LocationManager methods

muhomorr
authored and
u-fred
committed
improve compat with apps that try to access network location provider

muhomorr
authored and
u-fred
committed
add RemoteKeyProvisioning server override setting

muhomorr
authored and
u-fred
committed
don't skip AOT compilation of apps that weren't recently used

muhomorr
authored and
u-fred
committed
do not delete compiled code (OAT files) of hibernated apps

muhomorr
authored and
u-fred
committed
disable OtaDexoptService

muhomorr
authored and
u-fred
committed
add notification-based UI for the background dexopt job

muhomorr
authored and
u-fred
committed
infrastructure for per-package dex2oat compiler filter overrides

muhomorr
authored and
u-fred
committed
always use speed dex2oat compiler filter for VPN service packages

muhomorr
authored and
u-fred
committed
add helper class for notifications that link AppSwitch UI

muhomorr
authored and
u-fred
committed
infrastructure for passing extra args to Zygote and WebViewZygote

muhomorr
authored and
u-fred
committed
infrastructure for passing SELinux flags to the kernel

muhomorr
authored and
u-fred
committed
add per-app setting for hardened_malloc and extended VA space

muhomorr
authored and
u-fred
committed
always stop app zygotes when app is being force-stopped

muhomorr
authored and
u-fred
committed
add per-app native debugging setting

muhomorr
authored and
u-fred
committed
add system API for getting app info by PID

muhomorr
authored and
u-fred
committed
infrastructure for handling callbacks from logd to system_server

muhomorr
authored and
u-fred
committed
infrastructure for showing notifications about SELinux TSEC_FLAG denials

muhomorr
authored and
u-fred
committed
show notification after app is blocked from accessing ptrace

muhomorr
authored and
u-fred
committed
fix rate limiting for non-app tombstones

muhomorr
authored and
u-fred
committed
DropBoxManager: fix TreeSet API contract violations

muhomorr
authored and
u-fred
committed
fix an upstream race condition in handling of system error files

muhomorr
authored and
u-fred
committed
DropBox: skip spurious system_server_crash entries

muhomorr
authored and
u-fred
committed
DropBox: skip fsck.f2fs results that don't contain errors

muhomorr
authored and
u-fred
committed
notify the user about notable system journal entries

muhomorr
authored and
u-fred
committed
support for per-app dynamic code loading restrictions

muhomorr
authored and
u-fred
committed
add test for SELinux flags-based per-app hardening features

muhomorr
authored and
u-fred
committed
add per-app memory tagging setting

muhomorr
authored and
u-fred
committed
Widevine provisioning setting

maade93791
authored and
u-fred
committed
hide from Aurora Store packages that it's not allowed to update

muhomorr
authored and
u-fred
committed
run full explicit GC in SystemUI and system_server after locking

thestinger
authored and
u-fred
committed
add UsbManager API for configuring USB port security state

muhomorr
authored and
u-fred
committed
add setting for USB port security state

muhomorr
authored and
u-fred
committed
Do not use filter calling uid parameter originally intended for instant apps

quh4gko8
authored and
u-fred
committed
Disallow the camera shortcut toggle from the lockscreen

neelchauhan
authored and
u-fred
committed
disable support for adoptable storage

muhomorr
authored and
u-fred
committed
add a helper class for wiping eUICCs

muhomorr
authored and
u-fred
committed
extend the upstream wipe-without-reboot implementation

muhomorr
authored and
u-fred
committed
add duress password feature

muhomorr
authored and
u-fred
committed
add lock_settings shell commands for testing the duress password feature

muhomorr
authored and
u-fred
committed
add lock_settings shell command option for printing executed Weaver ops

muhomorr
authored and
u-fred
committed
add a test for the duress password feature

muhomorr
authored and
u-fred
committed
fix ApplicationInfo flag initialization being skipped in some cases

muhomorr
authored and
u-fred
committed
stub out reads of hidden system settings in Google's text-to-speech app

muhomorr
authored and
u-fred
committed
make Google's text-to-speech app force-queryable

muhomorr
authored and
u-fred
committed
show a deprecation warning dialog on each launch of a 32-bit app

muhomorr
authored and
u-fred
committed
better 32-bit deprecation warning

thestinger
authored and
u-fred
committed
fix touch-to-unlock on Google devices with side fingerprint scanner

muhomorr
authored and
u-fred
committed
add setting for alternative touchscreen mode

muhomorr
authored and
u-fred
committed
don't report some android.hardware.bluetooth-service.bcmbtlinux crashes

muhomorr
authored and
u-fred
committed
don't report harmless fingerprint-service.goodix crash

muhomorr
authored and
u-fred
committed
sysconfig: support enabling association restrictions without exemptions

muhomorr
authored and
u-fred
committed
add config for Pixel Health app

muhomorr
authored and
u-fred
committed
new PermissionService: implement shouldBlockGrantRuntimePermission()

muhomorr
authored and
u-fred
committed
new PermissionService: implement updatePermissions()

muhomorr
authored and
u-fred
committed
new PermissionService: implement PackageHooks support

muhomorr
authored and
u-fred
committed
new PermissionService: support for special runtime permissions

muhomorr
authored and
u-fred
committed
temp: unconditionally enable system crash notifications

muhomorr
authored and
u-fred
committed
Revert "temp: unconditionally enable system crash notifications"

muhomorr2
authored and
u-fred
committed
ignore factory reset protection (FRP)

muhomorr
authored and
u-fred
committed
fix check for the current holder of the Wallet app role

muhomorr
authored and
u-fred
committed
disable memory tagging for Pixel Camera Services

muhomorr
authored and
u-fred
committed
don't remove app widgets from user's home screen when the user stops

authored and
u-fred
committed
raise backup transport timeout

thestinger
authored and
u-fred
committed
add utility class for obtaining and keeping track of Binder caller info

muhomorr
authored and
u-fred
committed
fix handling of MATCH_ARCHIVED_PACKAGES flag in getPackageUidInternal()

muhomorr
authored and
u-fred
committed
delay activation of the Allow button in USB ADB confirmation dialog

muhomorr
authored and
u-fred
committed
FusedLocation: remove racy and redundant lazy init in Service.onBind()

muhomorr
authored and
u-fred
committed
never remove location providers at runtime

muhomorr
authored and
u-fred
committed
disable safe media volume management

muhomorr
authored and
u-fred
committed
add battery charge limit setting

muhomorr
authored and
u-fred
committed
SystemUI: add support for battery charge limit feature

muhomorr
authored and
u-fred
committed
add dev option to log Java binder transaction

muhomorr
authored and
u-fred
committed
prevent recycling user IDs
u-fred
committed
add LockDomain
u-fred
committed
add second factor to DevicePolicyManagerService
u-fred
committed
add second factor to LockSettingsService
u-fred
committed
add second factor to LockSettingsStateListener
u-fred
committed
add second factor to AdaptiveAuthService
u-fred
committed
add second factor to TrustManagerService
u-fred
committed
add biometric keyguard settings to LPU
u-fred
committed
improve upstream LPU#isCredentialSharableWithParent
u-fred
committed
add second factor to LockPattern classes
u-fred
committed
add BiometricAuthTokenStore
u-fred
committed
add second factor to FingerprintService
u-fred
committed
add second factor UI
u-fred
committed
throw Exception to notify of SceneContainerFlag
u-fred
committed
prevent face auth in KUM
u-fred
committed
fix upstream fingerprint mode change bug
u-fred
committed
append "Safe" to risky upstream method names
u-fred
committed
add second factor to fingerprint unlock
u-fred
committed
fix feature check in DPMS.getPasswordMinimumMetricsUnchecked()

muhomorr
authored and
u-fred
committed
fix collision check in SyntheticPasswordManager.generateProtectorId()

muhomorr
authored and
u-fred
committed
SystemUI: don't skip fingerprint auth success haptic when 2FA is on

muhomorr
authored and
u-fred
committed
add workaround for SSM.newTargetUser() system_server crash

muhomorr
authored and
u-fred
committed
don't break boot of debug OS build on permission allowlist violations

muhomorr
authored and
u-fred
committed
opt-out TunerSettings from edge-to-edge

thestinger
authored and
u-fred
committed
protect against upstream bugs bypassing 2FA

thestinger
authored and
u-fred
committed
fix serious upstream lockscreen animation bug

thestinger
authored and
u-fred
committed
zygote: don't reload android.os.Build after applying appcompat sysprops

muhomorr
authored and
u-fred
committed
enable appcompat sysprop overrides for user-installed apps

muhomorr
authored and
u-fred
committed
don't delay setting observer callbacks for background system packages

muhomorr
authored and
u-fred
committed
add network location setting

soupslurpr
authored and
u-fred
committed
add network location provider to config_locationProviderPackageNames

soupslurpr
authored and
u-fred
committed
FusedLocation: don't attempt to flush inactive providers

muhomorr
authored and
u-fred
committed
exclude Network Location from location indicator

thestinger
authored and
u-fred
committed
disable HttpEngine preloading for exec spawning

muhomorr
authored and
u-fred
committed
SystemUI: make screenshot sound use sound effects setting

muhomorr
authored and
u-fred
committed
SystemUI: Fix constraints for keyguard slice view

luk1337
authored and
u-fred
committed
SystemUI: Don't remove keyguard slice view

luk1337
authored and
u-fred
committed
config: enable desktop mode support

muhomorr
authored and
u-fred
committed
SystemUI: fix keyguard media section placement when split shade is used

muhomorr
authored and
u-fred
committed
SystemUI: fix orientation of keyguard slice view rows

muhomorr
authored and
u-fred
committed
SystemUI: don't hide date text on lockscreen when media is playing

muhomorr
authored and
u-fred
committed
SystemUI: add keyguard slice view to split shade layout

muhomorr
authored and
u-fred
committed
SystemUI: fix a screenshot process crash in ScrollCaptureController

muhomorr
authored and
u-fred
committed
don't allow to install APEXes on user builds

muhomorr
authored and
u-fred
committed
fix NPE system_server crash in F2fsUtils.getFilesRecursive()

muhomorr
authored and
u-fred
committed
don't allow enabling the instant apps feature

muhomorr
authored and
u-fred
committed
don't allow enabling the "add users when locked" setting

muhomorr
authored and
u-fred
committed
fix upstream RecoverySystem.verifyPackage vulnerability

thestinger
authored and
u-fred
committed
Section for adding non-runtime permissions downstream

quh4gko8
authored and
u-fred
committed
Add permission definition to read additional security state

quh4gko8
authored and
u-fred
committed
Extend getting security state bundle to include downstream configurations

quh4gko8
authored and
u-fred
committed
Method to fetch if a user can have a specific profile type

quh4gko8
authored and
u-fred
committed
Set secondary secondary users allow having private profiles

quh4gko8
authored and
u-fred
committed
Support adding private profiles when parent user can have private profiles

quh4gko8
authored and
u-fred
committed
Settings definition for cross profile clipboard access

quh4gko8
authored and
u-fred
committed
Enforce cross profile clipboard access settings

quh4gko8
authored and
u-fred
committed
AppCopyHelper: store Context argument as a field

quh4gko8
authored and
u-fred
committed
AppCopyHelper: Extend SelectableAppInfo fields with info stored from ApplicationInfo

quh4gko8
authored and
u-fred
committed
NFC auto turn off

authored and
u-fred
committed
Definition of setting to disallow delayed locking on user stop or lock

quh4gko8
authored and
u-fred
committed
Enforce setting to disallow delayed locking for user when stopped/locked

quh4gko8
authored and
u-fred
committed
Always cache users that delay storage locking

quh4gko8
authored and
u-fred
committed
Lock cached profiles that delay locking of storage when parent user is stopped

quh4gko8
authored and
u-fred
committed
bugfix: appropriately set quiet mode when being enabled/disabled

quh4gko8
authored and
u-fred
committed
Set quiet mode and stop certain profiles when its parent user is starting or stopping

quh4gko8
authored and
u-fred
committed
Definition of AppInfoExt flag for apps signed using Play signing

quh4gko8
authored and
u-fred
committed
Append AppInfoExt flag for apps signed with Play signing

quh4gko8
authored and
u-fred
committed
PackageExt: Method to check for presence of an AppInfoExt flag

quh4gko8
authored and
u-fred
committed
Hide provider(s) for startup on apps with valid Play Store source stamp

quh4gko8
authored and
u-fred
committed

Uh oh!

Commits

Commits on Jun 10, 2025