add optional installation of play apps into work profile #4

Closed

mkg20001 wants to merge 431 commits intoGrapheneOS:15from

mkg20001:gapps-work-profile

This pull request is big! We're only showing the most recent 250 commits

Commits on Nov 6, 2024

Support forwarding notifications from other users

authored and
thestinger
committed
DeviceIdleJobsController: don't ignore whitelisted system apps

muhomorr
authored and
thestinger
committed
do not allow disabling app visibility filtering

muhomorr
authored and
thestinger
committed
add hooks for modifying PackageManagerService behavior

muhomorr
authored and
thestinger
committed
rename AppsFilterImpl.grantImplicitAccess method

muhomorr
authored and
thestinger
committed
add hooks for modifying ActivityThread behavior

muhomorr
authored and
thestinger
committed
AppBindArgs: infrastructure for passing extra args to app process init

muhomorr
authored and
thestinger
committed
infrastructure for custom handling of known packages

muhomorr
authored and
thestinger
committed
gosps: support for per-app GrapheneOS-specific persistent state

muhomorr
authored and
thestinger
committed
extend excludedMethods list in AndroidPackageTest

muhomorr
authored and
thestinger
committed
add method for updating cached package permission state

muhomorr
authored and
thestinger
committed
PackageHooks: infrastructure for per-package hooks in system_server

muhomorr
authored and
thestinger
committed
add base class for complex per-app switches

muhomorr
authored and
thestinger
committed
SettingsLib: add CategoryKey for Exploit protection screen

muhomorr
authored and
thestinger
committed
infrastructure for spoofing self permission checks

muhomorr
authored and
thestinger
committed
infrastructure for special runtime permissions

muhomorr
authored and
thestinger
committed
add special runtime permission for other sensors

muhomorr
authored and
thestinger
committed
notify the user when sensors access is denied by OTHER_SENSORS perm

muhomorr
authored and
thestinger
committed
make INTERNET into a special runtime permission
thestinger
committed
improve compatibility of INTERNET special runtime permission

muhomorr
authored and
thestinger
committed
don't run jobs that need connectivity in apps that lack INTERNET perm

muhomorr
authored and
thestinger
committed
PackageInstallerUI: an option to skip auto-grant of INTERNET permission

muhomorr
authored and
thestinger
committed
use permanent fingerprint lockout immediately
thestinger
committed
add system property for disabling keyguard camera
thestinger
committed
add auto-reboot feature

muhomorr
authored and
thestinger
committed
infrastructure for the Storage Scopes feature

muhomorr
authored and
thestinger
committed
sscopes: temp: disable incomplete handling of READ_MEDIA_VISUAL_USER_SELECTED

muhomorr
authored and
thestinger
committed
control access to Android/obb directory with a GosPackageState flag

muhomorr
authored and
thestinger
committed
add an option to show the details of an application error to the user

muhomorr
authored and
thestinger
committed
ErrorDialogController: do not auto-dismiss crash dialogs

muhomorr
authored and
thestinger
committed
Set always-on and lockdown on by default on first vpn connection at system_server side

quh4gko8
authored and
thestinger
committed
pre-grant POST_NOTIFICATIONS to more system apps

muhomorr
authored and
thestinger
committed
allow privileged installer to search for packages across all users

muhomorr
authored and
thestinger
committed
extend original-package renaming to provider authorities for Vanadium

muhomorr
authored and
thestinger
committed
extend original-package renaming to static launcher shortcuts

muhomorr
authored and
thestinger
committed
bugfix: properly acquire package state from original package

quh4gko8
authored and
thestinger
committed
disable package parser cache

muhomorr
authored and
thestinger
committed
perform additional boot-time checks on system package updates

muhomorr
authored and
thestinger
committed
allow out-of-band package updates to use original-package system

muhomorr
authored and
thestinger
committed
require fs-verity when installing system package updates

muhomorr
authored and
thestinger
committed
don't allow updating system packages to the same versionCode

muhomorr
authored and
thestinger
committed
allow privileged installers to use getSharedLibraries(MATCH_ANY_USER)

muhomorr
authored and
thestinger
committed
allow only first party app source and shell to update system packages

muhomorr
authored and
thestinger
committed
Remove build fingerprint from screenshot EXIF

x86pup
authored and
thestinger
committed
add toggle for screenshot timestamp EXIF metadata

x86pup
authored and
thestinger
committed
SUPL: Don't send IMSI / Phone number to SUPL server

MSe1969
authored and
thestinger
committed
add GNSS SUPL setting

muhomorr
authored and
thestinger
committed
allow privileged installers to maintain a global list of busy packages

muhomorr
authored and
thestinger
committed
add option to scramble PIN layout

muhomorr
authored and
thestinger
committed
enable LOCK_PIN_ENHANCED_PRIVACY setting by default

muhomorr
authored and
thestinger
committed
don't crash apps that depend on missing Gservices provider

muhomorr
authored and
thestinger
committed
integrate Google's EuiccSupportPixel package

muhomorr
authored and
thestinger
committed
integrate Google's eUICC LPA package (EuiccGoogle)

muhomorr
authored and
thestinger
committed
do not auto-grant Camera permission to the eUICC LPA UI app

muhomorr
authored and
thestinger
committed
gmscompat: add compatibility layer for unprivileged GMS
thestinger
committed
require vendor camera extensions package to be a system app by default

muhomorr
authored and
thestinger
committed
add config for Pixel Camera Services

muhomorr
authored and
thestinger
committed
infrastructure for creating per-package seinfo overrides

muhomorr
authored and
thestinger
committed
support denying special access to hardware accelerators by Google apps

muhomorr
authored and
thestinger
committed
add GNSS PSDS setting

muhomorr
authored and
thestinger
committed
support redirecting ContentProvider calls to another provider

muhomorr
authored and
thestinger
committed
infrastructure for the Contact Scopes feature

muhomorr
authored and
thestinger
committed
add connectivity checks setting and its migration from Settings.Global

muhomorr
authored and
thestinger
committed
Wi-Fi auto turn off

authored and
thestinger
committed
Bluetooth auto turn off

authored and
thestinger
committed
implement dynamic deny_new_usb toggle mode
thestinger
committed
add support for hooking LocationManager methods

muhomorr
authored and
thestinger
committed
improve compat with apps that try to access network location provider

muhomorr
authored and
thestinger
committed
add RemoteKeyProvisioning server override setting

muhomorr
authored and
thestinger
committed
support showing dexopt progress during boot

muhomorr
authored and
thestinger
committed
fix crash of boot-time info dialog due to delayed font init

muhomorr
authored and
thestinger
committed
don't skip AOT compilation of apps that weren't recently used

muhomorr
authored and
thestinger
committed
do not delete compiled code (OAT files) of hibernated apps

muhomorr
authored and
thestinger
committed
disable OtaDexoptService

muhomorr
authored and
thestinger
committed
add notification-based UI for the background dexopt job

muhomorr
authored and
thestinger
committed
infrastructure for per-package dex2oat compiler filter overrides

muhomorr
authored and
thestinger
committed
always use speed dex2oat compiler filter for VPN service packages

muhomorr
authored and
thestinger
committed
add helper class for launching non-standard Settings intents

muhomorr
authored and
thestinger
committed
add helper class for notifications that link AppSwitch UI

muhomorr
authored and
thestinger
committed
infrastructure for passing extra args to Zygote and WebViewZygote

muhomorr
authored and
thestinger
committed
infrastructure for passing SELinux flags to the kernel

muhomorr
authored and
thestinger
committed
add per-app setting for hardened_malloc and extended VA space

muhomorr
authored and
thestinger
committed
always stop app zygotes when app is being force-stopped

muhomorr
authored and
thestinger
committed
add per-app native debugging setting

muhomorr
authored and
thestinger
committed
add system API for getting app info by PID

muhomorr
authored and
thestinger
committed
infrastructure for handling callbacks from logd to system_server

muhomorr
authored and
thestinger
committed
infrastructure for showing notifications about SELinux TSEC_FLAG denials

muhomorr
authored and
thestinger
committed
show notification after app is blocked from accessing ptrace

muhomorr
authored and
thestinger
committed
fix rate limiting for non-app tombstones

muhomorr
authored and
thestinger
committed
DropBoxManager: fix TreeSet API contract violations

muhomorr
authored and
thestinger
committed
DropBox: skip spurious system_server_crash entries

muhomorr
authored and
thestinger
committed
DropBox: skip fsck.f2fs results that don't contain errors

muhomorr
authored and
thestinger
committed
notify the user about notable system journal entries

muhomorr
authored and
thestinger
committed
add per-app dynamic code execution settings

muhomorr
authored and
thestinger
committed
improve memory DCL restriction setting

muhomorr
authored and
thestinger
committed
improve storage DCL restriction setting

muhomorr
authored and
thestinger
committed
add per-app memory tagging setting

muhomorr
authored and
thestinger
committed
add a test for the new per-app hardening features

muhomorr
authored and
thestinger
committed
Widevine provisioning setting

maade93791
authored and
thestinger
committed
add a method for sending BOOT_COMPLETED broadcast to a specific package

muhomorr
authored and
thestinger
committed
define READ_DEVICE_SERIAL_NUMBER permission for Build.getSerial() access

muhomorr
authored and
thestinger
committed
aauto: define a restricted version of the MANAGE_USB permission

muhomorr
authored and
thestinger
committed
aauto: add definition of restricted BLUETOOTH_PRIVILEGED permission

muhomorr
authored and
thestinger
committed
aauto: add definition of restricted WIFI_PRIVILEGED permission

muhomorr
authored and
thestinger
committed
aauto: add definition of restricted READ_PRIVILEGED_PHONE_STATE permission

muhomorr
authored and
thestinger
committed
adjust definition of TelecomManager.getUserSelectedOutgoingPhoneAccount()

muhomorr
authored and
thestinger
committed
aauto: support using aauto USB accessory activity as a default activity

muhomorr
authored and
thestinger
committed
aauto: define ASSOCIATE_COMPANION_DEVICES_RESTRICTED permission

muhomorr
authored and
thestinger
committed
aauto: support allowing association with "automotive projection" devices

muhomorr
authored and
thestinger
committed
aauto: support granting privileged permissions via PackageHooks

muhomorr
authored and
thestinger
committed
hide from Aurora Store packages that it's not allowed to update

muhomorr
authored and
thestinger
committed
run full explicit GC in SystemUI and system_server after locking
thestinger
committed
add UsbManager API for configuring USB port security state

muhomorr
authored and
thestinger
committed
add setting for USB port security state

muhomorr
authored and
thestinger
committed
Do not use filter calling uid parameter originally intended for instant apps

quh4gko8
authored and
thestinger
committed
Disallow the camera shortcut toggle from the lockscreen

neelchauhan
authored and
thestinger
committed
disable support for adoptable storage

muhomorr
authored and
thestinger
committed
add a helper class for wiping eUICCs

muhomorr
authored and
thestinger
committed
extend the upstream wipe-without-reboot implementation

muhomorr
authored and
thestinger
committed
add duress password feature

muhomorr
authored and
thestinger
committed
add lock_settings shell commands for testing the duress password feature

muhomorr
authored and
thestinger
committed
add lock_settings shell command option for printing executed Weaver ops

muhomorr
authored and
thestinger
committed
add a test for the duress password feature

muhomorr
authored and
thestinger
committed
fix ApplicationInfo flag initialization being skipped in some cases

muhomorr
authored and
thestinger
committed
stub out reads of hidden system settings in Google's text-to-speech app

muhomorr
authored and
thestinger
committed
show a deprecation warning dialog on each launch of a 32-bit app

muhomorr
authored and
thestinger
committed
better 32-bit deprecation warning
thestinger
committed
fix touch-to-unlock on Google devices with side fingerprint scanner

muhomorr
authored and
thestinger
committed
add setting for alternative touchscreen mode

muhomorr
authored and
thestinger
committed
don't report some android.hardware.bluetooth-service.bcmbtlinux crashes

muhomorr
authored and
thestinger
committed
don't report some vendor.google.wifi_ext-service-vendor crashes

muhomorr
authored and
thestinger
committed
sysconfig: support enabling association restrictions without exemptions

muhomorr
authored and
thestinger
committed
add config for Pixel Health app

muhomorr
authored and
thestinger
committed
15: enable signature matching of updated system apps for all such apps

muhomorr
authored and
thestinger
committed
15: new PermissionService: implement shouldBlockGrantRuntimePermission()

muhomorr
authored and
thestinger
committed
15: new PermissionService: implement updatePermissions()

muhomorr
authored and
thestinger
committed
15: new PermissionService: implement PackageHooks support

muhomorr
authored and
thestinger
committed
15: new PermissionService: support for special runtime permissions

muhomorr
authored and
thestinger
committed
15: PackageInstallerUI: add option to skip auto-grants of INTERNET perm

muhomorr
authored and
thestinger
committed
temp: unconditionally enable system crash notifications

muhomorr
authored and
thestinger
committed
Revert "temp: unconditionally enable system crash notifications"
thestinger
committed
15: gmscompat: support using GSF 34 on SDK 35

muhomorr
authored and
thestinger
committed
_fixup! PackageHooks: infrastructure for per-package hooks in system_server

muhomorr
authored and
thestinger
committed
_fixup! add config for Pixel Health app

muhomorr
authored and
thestinger
committed
update lint baseline

muhomorr
authored and
thestinger
committed
Reapply "temp: unconditionally enable system crash notifications"

muhomorr
authored and
thestinger
committed
wip: fixup! Support forwarding notifications from other users

muhomorr
authored and
thestinger
committed
gmscompat: adjust to the updated client Dynamite init sequence

muhomorr
authored and
thestinger
committed
add Bundle.toStringDeep()

muhomorr
authored and
thestinger
committed
add handling for early boot-time system journal notifications

muhomorr
authored and
thestinger
committed
add helper class for notifying the user about system_server errors

muhomorr
authored and
thestinger
committed
USB port security API: move implementation to a separate file

muhomorr
authored and
thestinger
committed
USB port security API: redirect errors to status callback

muhomorr
authored and
thestinger
committed
USB port security API: add handling for USB HAL service death

muhomorr
authored and
thestinger
committed
UsbPortSecurityHooks: use a dedicated callbacks thread

muhomorr
authored and
thestinger
committed
UsbPortSecurityHooks: surface errors to the user as a notification

muhomorr
authored and
thestinger
committed
UsbPortSecurityHooks: wait for result callback after updating port state

muhomorr
authored and
thestinger
committed
UsbPortSecurityHooks: move handling of deny_new_usb2 to system_server

muhomorr
authored and
thestinger
committed
fix an upstream race condition in handling of system error files

muhomorr
authored and
thestinger
committed
fixup! wip: fixup! Support forwarding notifications from other users

quh4gko8
authored and
thestinger
committed
bugix: Correct visbility checks for new InternetTile impl

quh4gko8
authored and
thestinger
committed
fixup! add handling for early boot-time system journal notifications

muhomorr
authored and
thestinger
committed
include path of ANR stack traces file in ApplicationErrorReport

muhomorr
authored and
thestinger
committed
don't block reading ANR stack traces file via Unix file permissions

muhomorr
authored and
thestinger
committed
fixup! add APIs for launching LogViewer app

muhomorr
authored and
thestinger
committed
include path of text tombstone file in LogViewer intents

muhomorr
authored and
thestinger
committed
Revert "15: enable signature matching of updated system apps for all such apps"

muhomorr
authored and
thestinger
committed
gmscompat: ignore declarations of READ_GSERVICES and C2DM RECEIVE perms

muhomorr
authored and
thestinger
committed
fixup! disable package parser cache

muhomorr
authored and
thestinger
committed
fixup! infrastructure for passing SELinux flags to the kernel

muhomorr
authored and
thestinger
committed
fixup! 15: new PermissionService: support for special runtime permissions

muhomorr
authored and
thestinger
committed
gmscompat: don't use GSF for fresh installs

muhomorr
authored and
thestinger
committed
Revert "Reapply "temp: unconditionally enable system crash notifications""

muhomorr
authored and
thestinger
committed
gmscompat: add util method for catching SecurityExceptions

muhomorr
authored and
thestinger
committed
fix NPE system_server crash in IMMS.resetDefaultImeLocked()

muhomorr
authored and
thestinger
committed
ignore factory reset protection (FRP)

muhomorr
authored and
thestinger
committed
fix toggle for disabling auto-grant of OTHER_SENSORS permission

muhomorr
authored and
thestinger
committed
fix KGUM.onPostureChanged() NPE SystemUI crash on foldable devices

muhomorr
authored and
thestinger
committed
fixup! gmscompat: don't use GSF for fresh installs

muhomorr
authored and
thestinger
committed
gosps: Persist GrapheneOS-specific package state when archiving an app

quh4gko8
authored and
thestinger
committed
gmscompat: handle lack of SET_BIOMETRIC_DIALOG_ADVANCED permission

muhomorr
authored and
thestinger
committed
fixup! gmscompat: handle lack of SET_BIOMETRIC_DIALOG_ADVANCED permission
thestinger
committed
PackageVerityExt: fix handling of static shared libraries

muhomorr
authored and
thestinger
committed
fix check for the current holder of the Wallet app role

muhomorr
authored and
thestinger
committed
PackageInstaller: fix crash when showing app's first confirmation prompt

muhomorr
authored and
thestinger
committed
gmscompat: make isAndroidAuto() part of system API

muhomorr
authored and
thestinger
committed
disable memory tagging for Pixel Camera Services

muhomorr
authored and
thestinger
committed
don't remove app widgets from user's home screen when the user stops

authored and
thestinger
committed
raise backup transport timeout
thestinger
committed
gmscompat: add stubs for update_engine wrapper

muhomorr
authored and
thestinger
committed
new PermissionService: never auto-grant special perms on package update

muhomorr
authored and
thestinger
committed
partially reset granted special runtime perm state to pre-A15 state

muhomorr
authored and
thestinger
committed
don't spam to the system log buffer from loadAconfigDefaultValues()

muhomorr
authored and
thestinger
committed
include full ApplicationInfo in ApplicationErrorReport objects

muhomorr
authored and
thestinger
committed
gmscompat: adjust to ApplicationErrorReport API change

muhomorr
authored and
thestinger
committed
fixup! add APIs for launching LogViewer app

muhomorr
authored and
thestinger
committed
fixup! improve memory DCL restriction setting

muhomorr
authored and
thestinger
committed
fixup! notify the user about notable system journal entries

muhomorr
authored and
thestinger
committed
don't add OTHER_SENSORS uses-permission to hasCode=false packages

muhomorr
authored and
thestinger
committed
mark automatic OTHER_SENSORS uses-permission as implicitly added

muhomorr
authored and
thestinger
committed
gmscompat: ignore uses-permission in GSF AndroidManifest

muhomorr
authored and
thestinger
committed
gmscompat: fix "is dev build" checks

muhomorr
authored and
thestinger
committed
gmscompat: fix dev-only option for using gmscompat with any app

muhomorr
authored and
thestinger
committed
gmscompat: add dev option to log Service and BroadcastReceiver ops

muhomorr
authored and
thestinger
committed
Revert "PackageVerityExt: fix handling of static shared libraries"

muhomorr
authored and
thestinger
committed
PackageVerityExt: fix handling of static shared libraries, v2

muhomorr
authored and
thestinger
committed
fixup! exempt telephony service from the new package visibility restrictions

muhomorr
authored and
thestinger
committed
gmscompat: fix camel-case of enforceCallingOrSelfManageUsbOrAndroidAuto

muhomorr
authored and
thestinger
committed
gmscompat: fix MANAGE_USB_ANDROID_AUTO not being checked for some calls

muhomorr
authored and
thestinger
committed
USB port security API: integrate deny_new_usb2, plus refactoring

muhomorr
authored and
thestinger
committed
UsbPortSecurityHooks: adjust to port security API change

muhomorr
authored and
thestinger
committed
fix ANR details link not working in profiles and in secondary users

muhomorr
authored and
thestinger
committed
fixup! include full ApplicationInfo in ApplicationErrorReport objects

muhomorr
authored and
thestinger
committed
gmscompat: fix flag overrides being partly ignored on recent versions

muhomorr
authored and
thestinger
committed
add workaround for showShutdownDialog() system_server crash

muhomorr
authored and
thestinger
committed
add utility class for obtaining and keeping track of Binder caller info

muhomorr
authored and
thestinger
committed
MmsServiceBroker: forward caller UID to MmsService

muhomorr
authored and
thestinger
committed
Usage:fix arrayIndexOutOfBoundsException to aviod

lijilou
authored and
thestinger
committed
fix handling of MATCH_ARCHIVED_PACKAGES flag in getPackageUidInternal()

muhomorr
authored and
thestinger
committed
Remove visitPersonUri flagged code

Ioana Alexandru
authored and
thestinger
committed
fixup! PackageInstaller: link "App info" screen from the uninstallation dialog

muhomorr
authored and
thestinger
committed
cscopes: ignore Person.Builder.setUri() when Contact Scopes is enabled

muhomorr
authored and
thestinger
committed

Commits on Nov 15, 2024

fixup! add Bundle.toStringDeep()

muhomorr
authored and
thestinger
committed
gmscompat: fix Android Auto permission check in createAssociation()

muhomorr
authored and
thestinger
committed
gmscompat: fix Android Auto voice commands not working in some cases

muhomorr
authored and
thestinger
committed
gmscompat: stop Play Store from attempting to auto-install some packages

muhomorr
authored and
thestinger
committed
gmscompat: remove unnecessary GmsCompat.maybeEnable()

muhomorr
authored and
thestinger
committed
gmscompat: rework GmsCompatClientService

muhomorr
authored and
thestinger
committed
gmscompat: move ClientPriorityManager to GmsCompat app

muhomorr
authored and
thestinger
committed
gmscompat: add shim for background service starts

muhomorr
authored and
thestinger
committed
Revert "don't report some vendor.google.wifi_ext-service-vendor crashes"

muhomorr
authored and
thestinger
committed
don't report harmless fingerprint-service.goodix crash

muhomorr
authored and
thestinger
committed

Commits on Nov 17, 2024

gmscompat: don't stop apps that use Dynamite modules when GmsCore stops

muhomorr
authored and
thestinger
committed
Lock CE storage and reset strong auth flags on stopping private profiles

quh4gko8
authored and
thestinger
committed
fix mock location not working for missing standard location providers

muhomorr
authored and
thestinger
committed

Commits on Nov 18, 2024

Commits on Nov 23, 2024