API-28 control_privapp_permissions issue

anestisb / android-prepare-vendor

Set of scripts to automate AOSP compatible vendor blobs generation from factory images

347 stars 156 forks source link

API-28 control_privapp_permissions issue #131

Closed anestisb closed 5 years ago

anestisb commented 5 years ago

If control_privapp_permissions is set to enforce device does not boot (spotted on sailfish). Create a build with log option to track the apps that create the issue.

anestisb commented 5 years ago

Spotted in sailfish:

01-11 14:06:43.610   916   916 W PackageManager: Privileged permission android.permission.INTERACT_ACROSS_USERS for package com.quicinc.cne.CNEService - not in privapp-permissions whitelist
12-31 22:00:04.943   916   916 W PackageManager: Privileged permission android.permission.INTERACT_ACROSS_USERS for package com.quicinc.cne.CNEService - not in privapp-permissions whitelist

anestisb commented 5 years ago

So it seems that the root cause is despite picking up the factory "system/etc/permissions/privapp-permissions-marlin.xml" file, it gets overwritten from AOSP and misses the following:

-    <privapp-permissions package="com.htc.omadm.trigger">
-        <permission name="android.permission.MODIFY_PHONE_STATE"/>
-    </privapp-permissions>

-        <!-- TODO: to be removed b/72863826 -->
-        <permission name="android.permission.INTERACT_ACROSS_USERS"/>

anestisb commented 5 years ago

Fixed in https://github.com/anestisb/android-prepare-vendor/commit/b0044e175b7c5a00c27b5240e4bc03b5e1803452