tree 3723583f41a8f3dc81dd5c8e3833a4d4f07aa011
parent a95de94fd4f8260991e9934c733d6bfba8dd1fa3
author Hai Zhang <zhanghai@google.com> 1616383130 +0000
committer Hai Zhang <zhanghai@google.com> 1616387802 +0000

Fix all runtime permissions being considered changing protection from
non-runtime on first boot.

1. Don't check against a newly created permission object, as it will
always have signature protection and be considered non-runtime.

2. "Placeholder" permissions of TYPE_CONFIG shouldn't count as an
existing permission, as they are only used for assigning GIDs.

Bug: 183304624
Test: manual
Test: atest PermissionEscalationTest (from ag/12980961)
Change-Id: I39055a914a8575c754a3a4def2b2a31071605986