tree cd51d97f86f8511ef93162baea87683990c805f7
parent 938c647b7a8647f6fc21fcb86c79f03cc70cdc57
author Manjeet Rulhania <mrulhania@google.com> 1651182625 +0000
committer Manjeet Rulhania <mrulhania@google.com> 1652500504 +0000

Fix duplicate permission privilege escalation

Duplicate permissions definition with different group allows
privilege permission escalation to a different permission group.

Android studio and gradle plugin does not allow duplicate
permissions with different attributes, these tools only allow
if duplicate permissions are exact copies.

Also platform stores permissions in map at multiple places with
permission name as key. This suggests that we can disallow
duplicate permissions during package install/update

Bug: 213323615
Test: AppSecurityTests
Change-Id: I1910dca44104e35a57eba4acfa8188cd9b8626ac
Merged-Id: I34120fff2ec2a158dfa55779d2afd4bbd49487ff
Merged-In: I9bc839836786a0876e67fd73c05f8944bb532249