tree f4ba5e0d12a9b85b17cc83455e6ace1e9dc4ce78
parent 247b2acf94930eedceab4411a68406841f470b30
author Aishwarya Mallampati <amallampati@google.com> 1667000360 +0000
committer Aishwarya Mallampati <amallampati@google.com> 1685040765 +0000

DO NOT MERGE Grant carrier privileges if package has carrier config access.

TelephonyManager#hasCarrierPrivileges internally uses
SubscriptionManager#canManageSubscription to decide whether to grant
carrier privilege status to an app or not.
SubscriptionManager#canManageSubscription returns true if caller APK's
certificate matches with one of the mNativeAccessRules or
mCarrierConfigAccessRules. This over-grants carrier privilege status
to apps that only has mNativeAccessRules.
Carrier privilege status should
be granted to the caller APK only if it's certificate matches with one
of mCarrierConfigAccessRules.
Replaced SubscriptionManager#canManageSubscription with
PhoneInterfaceManager#hasCarrierConfigAccess which returns true only if
caller APK certificates matches with one of mCarrierConfigAccessRules of
the given subscription.

Bug: 226593252
Test: Manual Testing as explained in b/226593252#comment51
      atest CtsTelephonyTestCases
      Flashed build on raven-userdebug and performed basic funtionality
      tests

Change-Id: I6899de902e6e3ffda47b48d0ae806ac9c17ee2a6