Merge changes from topic "sepolicy-genesis" into p9.0
* changes:
bliss: sepolicy: update_engine neverallows
vendor: sepolicy fix build
bliss: add syslog_read perms for matlog
sepolicy: allow settings to read selinux status
sepolicy: Fix init denials
vendor sepolicy genesis v2
diff --git a/config/BoardConfigQcom.mk b/config/BoardConfigQcom.mk
index 28259e6..5582794 100644
--- a/config/BoardConfigQcom.mk
+++ b/config/BoardConfigQcom.mk
@@ -79,6 +79,11 @@
endif
endif
+# Allow a device to manually override which HALs it wants to use
+ifneq ($(OVERRIDE_QCOM_HARDWARE_VARIANT),)
+QCOM_HARDWARE_VARIANT := $(OVERRIDE_QCOM_HARDWARE_VARIANT)
+endif
+
PRODUCT_SOONG_NAMESPACES += \
hardware/qcom/audio-caf/$(QCOM_HARDWARE_VARIANT) \
hardware/qcom/display-caf/$(QCOM_HARDWARE_VARIANT) \
diff --git a/config/common.mk b/config/common.mk
index 63e610b..5a5dee8 100644
--- a/config/common.mk
+++ b/config/common.mk
@@ -78,10 +78,24 @@
PRODUCT_COPY_FILES += \
frameworks/base/data/keyboards/Vendor_045e_Product_028e.kl:system/usr/keylayout/Vendor_045e_Product_0719.kl
+# Do not include art debug targets
+PRODUCT_ART_TARGET_INCLUDE_DEBUG_BUILD := false
+
+# Strip the local variable table and the local variable type table to reduce
+# the size of the system image. This has no bearing on stack traces, but will
+# leave less information available via JDWP.
+PRODUCT_MINIMIZE_JAVA_DEBUG_INFO := true
+
# World APN list
PRODUCT_COPY_FILES += \
vendor/bliss/prebuilt/common/etc/apns-conf.xml:system/etc/apns-conf.xml
+#permissions
+PRODUCT_COPY_FILES += \
+ vendor/bliss/prebuilt/etc/permissions/privapp-permissions-bliss.xml:system/etc/permissions/privapp-permissions-bliss.xml \
+ vendor/bliss/prebuilt/etc/permissions/privapp-permissions-elgoog.xml:system/etc/permissions/privapp-permissions-elgoog.xml
+
+
# whitelist packages for location providers not in system
PRODUCT_PROPERTY_OVERRIDES += \
ro.services.whitelist.packagelist=com.google.android.gms
diff --git a/overlay/common/packages/apps/Settings/res/values/styles.xml b/overlay/common/packages/apps/Settings/res/values/styles.xml
new file mode 100644
index 0000000..a4baa92
--- /dev/null
+++ b/overlay/common/packages/apps/Settings/res/values/styles.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Copyright (C) 2006 The Android Open Source Project
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+-->
+
+<resources>
+
+ <style name="TextAppearance.SearchBar" parent="@*android:style/TextAppearance.Material.Widget.Toolbar.Subtitle">
+ <item name="android:textSize">16dp</item>
+ <item name="android:layout_gravity">center</item>
+ </style>
+
+ <style name="SuggestionCardText">
+ <item name="android:textAlignment">center</item>
+ </style>
+
+ <style name="SuggestionCardIcon">
+ <item name="android:layout_centerHorizontal">true</item>
+ <item name="android:layout_alignParentStart">false</item>
+ </style>
+
+</resources>
diff --git a/prebuilt/etc/permissions/privapp-permissions-bliss.xml b/prebuilt/etc/permissions/privapp-permissions-bliss.xml
new file mode 100644
index 0000000..ebbd6a0
--- /dev/null
+++ b/prebuilt/etc/permissions/privapp-permissions-bliss.xml
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+ <privapp-permissions package="com.android.settings">
+ <permission name="android.permission.ACCESS_FONT_MANAGER"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="android.ext.services">
+ <permission name="android.permission.PROVIDE_RESOLVER_RANKER_SERVICE"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.android.apps.tag">
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ </privapp-permissions>
+
+ <!-- Additional permissions on top of privapp-permissions-platform.xml -->
+ <privapp-permissions package="com.android.dialer">
+ <permission name="android.permission.STATUS_BAR"/>
+ </privapp-permissions>
+
+ <!-- Additional permissions on top of privapp-permissions-platform.xml -->
+ <privapp-permissions package="com.android.launcher3">
+ <permission name="android.permission.CHANGE_OVERLAY_PACKAGES"/>
+ </privapp-permissions>
+
+ <!-- Additional permissions on top of privapp-permissions-platform.xml -->
+ <privapp-permissions package="com.android.phone">
+ <permission name="android.permission.OVERRIDE_WIFI_CONFIG"/>
+ </privapp-permissions>
+
+ <!-- Additional permissions on top of privapp-permissions-platform.xml -->
+ <privapp-permissions package="com.android.systemui">
+ <permission name="com.android.permission.WRITE_EMBEDDED_SUBSCRIPTIONS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.turbo">
+ <permission name="android.permission.BATTERY_STATS"/>
+ <permission name="android.permission.DUMP"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.READ_LOGS"/>
+ <permission name="android.permission.REBOOT"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="eu.chainfire.opendelta">
+ <permission name="android.permission.ACCESS_CACHE_FILESYSTEM"/>
+ <permission name="android.permission.REBOOT"/>
+ <permission name="android.permission.RECOVERY"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="org.omnirom.logcat">
+ <permission name="android.permission.READ_LOGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="org.omnirom.omnistyle">
+ <permission name="android.permission.CHANGE_OVERLAY_PACKAGES"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="org.omnirom.omniswitch">
+ <permission name="android.permission.CHANGE_OVERLAY_PACKAGES"/>
+ <permission name="android.permission.FORCE_STOP_PACKAGES"/>
+ <permission name="android.permission.MANAGE_ACTIVITY_STACKS"/>
+ <permission name="android.permission.MANAGE_USERS"/>
+ <permission name="android.permission.READ_FRAME_BUFFER"/>
+ <permission name="android.permission.REAL_GET_TASKS"/>
+ <permission name="android.permission.START_TASKS_FROM_RECENTS"/>
+ <permission name="android.permission.STOP_APP_SWITCHES"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="org.omnirom.omnibrain">
+ <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ <permission name="android.permission.REAL_GET_TASKS"/>
+ </privapp-permissions>
+
+</permissions>
diff --git a/prebuilt/etc/permissions/privapp-permissions-elgoog.xml b/prebuilt/etc/permissions/privapp-permissions-elgoog.xml
new file mode 100644
index 0000000..5809822
--- /dev/null
+++ b/prebuilt/etc/permissions/privapp-permissions-elgoog.xml
@@ -0,0 +1,475 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+ ~ Copyright (C) 2017 The Android Open Source Project
+ ~
+ ~ Licensed under the Apache License, Version 2.0 (the "License");
+ ~ you may not use this file except in compliance with the License.
+ ~ You may obtain a copy of the License at
+ ~
+ ~ http://www.apache.org/licenses/LICENSE-2.0
+ ~
+ ~ Unless required by applicable law or agreed to in writing, software
+ ~ distributed under the License is distributed on an "AS IS" BASIS,
+ ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ ~ See the License for the specific language governing permissions and
+ ~ limitations under the License
+ -->
+
+<!--
+This XML file declares which signature|privileged permissions should be granted to privileged
+applications on GMS or Google-branded devices.
+It allows additional grants on top of privapp-permissions-platform.xml
+-->
+<permissions>
+ <privapp-permissions package="com.android.carrierconfig">
+ <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.android.connectivity.metrics">
+ <permission name="android.permission.DUMP"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>.
+ <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.android.hotspot2">
+ <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+ <permission name="android.permission.READ_WIFI_CREDENTIAL"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.android.hotwordenrollment.okgoogle">
+ <permission name="android.permission.MANAGE_VOICE_KEYPHRASES"/>
+ <permission name="android.permission.RECEIVE_BOOT_COMPLETED"/>
+ <permission name="android.permission.MANAGE_VOICE_KEYPHRASES"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.android.hotwordenrollment.xgoogle">
+ <permission name="android.permission.MANAGE_VOICE_KEYPHRASES"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.android.hotwordenrollment.tgoogle">
+ <permission name="android.permission.MANAGE_VOICE_KEYPHRASES"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.android.hotwordenrollment">
+ <permission name="android.permission.MANAGE_VOICE_KEYPHRASES"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.android.systemui">
+ <permission name="com.android.permission.WRITE_EMBEDDED_SUBSCRIPTIONS"/>
+ <permission name="android.permission.SET_WALLPAPER_COMPONENT"/>
+ <permission name="android.permission.LOCATION_HARDWARE"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.android.vending">
+ <permission name="android.permission.ALLOCATE_AGGRESSIVE"/>
+ <permission name="android.permission.BACKUP"/>
+ <permission name="android.permission.BATTERY_STATS"/>
+ <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+ <permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST"/>
+ <permission name="android.permission.CLEAR_APP_CACHE"/>
+ <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+ <permission name="android.permission.DELETE_PACKAGES"/>
+ <permission name="android.permission.DUMP"/>
+ <permission name="android.permission.FORCE_STOP_PACKAGES"/>
+ <permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
+ <permission name="android.permission.GET_APP_OPS_STATS"/>
+ <permission name="android.permission.INSTALL_PACKAGES"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.MANAGE_USERS"/>
+ <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+ <permission name="android.permission.PACKAGE_VERIFICATION_AGENT"/>
+ <permission name="android.permission.REAL_GET_TASKS"/>
+ <permission name="android.permission.SEND_SMS_NO_CONFIRMATION"/>
+ <permission name="android.permission.SET_PREFERRED_APPLICATIONS"/>
+ <permission name="android.permission.STATUS_BAR"/>
+ <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+ <permission name="android.permission.UPDATE_DEVICE_STATS"/>
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ <permission name="android.permission.REBOOT"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.gcs">
+ <permission name="android.permission.CONTROL_VPN"/>
+ <permission name="android.permission.GET_APP_OPS_STATS"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.OVERRIDE_WIFI_CONFIG"/>
+ <permission name="android.permission.SCORE_NETWORKS"/>
+ <permission name="android.permission.UPDATE_APP_OPS_STATS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.helprtc">
+ <permission name="android.permission.CAPTURE_VIDEO_OUTPUT"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.nexuslauncher">
+ <permission name="android.permission.BIND_APPWIDGET"/>
+ <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.pixelclauncher">
+ <permission name="android.permission.BIND_APPWIDGET"/>
+ <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.pixelmigrate">
+ <permission name="android.permission.ACCESS_NETWORK_STATE"/>
+ <permission name="android.permission.FOREGROUND_SERVICE"/>
+ <permission name="android.permission.INTERNET"/>
+ <permission name="android.permission.MANAGE_USB"/>
+ <permission name="android.permission.MANAGE_USERS"/>
+ <permission name="android.permission.NFC"/>
+ <permission name="android.permission.READ_CALL_LOG"/>
+ <permission name="android.permission.READ_CONTACTS"/>
+ <permission name="android.permission.READ_EXTERNAL_STORAGE"/>
+ <permission name="android.permission.READ_PHONE_NUMBERS"/>
+ <permission name="android.permission.RECEIVE_BOOT_COMPLETED"/>
+ <permission name="android.permission.RECEIVE_SMS"/>
+ <permission name="android.permission.SET_WALLPAPER"/>
+ <permission name="android.permission.WAKE_LOCK"/>
+ <permission name="android.permission.WRITE_CALL_LOG"/>
+ <permission name="android.permission.WRITE_CONTACTS"/>
+ <permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.turbo">
+ <permission name="android.permission.BATTERY_STATS"/>
+ <permission name="android.permission.DUMP"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.READ_LOGS"/>
+ <permission name="android.permission.REBOOT"/>
+ <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.nbu.files">
+ <permission name="android.permission.DELETE_PACKAGES"/>
+ <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+ <permission name="android.permission.DELETE_CACHE_FILES"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.work.oobconfig">
+ <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+ <permission name="android.permission.DISPATCH_PROVISIONING_MESSAGE"/>
+ <permission name="android.permission.MANAGE_USERS"/>
+ <permission name="android.permission.MANAGE_CARRIER_OEM_UNLOCK_STATE" />
+ <permission name="android.permission.MASTER_CLEAR"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.backuptransport">
+ <permission name="android.permission.BACKUP"/>
+ <permission name="android.permission.UPDATE_DEVICE_STATS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.carrier">
+ <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ <permission name="android.permission.WRITE_APN_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.carrierentitlement">
+ <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ <permission name="android.permission.WRITE_APN_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.carriersetup">
+ <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ <permission name="android.permission.WRITE_APN_SETTINGS"/>
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.configupdater">
+ <permission name="android.permission.UPDATE_CONFIG"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.contacts">
+ <permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
+ <permission name="com.android.voicemail.permission.READ_VOICEMAIL"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.crashuploader">
+ <permission name="android.permission.READ_LOGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.dialer">
+ <permission name="android.permission.ALLOW_ANY_CODEC_FOR_PLAYBACK"/>
+ <permission name="android.permission.CONTROL_INCALL_EXPERIENCE"/>
+ <permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.REGISTER_CONNECTION_MANAGER"/>
+ <permission name="android.permission.STATUS_BAR"/>
+ <permission name="android.permission.STOP_APP_SWITCHES"/>
+ <permission name="com.android.voicemail.permission.READ_VOICEMAIL"/>
+ <permission name="com.android.voicemail.permission.WRITE_VOICEMAIL"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.euicc">
+ <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ <permission name="android.permission.REBOOT"/>
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ <permission name="com.android.permission.WRITE_EMBEDDED_SUBSCRIPTIONS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.feedback">
+ <permission name="android.permission.READ_LOGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.gms">
+ <permission name="android.permission.ACCESS_NETWORK_CONDITIONS"/>
+ <permission name="android.permission.ACTIVITY_EMBEDDING"/>
+ <permission name="android.permission.BACKUP"/>
+ <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+ <permission name="android.permission.CALL_PRIVILEGED"/>
+ <permission name="android.permission.CAPTURE_AUDIO_HOTWORD"/>
+ <permission name="android.permission.CAPTURE_AUDIO_OUTPUT"/>
+ <permission name="android.permission.CAPTURE_SECURE_VIDEO_OUTPUT"/>
+ <permission name="android.permission.CAPTURE_VIDEO_OUTPUT"/>
+ <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+ <permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST"/>
+ <permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
+ <permission name="android.permission.CONTROL_INCALL_EXPERIENCE"/>
+ <permission name="android.permission.DISPATCH_PROVISIONING_MESSAGE"/>
+ <permission name="android.permission.DUMP"/>
+ <permission name="android.permission.GET_APP_OPS_STATS"/>
+ <permission name="android.permission.INTENT_FILTER_VERIFICATION_AGENT"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.INVOKE_CARRIER_SETUP"/>
+ <permission name="android.permission.LOCAL_MAC_ADDRESS"/>
+ <permission name="android.permission.LOCATION_HARDWARE"/>
+ <permission name="android.permission.MANAGE_ACTIVITY_STACKS"/>
+ <permission name="android.permission.MANAGE_DEVICE_ADMINS"/>
+ <permission name="android.permission.MANAGE_SOUND_TRIGGER"/>
+ <permission name="android.permission.MANAGE_SUBSCRIPTION_PLANS"/>
+ <permission name="android.permission.MANAGE_USB"/>
+ <permission name="android.permission.MANAGE_VOICE_KEYPHRASES"/>
+ <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+ <permission name="android.permission.MODIFY_NETWORK_ACCOUNTING"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.NOTIFY_PENDING_SYSTEM_UPDATE"/>
+ <permission name="android.permission.OBSERVE_GRANT_REVOKE_PERMISSIONS"/>
+ <permission name="android.permission.OVERRIDE_WIFI_CONFIG"/>
+ <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+ <permission name="android.permission.PROVIDE_RESOLVER_RANKER_SERVICE" />
+ <permission name="android.permission.PROVIDE_TRUST_AGENT"/>
+ <permission name="android.permission.READ_DREAM_STATE"/>
+ <permission name="android.permission.READ_LOGS"/>
+ <permission name="android.permission.READ_OEM_UNLOCK_STATE"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ <permission name="android.permission.READ_WIFI_CREDENTIAL"/>
+ <permission name="android.permission.REAL_GET_TASKS"/>
+ <permission name="android.permission.RECEIVE_DATA_ACTIVITY_CHANGE"/>
+ <permission name="android.permission.RECOVERY"/>
+ <permission name="android.permission.REGISTER_CALL_PROVIDER"/>
+ <permission name="android.permission.SCORE_NETWORKS"/>
+ <permission name="android.permission.SEND_SMS_NO_CONFIRMATION"/>
+ <permission name="android.permission.SET_TIME"/>
+ <permission name="android.permission.SET_TIME_ZONE"/>
+ <permission name="android.permission.START_TASKS_FROM_RECENTS"/>
+ <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+ <permission name="android.permission.TETHER_PRIVILEGED"/>
+ <permission name="android.permission.UPDATE_APP_OPS_STATS"/>
+ <permission name="android.permission.USER_ACTIVITY"/>
+ <permission name="com.android.voicemail.permission.READ_VOICEMAIL"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.googlequicksearchbox">
+ <permission name="android.permission.BIND_APPWIDGET"/>
+ <permission name="android.permission.CALL_PRIVILEGED"/>
+ <permission name="android.permission.CAPTURE_AUDIO_HOTWORD"/>
+ <permission name="android.permission.GLOBAL_SEARCH"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.MANAGE_VOICE_KEYPHRASES"/>
+ <permission name="android.permission.MEDIA_CONTENT_CONTROL"/>
+ <permission name="android.permission.REAL_GET_TASKS"/>
+ <permission name="android.permission.SET_MEDIA_KEY_LISTENER"/>
+ <permission name="android.permission.SET_VOLUME_KEY_LONG_PRESS_LISTENER"/>
+ <permission name="android.permission.STATUS_BAR"/>
+ <permission name="android.permission.STOP_APP_SWITCHES"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.searchlite">
+ <permission name="android.permission.BIND_APPWIDGET"/>
+ <permission name="android.permission.CAPTURE_AUDIO_HOTWORD"/>
+ <permission name="android.permission.GLOBAL_SEARCH"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.MANAGE_VOICE_KEYPHRASES"/>
+ <permission name="android.permission.MEDIA_CONTENT_CONTROL"/>
+ <permission name="android.permission.REAL_GET_TASKS"/>
+ <permission name="android.permission.STATUS_BAR"/>
+ <permission name="android.permission.STOP_APP_SWITCHES"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.speechservices">
+ <permission name="android.permission.BIND_APPWIDGET" />
+ <permission name="android.permission.CAPTURE_AUDIO_HOTWORD" />
+ <permission name="android.permission.GLOBAL_SEARCH" />
+ <permission name="android.permission.INTERACT_ACROSS_USERS" />
+ <permission name="android.permission.MANAGE_VOICE_KEYPHRASES" />
+ <permission name="android.permission.MEDIA_CONTENT_CONTROL" />
+ <permission name="android.permission.REAL_GET_TASKS" />
+ <permission name="android.permission.STATUS_BAR" />
+ <permission name="android.permission.STOP_APP_SWITCHES" />
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.gsf">
+ <permission name="android.permission.ACCESS_CACHE_FILESYSTEM"/>
+ <permission name="android.permission.BACKUP"/>
+ <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+ <permission name="android.permission.DUMP"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.INVOKE_CARRIER_SETUP"/>
+ <permission name="android.permission.MANAGE_USERS"/>
+ <permission name="android.permission.MASTER_CLEAR"/>
+ <permission name="android.permission.READ_DREAM_STATE"/>
+ <permission name="android.permission.READ_LOGS"/>
+ <permission name="android.permission.READ_NETWORK_USAGE_HISTORY"/>
+ <permission name="android.permission.REBOOT"/>
+ <permission name="android.permission.RECEIVE_DATA_ACTIVITY_CHANGE"/>
+ <permission name="android.permission.RECOVERY"/>
+ <permission name="android.permission.SET_TIME"/>
+ <permission name="android.permission.STATUS_BAR"/>
+ <permission name="android.permission.UPDATE_DEVICE_STATS"/>
+ <permission name="android.permission.WRITE_GSERVICES"/>
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.hiddenmenu">
+ <permission name="android.permission.CALL_PRIVILEGED"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ <permission name="android.permission.REBOOT"/>
+ <permission name="android.permission.WRITE_APN_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.ims">
+ <permission name="android.permission.BIND_IMS_SERVICE"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.onetimeinitializer">
+ <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.packageinstaller">
+ <permission name="android.permission.CLEAR_APP_CACHE"/>
+ <permission name="android.permission.DELETE_PACKAGES"/>
+ <permission name="android.permission.INSTALL_PACKAGES"/>
+ <permission name="android.permission.MANAGE_USERS"/>
+ <permission name="android.permission.OBSERVE_GRANT_REVOKE_PERMISSIONS"/>
+ <permission name="android.permission.UPDATE_APP_OPS_STATS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.partnersetup">
+ <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+ <permission name="android.permission.CHANGE_CONFIGURATION"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.setupwizard">
+ <permission name="android.permission.BACKUP"/>
+ <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+ <permission name="android.permission.CHANGE_CONFIGURATION"/>
+ <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+ <permission name="android.permission.DISPATCH_PROVISIONING_MESSAGE"/>
+ <permission name="android.permission.INVOKE_CARRIER_SETUP"/>
+ <permission name="android.permission.LOCAL_MAC_ADDRESS"/>
+ <permission name="android.permission.MANAGE_DEVICE_ADMINS"/>
+ <permission name="android.permission.MANAGE_FINGERPRINT"/>
+ <permission name="android.permission.MANAGE_USB"/>
+ <permission name="android.permission.MANAGE_USERS"/>
+ <permission name="android.permission.MASTER_CLEAR"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.NOTIFICATION_DURING_SETUP"/>
+ <permission name="android.permission.OVERRIDE_WIFI_CONFIG"/>
+ <permission name="android.permission.PERFORM_CDMA_PROVISIONING"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ <permission name="android.permission.REBOOT"/>
+ <permission name="android.permission.SET_TIME"/>
+ <permission name="android.permission.SET_TIME_ZONE"/>
+ <permission name="android.permission.SHUTDOWN"/>
+ <permission name="android.permission.STATUS_BAR"/>
+ <permission name="android.permission.WRITE_APN_SETTINGS"/>
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.storagemanager">
+ <permission name="android.permission.DELETE_PACKAGES"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.MANAGE_USERS"/>
+ <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.tag">
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.tetheringentitlement">
+ <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ <permission name="android.permission.WRITE_APN_SETTINGS"/>
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.tv">
+ <permission name="android.permission.CHANGE_HDMI_CEC_ACTIVE_SOURCE"/>
+ <permission name="android.permission.DVB_DEVICE"/>
+ <permission name="android.permission.GLOBAL_SEARCH"/>
+ <permission name="android.permission.HDMI_CEC"/>
+ <permission name="android.permission.MODIFY_PARENTAL_CONTROLS"/>
+ <permission name="android.permission.READ_CONTENT_RATING_SYSTEMS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.volta">
+ <permission name="android.permission.BATTERY_STATS"/>
+ <permission name="android.permission.DUMP"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+ <permission name="android.permission.REAL_GET_TASKS"/>
+ <permission name="android.permission.REBOOT"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.wallpaper">
+ <permission name="android.permission.READ_WALLPAPER_INTERNAL"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.wfcactivation">
+ <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.READ_LOGS"/>
+ <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+ <permission name="android.permission.WRITE_APN_SETTINGS"/>
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.intelligence.sense">
+ <permission name="android.permission.CAPTURE_AUDIO_HOTWORD"/>
+ <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+ <permission name="android.permission.LOCATION_HARDWARE"/>
+ <permission name="android.permission.MANAGE_SOUND_TRIGGER"/>
+ <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+ <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+ </privapp-permissions>
+
+ <privapp-permissions package="com.android.timezone.updater">
+ <permission name="android.permission.UPDATE_TIME_ZONE_RULES" />
+ </privapp-permissions>
+
+ <privapp-permissions package="com.google.android.apps.wellbeing">
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ </privapp-permissions>
+</permissions>