b4a92ff791
This change addresses the launch of entitlement UI activities in Headless System User Mode (HSUM) on multi-user devices. HSUM is a configuration where the system user (user 0) does not represent a human user and primarily runs system services. In this mode, the first user set up on the device is not user 0. Modified the EntitlementManager logic to handle the launch of the entitlement UI in multi-user environments, specifically addressing scenarios where HSUM is enabled, which includes: 1. Always launch the UI to the foreground current user. 2. Check whether the current user is allowed to show the UI. This ensures the UI is presented to the appropriate user. Test: Manual 1. Mock requires entitlement 2. adb shell cmd user set-system-user-mode-emulation headless 3. enable hotspot Test: atest TetheringTests:EntitlementManagerTest Fix: 363972541 Change-Id: I950d678741a3f1714f347206fa161bcd7538b402
63 lines
3.4 KiB
XML
63 lines
3.4 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<!--
|
|
/*
|
|
* Copyright (C) 2019 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
-->
|
|
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
|
|
package="com.android.networkstack.tethering"
|
|
android:sharedUserId="android.uid.networkstack">
|
|
|
|
<!-- Permissions must be defined here, and not in the base manifest, as the tethering
|
|
running in the system server process does not need any permission, and having
|
|
privileged permissions added would cause crashes on startup unless they are also
|
|
added to the privileged permissions allowlist for that package. EntitlementManager
|
|
would set exact alarm but declare SCHEDULE_EXACT_ALARM is not necessary here because
|
|
privilege application would be in the allowlist. -->
|
|
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
|
|
<uses-permission android:name="android.permission.BLUETOOTH" />
|
|
<uses-permission android:name="android.permission.BLUETOOTH_CONNECT" />
|
|
<uses-permission android:name="android.permission.BLUETOOTH_PRIVILEGED" />
|
|
<uses-permission android:name="android.permission.BROADCAST_STICKY" />
|
|
<uses-permission android:name="android.permission.CHANGE_NETWORK_STATE" />
|
|
<uses-permission android:name="android.permission.INTERACT_ACROSS_USERS"/>
|
|
<uses-permission android:name="android.permission.MANAGE_USB" />
|
|
<uses-permission android:name="android.permission.MODIFY_PHONE_STATE" />
|
|
<uses-permission android:name="android.permission.QUERY_USERS"/>
|
|
<uses-permission android:name="android.permission.READ_DEVICE_CONFIG" />
|
|
<uses-permission android:name="android.permission.READ_NETWORK_USAGE_HISTORY" />
|
|
<uses-permission android:name="android.permission.READ_PHONE_STATE"/>
|
|
<uses-permission android:name="android.permission.TETHER_PRIVILEGED" />
|
|
<uses-permission android:name="android.permission.UPDATE_APP_OPS_STATS" />
|
|
<uses-permission android:name="android.permission.UPDATE_DEVICE_STATS" />
|
|
<uses-permission android:name="android.permission.WRITE_SETTINGS" />
|
|
<uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
|
|
|
|
<!-- Sending non-protected broadcast from system uid is not allowed. -->
|
|
<protected-broadcast android:name="com.android.server.connectivity.tethering.DISABLE_TETHERING" />
|
|
|
|
<application
|
|
android:process="com.android.networkstack.process"
|
|
android:extractNativeLibs="false"
|
|
android:persistent="true">
|
|
<service android:name="com.android.networkstack.tethering.TetheringService"
|
|
android:permission="android.permission.MAINLINE_NETWORK_STACK"
|
|
android:exported="true">
|
|
<intent-filter>
|
|
<action android:name="android.net.ITetheringConnector"/>
|
|
</intent-filter>
|
|
</service>
|
|
</application>
|
|
</manifest>
|