Revert READ_PHONE_STATE from an install to runtime permission
After all of the sensitive APIs were moved out of READ_PHONE_STATE for
apps targeting R+ READ_PHONE_STATE was downgraded to an install
permission. However this granted apps targeting pre-R access to the
device phone number without user consent. This commit reverts
READ_PHONE_STATE to a runtime permission which will require apps
targeting pre-R to still obtain user consent to access the device
phone number while still preventing access to the phone group and
the other sensitive APIs exposed there.
Bug: 154368168
Test: Manually installed app requesting READ_PHONE_STATE and invoking
getLine1Number; verified without permission granted the method
threw a SecurityException.
Change-Id: I410aa9f287f8fa2b076910e531d833bd87923ccb
1 file changed