The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 1 | <?xml version="1.0" encoding="utf-8"?> |
| 2 | <!-- Copyright (C) 2008 The Android Open Source Project |
| 3 | |
| 4 | Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | you may not use this file except in compliance with the License. |
| 6 | You may obtain a copy of the License at |
Chien-Yu Chen | 75cade0 | 2016-01-11 10:56:21 -0800 | [diff] [blame] | 7 | |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 8 | http://www.apache.org/licenses/LICENSE-2.0 |
Chien-Yu Chen | 75cade0 | 2016-01-11 10:56:21 -0800 | [diff] [blame] | 9 | |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 10 | Unless required by applicable law or agreed to in writing, software |
| 11 | distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | See the License for the specific language governing permissions and |
| 14 | limitations under the License. |
| 15 | --> |
| 16 | |
| 17 | <!-- This file is used to define the mappings between lower-level system |
| 18 | user and group IDs and the higher-level permission names managed |
| 19 | by the platform. |
| 20 | |
| 21 | Be VERY careful when editing this file! Mistakes made here can open |
| 22 | big security holes. |
| 23 | --> |
| 24 | <permissions> |
| 25 | |
| 26 | <!-- ================================================================== --> |
| 27 | <!-- ================================================================== --> |
| 28 | <!-- ================================================================== --> |
| 29 | |
| 30 | <!-- The following tags are associating low-level group IDs with |
| 31 | permission names. By specifying such a mapping, you are saying |
| 32 | that any application process granted the given permission will |
| 33 | also be running with the given group ID attached to its process, |
| 34 | so it can perform any filesystem (read, write, execute) operations |
| 35 | allowed for that group. --> |
| 36 | |
| 37 | <permission name="android.permission.BLUETOOTH_ADMIN" > |
| 38 | <group gid="net_bt_admin" /> |
| 39 | </permission> |
| 40 | |
| 41 | <permission name="android.permission.BLUETOOTH" > |
| 42 | <group gid="net_bt" /> |
| 43 | </permission> |
| 44 | |
Matthew Xie | fca9d63 | 2012-10-04 12:25:28 -0700 | [diff] [blame] | 45 | <permission name="android.permission.BLUETOOTH_STACK" > |
Ajay Panicker | 35cb698 | 2016-09-20 11:18:14 -0700 | [diff] [blame] | 46 | <group gid="bluetooth" /> |
Pavlin Radoslavov | 7016625 | 2015-11-23 17:13:25 -0800 | [diff] [blame] | 47 | <group gid="wakelock" /> |
Siarhei Vishniakou | 9e08956 | 2017-05-08 15:42:14 -0700 | [diff] [blame] | 48 | <group gid="uhid" /> |
Matthew Xie | fca9d63 | 2012-10-04 12:25:28 -0700 | [diff] [blame] | 49 | </permission> |
| 50 | |
fredc | 0f42037 | 2012-04-12 00:02:00 -0700 | [diff] [blame] | 51 | <permission name="android.permission.NET_TUNNELING" > |
| 52 | <group gid="vpn" /> |
| 53 | </permission> |
| 54 | |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 55 | <permission name="android.permission.INTERNET" > |
| 56 | <group gid="inet" /> |
| 57 | </permission> |
| 58 | |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 59 | <permission name="android.permission.READ_LOGS" > |
| 60 | <group gid="log" /> |
| 61 | </permission> |
| 62 | |
Mike Lockwood | 1e23db4 | 2011-04-22 07:05:21 -0700 | [diff] [blame] | 63 | <permission name="android.permission.WRITE_MEDIA_STORAGE" > |
Jeff Sharkey | 5517b73 | 2017-03-07 14:20:03 -0700 | [diff] [blame] | 64 | <group gid="media_rw" /> |
Jeff Sharkey | 32e80d7 | 2015-07-06 09:45:55 -0700 | [diff] [blame] | 65 | <group gid="sdcard_rw" /> |
Mike Lockwood | 1e23db4 | 2011-04-22 07:05:21 -0700 | [diff] [blame] | 66 | </permission> |
| 67 | |
Mike Lockwood | 10bc111 | 2011-01-10 08:24:08 -0500 | [diff] [blame] | 68 | <permission name="android.permission.ACCESS_MTP" > |
| 69 | <group gid="mtp" /> |
| 70 | </permission> |
| 71 | |
Ramesh Sudini | 0e7b5a0 | 2011-03-28 09:18:31 -0500 | [diff] [blame] | 72 | <permission name="android.permission.NET_ADMIN" > |
| 73 | <group gid="net_admin" /> |
| 74 | </permission> |
| 75 | |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 76 | <!-- The group that /cache belongs to, linked to the permission |
| 77 | set on the applications that can access /cache --> |
| 78 | <permission name="android.permission.ACCESS_CACHE_FILESYSTEM" > |
| 79 | <group gid="cache" /> |
| 80 | </permission> |
| 81 | |
| 82 | <!-- RW permissions to any system resources owned by group 'diag'. |
| 83 | This is for carrier and manufacture diagnostics tools that must be |
| 84 | installable from the framework. Be careful. --> |
| 85 | <permission name="android.permission.DIAGNOSTIC" > |
| 86 | <group gid="input" /> |
| 87 | <group gid="diag" /> |
| 88 | </permission> |
| 89 | |
Jeff Sharkey | 9e18fd1 | 2011-05-02 17:51:29 -0700 | [diff] [blame] | 90 | <!-- Group that can read detailed network usage statistics --> |
| 91 | <permission name="android.permission.READ_NETWORK_USAGE_HISTORY"> |
| 92 | <group gid="net_bw_stats" /> |
| 93 | </permission> |
| 94 | |
| 95 | <!-- Group that can modify how network statistics are accounted --> |
Jeff Sharkey | 9f09e6a7 | 2017-06-26 11:24:47 -0600 | [diff] [blame] | 96 | <permission name="android.permission.UPDATE_DEVICE_STATS"> |
Jeff Sharkey | 9e18fd1 | 2011-05-02 17:51:29 -0700 | [diff] [blame] | 97 | <group gid="net_bw_acct" /> |
| 98 | </permission> |
| 99 | |
Doug Zongker | b616f0c | 2013-01-29 09:05:21 -0800 | [diff] [blame] | 100 | <permission name="android.permission.LOOP_RADIO" > |
| 101 | <group gid="loop_radio" /> |
| 102 | </permission> |
| 103 | |
Jeff Sharkey | 270e1f4 | 2014-10-01 16:02:05 -0700 | [diff] [blame] | 104 | <!-- Hotword training apps sometimes need a GID to talk with low-level |
| 105 | hardware; give them audio for now until full HAL support is added. --> |
| 106 | <permission name="android.permission.MANAGE_VOICE_KEYPHRASES"> |
| 107 | <group gid="audio" /> |
| 108 | </permission> |
| 109 | |
Tomasz Wasilczyk | df77643 | 2017-07-21 14:07:09 -0700 | [diff] [blame] | 110 | <permission name="android.permission.ACCESS_BROADCAST_RADIO" > |
Andy Hung | ed0ea40 | 2015-10-30 14:11:46 -0700 | [diff] [blame] | 111 | <!-- /dev/fm is gid media, not audio --> |
Benson Huang | 981258e | 2014-09-23 10:57:40 +0800 | [diff] [blame] | 112 | <group gid="media" /> |
| 113 | </permission> |
| 114 | |
Svet Ganov | e5313a8 | 2016-04-11 09:59:56 -0700 | [diff] [blame] | 115 | <!-- These are permissions that were mapped to gids but we need |
| 116 | to keep them here until an upgrade from L to the current |
| 117 | version is to be supported. These permissions are built-in |
| 118 | and in L were not stored in packages.xml as a result if they |
| 119 | are not defined here while parsing packages.xml we would |
| 120 | ignore these permissions being granted to apps and not |
| 121 | propagate the granted state. From N we are storing the |
| 122 | built-in permissions in packages.xml as the saved storage |
| 123 | is negligible (one tag with the permission) compared to |
| 124 | the fragility as one can remove a built-in permission which |
| 125 | no longer needs to be mapped to gids and break grant propagation. --> |
| 126 | <permission name="android.permission.READ_EXTERNAL_STORAGE" /> |
| 127 | <permission name="android.permission.WRITE_EXTERNAL_STORAGE" /> |
| 128 | |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 129 | <!-- ================================================================== --> |
| 130 | <!-- ================================================================== --> |
| 131 | <!-- ================================================================== --> |
| 132 | |
| 133 | <!-- The following tags are assigning high-level permissions to specific |
| 134 | user IDs. These are used to allow specific core system users to |
| 135 | perform the given operations with the higher-level framework. For |
| 136 | example, we give a wide variety of permissions to the shell user |
| 137 | since that is the user the adb shell runs under and developers and |
| 138 | others should have a fairly open environment in which to |
| 139 | interact with the system. --> |
| 140 | |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 141 | <assign-permission name="android.permission.MODIFY_AUDIO_SETTINGS" uid="media" /> |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 142 | <assign-permission name="android.permission.ACCESS_SURFACE_FLINGER" uid="media" /> |
Eric Laurent | 6dbdc40 | 2011-07-22 09:04:31 -0700 | [diff] [blame] | 143 | <assign-permission name="android.permission.WAKE_LOCK" uid="media" /> |
Marco Nelissen | d983ba5 | 2013-10-03 08:49:36 -0700 | [diff] [blame] | 144 | <assign-permission name="android.permission.UPDATE_DEVICE_STATS" uid="media" /> |
Eino-Ville Talvala | 788717c | 2013-02-15 18:30:15 -0800 | [diff] [blame] | 145 | <assign-permission name="android.permission.UPDATE_APP_OPS_STATS" uid="media" /> |
Chong Zhang | 8e4f4b3 | 2015-12-02 12:18:52 -0800 | [diff] [blame] | 146 | <assign-permission name="android.permission.GET_PROCESS_STATE_AND_OOM_SCORE" uid="media" /> |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 147 | |
Andy Hung | ed0ea40 | 2015-10-30 14:11:46 -0700 | [diff] [blame] | 148 | <assign-permission name="android.permission.MODIFY_AUDIO_SETTINGS" uid="audioserver" /> |
| 149 | <assign-permission name="android.permission.ACCESS_SURFACE_FLINGER" uid="audioserver" /> |
| 150 | <assign-permission name="android.permission.WAKE_LOCK" uid="audioserver" /> |
| 151 | <assign-permission name="android.permission.UPDATE_DEVICE_STATS" uid="audioserver" /> |
| 152 | <assign-permission name="android.permission.UPDATE_APP_OPS_STATS" uid="audioserver" /> |
Svet Ganov | 14ab967 | 2017-11-22 18:49:32 -0800 | [diff] [blame] | 153 | <assign-permission name="android.permission.PACKAGE_USAGE_STATS" uid="audioserver" /> |
Andy Hung | ed0ea40 | 2015-10-30 14:11:46 -0700 | [diff] [blame] | 154 | |
Chien-Yu Chen | 75cade0 | 2016-01-11 10:56:21 -0800 | [diff] [blame] | 155 | <assign-permission name="android.permission.MODIFY_AUDIO_SETTINGS" uid="cameraserver" /> |
| 156 | <assign-permission name="android.permission.ACCESS_SURFACE_FLINGER" uid="cameraserver" /> |
| 157 | <assign-permission name="android.permission.WAKE_LOCK" uid="cameraserver" /> |
| 158 | <assign-permission name="android.permission.UPDATE_DEVICE_STATS" uid="cameraserver" /> |
| 159 | <assign-permission name="android.permission.UPDATE_APP_OPS_STATS" uid="cameraserver" /> |
Emilian Peev | bd88510 | 2017-02-01 16:07:31 +0000 | [diff] [blame] | 160 | <assign-permission name="android.permission.GET_PROCESS_STATE_AND_OOM_SCORE" uid="cameraserver" /> |
Chien-Yu Chen | 75cade0 | 2016-01-11 10:56:21 -0800 | [diff] [blame] | 161 | |
Mathias Agopian | 627e7b5 | 2009-05-21 19:21:59 -0700 | [diff] [blame] | 162 | <assign-permission name="android.permission.ACCESS_SURFACE_FLINGER" uid="graphics" /> |
| 163 | |
Robert Quattlebaum | df41b3e | 2017-08-14 18:34:03 -0700 | [diff] [blame] | 164 | <assign-permission name="android.permission.ACCESS_LOWPAN_STATE" uid="lowpan" /> |
| 165 | <assign-permission name="android.permission.MANAGE_LOWPAN_INTERFACES" uid="lowpan" /> |
| 166 | |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 167 | <!-- This is a list of all the libraries available for application |
| 168 | code to link against. --> |
| 169 | |
Paul Duffin | 6ed0455 | 2017-07-07 12:12:06 +0100 | [diff] [blame] | 170 | <library name="android.test.mock" |
| 171 | file="/system/framework/android.test.mock.jar" /> |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 172 | <library name="android.test.runner" |
| 173 | file="/system/framework/android.test.runner.jar" /> |
Tao Liejun | 05ff98bb | 2009-07-13 15:57:11 -0700 | [diff] [blame] | 174 | <library name="javax.obex" |
Narayan Kamath | 1ed78fb | 2015-01-20 13:44:23 +0000 | [diff] [blame] | 175 | file="/system/framework/javax.obex.jar" /> |
| 176 | <library name="org.apache.http.legacy" |
Paul Duffin | 0a227782 | 2017-07-26 14:24:19 +0100 | [diff] [blame] | 177 | file="/system/framework/org.apache.http.legacy.boot.jar" /> |
Narayan Kamath | 1ed78fb | 2015-01-20 13:44:23 +0000 | [diff] [blame] | 178 | |
Dianne Hackborn | be7c50e | 2014-06-30 14:43:28 -0700 | [diff] [blame] | 179 | <!-- These are the standard packages that are white-listed to always have internet |
| 180 | access while in power save mode, even if they aren't in the foreground. --> |
Felipe Leme | 05515ae | 2016-05-31 17:50:39 -0700 | [diff] [blame] | 181 | <allow-in-power-save package="com.android.providers.downloads" /> |
Dianne Hackborn | be7c50e | 2014-06-30 14:43:28 -0700 | [diff] [blame] | 182 | |
Felipe Leme | 1d0fbed | 2016-04-27 17:11:37 -0700 | [diff] [blame] | 183 | <!-- These are the standard packages that are white-listed to always have internet |
| 184 | access while in data mode, even if they aren't in the foreground. --> |
| 185 | <allow-in-data-usage-save package="com.android.providers.downloads" /> |
| 186 | |
Dianne Hackborn | 3f13c54 | 2017-02-09 11:05:11 -0800 | [diff] [blame] | 187 | <!-- This is a core platform component that needs to freely run in the background --> |
| 188 | <allow-in-power-save package="com.android.cellbroadcastreceiver" /> |
Christopher Tate | 3283079 | 2017-02-10 11:23:43 -0800 | [diff] [blame] | 189 | <allow-in-power-save package="com.android.shell" /> |
Dianne Hackborn | 3f13c54 | 2017-02-09 11:05:11 -0800 | [diff] [blame] | 190 | |
Xiaohui Chen | 9c990c1 | 2015-11-23 12:03:08 -0800 | [diff] [blame] | 191 | <!-- These are the packages that are white-listed to be able to run as system user --> |
| 192 | <system-user-whitelisted-app package="com.android.settings" /> |
| 193 | |
Fyodor Kupolov | 7db5af1 | 2015-07-31 16:50:27 -0700 | [diff] [blame] | 194 | <!-- These are the packages that shouldn't run as system user --> |
| 195 | <system-user-blacklisted-app package="com.android.wallpaper.livepicker" /> |
The Android Open Source Project | 9066cfe | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 196 | </permissions> |