commit 59d85ba15fe575c1d32e74e7049dd8166f3f48b5
author Jeff Sharkey <jsharkey@android.com> Tue Nov 12 15:25:55 2019 -0700
committer Jeff Sharkey <jsharkey@android.com> Tue Nov 12 15:42:36 2019 -0700
tree 28d187e7b627bb1268744023aa2258e8a7032f5e
parent b201e7588487eaee2d2f46444afd3eb5722abc07

Progress towards splitting MediaProvider UID.

We're working towards making MediaProvider into a Mainline module,
which means it can no longer share the "android.media" UID built
into the OS.  The major reason for this is because they're signed
with separate keys, but a secondary reason is that we don't know what
database customizations an OEM has performed in their MediaProvider.

Ensure that packages are requesting the permissions they actually
depend on, instead of relying on permissions requested by other
packages under the shared UID.

Bug: 144247087
Test: atest --test-mapping packages/providers/MediaProvider
Change-Id: I4891995c478f3ab49c7c54ca4f4fb5c203cf3f04

AndroidManifest.xml

diff --git a/AndroidManifest.xml b/AndroidManifest.xml
index 76424bf..02da97c 100644
--- a/AndroidManifest.xml
+++ b/AndroidManifest.xml
@@ -5,18 +5,21 @@
         android:versionCode="1103">
 
     <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
-    <uses-permission android:name="android.permission.RECEIVE_DEVICE_CUSTOMIZATION_READY" />
     <uses-permission android:name="android.permission.WRITE_SETTINGS" />
     <uses-permission android:name="android.permission.WAKE_LOCK" />
-    <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" />
-    <uses-permission android:name="android.permission.WRITE_MEDIA_STORAGE" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE"/>
+
     <uses-permission android:name="android.permission.MANAGE_USERS" />
     <uses-permission android:name="android.permission.INTERACT_ACROSS_USERS" />
-    <uses-permission android:name="android.permission.USE_RESERVED_DISK" />
+
     <uses-permission android:name="android.permission.WATCH_APPOPS" />
+    <uses-permission android:name="android.permission.UPDATE_APP_OPS_STATS" />
     <uses-permission android:name="android.permission.UPDATE_DEVICE_STATS" />
 
     <uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE" />
+    <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" />
+    <uses-permission android:name="android.permission.WRITE_MEDIA_STORAGE" />
+    <uses-permission android:name="android.permission.USE_RESERVED_DISK" />
 
     <application
             android:process="android.process.media"