From c5a13222060752924faafba7b8c268a4da1b64b0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hern=C3=A1n=20Casta=C3=B1=C3=B3n=20=C3=81lvarez?=
 <herna@paranoidandroid.co>
Date: Tue, 19 Mar 2019 22:36:25 +0100
Subject: [PATCH] pa: add pa-permissions whitelist.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Change-Id: I420eaa82a7439527281b0023e4e53c893ecaa9fc
Signed-off-by: Hernán Castañón Álvarez <herna@paranoidandroid.co>
---
 main.mk                                       |  3 ++
 .../privapp-permissions/pa-permissions.xml    | 41 +++++++++++++++++++
 2 files changed, 44 insertions(+)
 create mode 100644 prebuilt/etc/privapp-permissions/pa-permissions.xml

diff --git a/main.mk b/main.mk
index a388294c..177ef2c8 100644
--- a/main.mk
+++ b/main.mk
@@ -29,6 +29,9 @@ PRODUCT_COPY_FILES += vendor/pa/prebuilt/etc/apns-conf.xml:system/etc/apns-conf.
 # Include support for preconfigured permissions
 PRODUCT_COPY_FILES += vendor/pa/prebuilt/etc/default-permissions/pa-permissions.xml:system/etc/default-permissions/pa-permissions.xml
 
+# Include needed privapp permissions whitelist
+PRODUCT_COPY_FILES += vendor/pa/prebuilt/etc/privapp-permissions/pa-permissions.xml:system/etc/sysconfig/pa-permissions.xml
+
 # Copy PA specific init file
 PRODUCT_COPY_FILES += vendor/pa/prebuilt/root/init.pa.rc:root/init.pa.rc
 
diff --git a/prebuilt/etc/privapp-permissions/pa-permissions.xml b/prebuilt/etc/privapp-permissions/pa-permissions.xml
new file mode 100644
index 00000000..2e6fa473
--- /dev/null
+++ b/prebuilt/etc/privapp-permissions/pa-permissions.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+    Copyright 2019 Paranoid Android
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<permissions>
+
+    <privapp-permissions package="com.android.soundrecorder">
+        <permission name="android.permission.CAPTURE_AUDIO_OUTPUT"/>
+        <permission name="android.permission.WRITE_MEDIA_STORAGE"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.paranoid.paranoidhub">
+        <permission name="android.permission.ACCESS_CACHE_FILESYSTEM"/>
+        <permission name="android.permission.REBOOT"/>
+        <permission name="android.permission.RECOVERY"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.android.mms">
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.WRITE_APN_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.android.systemui">
+        <permission name="android.permission.REBOOT"/>
+        <permission name="android.permission.RECOVERY"/>
+        <permission name="android.permission.SHUTDOWN"/>
+    </privapp-permissions>
+
+</permissions>